Acceptable Use Policy

Last updated 15 August 2026

The short version. Test your own systems, not other people's. Our tools find real vulnerabilities, which makes pointing them at a stranger both harmful and, in most places, a crime.

This policy applies to everyone using Nionto products. It forms part of our Terms of Service.

Authorisation is the rule that matters

Mayhem Monkeys performs active security and quality testing. You may only submit a target if you own it, or you hold documented permission from the owner to test it. "It is publicly reachable" is not permission. Neither is a bug bounty page, unless its scope actually covers the target and the testing you are running.

We may ask you to prove ownership before or during a hunt, and we may refuse or stop a hunt at any time. Submitting an unauthorised target is grounds for immediate termination, and we will cooperate with lawful requests from affected parties and law enforcement.

You must not use the Services to

Test, scan, or attack systems you do not own or have written authorisation to test.
Cause deliberate disruption, including denial-of-service against any target, ours or anyone else's.
Access, collect, or exfiltrate other people's personal data.
Develop, host, or distribute malware, ransomware, or tooling whose main purpose is unauthorised access.
Break the law, infringe intellectual property, or evade sanctions or export controls.
Resell, sublicense, or white-label the Services without our written agreement.
Circumvent plan limits, licence checks, rate limits, or billing.
Interfere with our infrastructure or other customers, including by probing our own systems without permission.

Findings and disclosure

Findings we produce are for you and describe weaknesses in your systems. Handle them carefully; a report is a roadmap for an attacker. If a hunt incidentally reveals a vulnerability in a third party's system, do not exploit it, and disclose it responsibly to that party.

Fair use of compute

Plans described as unlimited are meant for normal use by one customer. We may apply reasonable rate limits, queue work, or contact you if usage looks automated at a scale that degrades the service for others. We will always talk to you before taking action on a good-faith customer.

ModelCoor devices

Your licence covers devices you own or control. Do not share licence keys outside your household or organisation, and do not use ModelCoor to build a service that resells inference capacity to third parties without an agreement with us.

Reporting abuse

If you believe someone is misusing our Services, or that a Nionto product has been pointed at a system you own without your permission, tell us through the contact form and mark it urgent. We take that seriously and will investigate promptly.

Enforcement

Depending on severity we may warn you, pause a hunt, suspend features, or terminate the account. Where it is safe and lawful to do so, we prefer to contact you first and give you a chance to fix the problem.