Scopulars NETA

Scopulars NETA — version 2026-10-07

Acceptable Use Policy

Last updated: 2026-10-07

Scopulars NETA sends real network traffic to real systems. Pointed at a system you are not entitled to test, it can constitute unauthorized access under the computer crime laws of most countries. This policy forms part of the Terms of Service and applies to everyone who uses the Service, on every plan, including the Free plan.

1. The core rule

You may only scan systems that you, or the business you act for, own, and that you have verified in the Service with a DNS record or a verification file. The Service does not currently offer scanning of systems owned by someone else, even with the owner’s written permission; clients’, customers’ and other third parties’ systems are out of scope. “It was publicly reachable”, “it did not cause harm”, “it was only a port scan” and “I was researching a vulnerability” do not make a system yours.

Ownership must be current at the time you scan — a system that has since changed hands, or whose domain or IP address you no longer control, is no longer yours to scan, even if it is still listed as verified in your account.

2. We verify ownership technically — and that check does not prove ownership

Before the Service sends traffic to a target, it requires that the target has been verified as belonging to your organization, by proving control through a DNS record or a file served from the host. Unverified targets are refused.

Two things follow, and both matter:

  • Circumventing, disabling or attempting to defeat this verification is a material breach of the Terms. This includes falsifying proof of control, abusing shared or delegated infrastructure to claim a host you do not control, exploiting a defect in the verification process, or using the Service through any route intended to bypass the check.
  • Passing the technical check does not by itself mean you own the system. The check confirms control of a DNS record or a web root; it cannot confirm ownership of the underlying servers, or that a hosting provider or upstream network permits the scanning. Making sure you only scan what you own remains your obligation regardless of what the Service allows.

3. Prohibited uses

You must not use Scopulars NETA to:

  • Scan, probe or test any system you do not own.
  • Attempt to gain unauthorized access to any system, account or data, or to escalate privileges, exfiltrate data or maintain persistence on a system.
  • Conduct denial-of-service or any other attack whose purpose or foreseeable effect is to degrade, disrupt or overload a system or network.
  • Scan third-party infrastructure, including a provider’s shared hosting, another tenant’s cloud resources, or systems belonging to your clients, customers, competitors or any business other than the one you act for.
  • Support any unlawful activity, including stalking, harassment, fraud, or violation of export-control or sanctions law.
  • Circumvent the target-ownership verification, rate limits, plan entitlements or any other technical control in the Service.
  • Resell, sublicense or provide scanning-as-a-service to third parties from your account without our written agreement, or share credentials with anyone outside your organization.
  • Interfere with the Service itself: attacking our infrastructure, disrupting other customers, or using automated means to extract data beyond the documented API.
  • Upload malware, or store content in scan notes or configuration that is unlawful.

4. Testing the Service itself

Do not run scans or attacks against Scopulars NETA’s own infrastructure. If you want to report a vulnerability in the Service, contact security@scopulars.net and give us a reasonable opportunity to respond before disclosing it. We will not pursue a good-faith reporter who acts within this paragraph.

5. Enforcement

We may investigate suspected breaches and suspend or terminate access without prior notice where we reasonably believe this policy has been breached — in particular where a user has scanned a system they do not own or has attempted to circumvent ownership verification. We may preserve and disclose records, including audit logs of scans and the account behind them, where we are legally required to do so or where it is necessary to respond to an abuse complaint or to protect our rights or a third party.

Apart from the 14-day refund described in section 5.1 of the Terms of Service, we do not owe a refund for a suspension or termination caused by a breach of this policy.

6. Reporting abuse

If you believe your systems were scanned using Scopulars NETA by someone who does not own them, contact security@scopulars.net. Include the affected addresses and the time window with time zone, so we can locate the relevant activity.

7. Changes

We may update this policy; the version identifier at the top of this page changes when we do. Questions: support@scopulars.net.