ACCEPTABLE USE POLICY

Last updated June 29, 2026

This Acceptable Use Policy (“AUP”) governs your use of the security scanning and monitoring services provided by fatih denli (doing business as VibeLegit) at https://vibelegit.io (the “Services”). It forms part of, and should be read together with, our Terms of Service. By using the Services you agree to this AUP.

The single most important rule: you may only scan websites and systems that you own or for which you have explicit, documented authorisation to test. Scanning systems without permission may be illegal in your jurisdiction.

1. AUTHORISATION REQUIREMENT

VibeLegit performs active scanning — it sends real HTTP requests to the target you submit. You represent and warrant that, for every URL you submit, you either:

own the website or system, or
have obtained explicit, current permission from the owner to perform security testing on it.

You confirm this each time you start a scan via the consent checkbox. You are solely responsible for ensuring you have the right to scan a target. Unauthorised scanning may violate laws such as the U.S. Computer Fraud and Abuse Act (CFAA), the UK Computer Misuse Act, and equivalent legislation elsewhere.

2. PROHIBITED ACTIVITIES

You must not use the Services to:

Scan, probe, or test any website or system you do not own or are not authorised to test.
Attempt to disrupt, overload, or deny service to any target, or use the Services as part of a denial-of-service attack.
Use findings from the Services to attack, exploit, or gain unauthorised access to any system.
Circumvent, disable, or interfere with our rate limiting, SSRF protections, or other security controls.
Submit internal, private-network, localhost, or cloud metadata addresses in an attempt to reach systems you are not entitled to reach.
Reverse engineer, scrape, resell, or create derivative commercial scanning services from the Services without our written permission.
Upload or transmit malware, or use the Services to store or distribute unlawful, infringing, or harmful content.
Impersonate any person or entity, or misrepresent your authorisation to scan a target.
Violate any applicable law, regulation, or third-party right.

3. FAIR USE AND RATE LIMITS

The Services are subject to rate limits to protect both your targets and our infrastructure. You must not attempt to bypass these limits through automation, multiple accounts, or other means. We may throttle or suspend usage that we reasonably believe is excessive or abusive.

4. THIRD-PARTY INFRASTRUCTURE

The Services run on third-party infrastructure including Vercel (hosting), Supabase (database), Lemon Squeezy (payments), and Anthropic (AI fix recommendations). You must not use the Services in any way that violates the acceptable use terms of these providers.

5. ENFORCEMENT

We may investigate suspected violations of this AUP. If we believe a violation has occurred, we may, without prior notice and at our discretion: issue a warning, throttle or suspend your access, cancel scans, refuse service, retain logs as evidence, and/or report unlawful activity to the relevant authorities. Violations may also result in termination under our Terms of Service without refund.

6. REPORTING ABUSE

If you believe someone is using VibeLegit to scan your systems without authorisation, or is otherwise violating this policy, contact us immediately at getvibelegit@gmail.com with relevant details (such as your domain and approximate timestamps) so we can investigate.

7. CHANGES

We may update this AUP from time to time. Continued use of the Services after changes take effect constitutes acceptance of the revised policy.

8. CONTACT US

fatih denli (doing business as VibeLegit)
Email: getvibelegit@gmail.com
Or visit vibelegit.io/contact