FALKEN'S MAZE / ACCEPTABLE USE POLICY

Acceptable Use Policy

Effective November 1, 2026. Questions: [email protected].

Falken's Maze exists to help people harden domains they're responsible for. This policy is part of the Terms of Service.

You may

• Scan domains you own or run.
• Scan domains you have permission to test, such as a client's, an employer's, or under a bug bounty program whose rules allow it.
• Run a free report card on any domain: it only reads public information (DNS records, the certificate and the home page), the same as a browser or mail server would.

You may not

• Verify, or try to verify, a domain you don't control, or start paid scans of one.
• Use findings to attack, extort, embarrass or gain unauthorized access to anyone.
• Get around scan limits, rate limits or bot checks, for example with many accounts, scripts or rotating addresses.
• Use the service to overload, disrupt or probe internal or private networks.
• Resell access to the service, unless we have agreed to it in writing. Sharing reports with the clients whose domains you scan is fine.
• Break the law, or anyone else's rights, through the service.

If something goes wrong

We may limit, suspend or close accounts and block addresses that break this policy, and co-operate with lawful requests from the owners of affected domains and the authorities.

If you think someone used Falken's Maze against a domain you run without permission, or you'd like your domain excluded from scans, email [email protected] and we'll look into it.