Authorized Security Testing Disclaimer

Purpose and scope

This page clarifies how security or red-team activities related to threatai.top (the “Service”) are conducted. Any security testing must be performed only when you have received our prior written authorization and when the testing is limited to the agreed scope, rules of engagement, and time window.

Prior written authorization required

By conducting security testing, you agree that testing is authorized only if we have provided prior written permission for:

• the specific target(s) and endpoints
• the methods and techniques to be used
• the scope, duration, and testing schedule
• any required coordination and reporting process

If authorization or scope is unclear, you must not proceed and must request written confirmation before any testing activity.

No guarantee; testing cannot eliminate all vulnerabilities

Security testing is inherently uncertain. Even when conducted responsibly and within scope, testing may not identify all vulnerabilities, may produce false positives or false negatives, and may not prevent future exploitation.

Accordingly, testing does not create a guarantee of security, safety, or compliance, and it does not eliminate all risks.

Risk-neutral and responsible conduct

Where authorization is granted, you should use commercially reasonable measures to minimize disruption, avoid data loss or unauthorized access, and promptly report issues in accordance with the agreed instructions.

Clarification of responsibility

Nothing in this page requires or guarantees that any vulnerability will be found. Where testing is permitted, each party remains responsible for its own actions and for complying with applicable laws and agreed terms.