ACCEPTABLE USE POLICY
Last updated: November 13, 2026

Ciberkit is a set of diagnostic, audit and learning tools. Many of them can be used both to defend and to attack; that is why their use is limited to legitimate purposes.

1. PERMITTED USES
- Analyzing, auditing and hardening your own systems, networks, domains, applications and accounts.
- Doing the same on third-party assets when you have express written authorization from their owner (for example, a pentest contract with a defined scope or a bug bounty program).
- Training, teaching and controlled labs.
- Investigating incidents within your organization.

2. FORBIDDEN USES
- Accessing, scanning or testing third-party systems without authorization (in Colombia, Law 1273 of 2009: abusive access to a computer system, data interception, computer damage, use of malicious software, personal data breach and website spoofing, among others; and equivalent laws elsewhere).
- Launching denial-of-service attacks, brute force against third-party services or any action that degrades others' services.
- Using the tools to obtain, crack or exploit other people's credentials or personal data.
- Impersonating others, running real phishing campaigns or facilitating fraud.
- Using the downloadable scripts outside the authorized scope.
- Attempting to breach Ciberkit outside the Responsible Disclosure Policy, automating use to bypass Free plan limits or reselling access.

3. CONSEQUENCES
We may suspend or close accounts that breach this policy, without refund, and cooperate with the authorities when required by law.

4. USER RESPONSIBILITY
You are solely responsible for how you use the tools and their results. If in doubt about whether you are authorized, don't do it.