Acceptable Use Policy

Summary for hosted labs and commercial licenses. Full legal review recommended before Enterprise contracts.

By using VulnGym you agree to:

  1. Scan only VulnGym-operated hosts (*.vulngym.com) or your licensed self-hosted instance.
  2. Accept that labs contain real RCE and SSRF — isolate self-hosted deployments.
  3. Not abuse shared infrastructure (DoS, sharing operator keys, bypassing blind evaluation for public claims).
  4. Use evaluation_mode: blind for any public or certified score report.
  5. Comply with applicable law and your cloud provider’s acceptable use policy.

Contact: legal@vulngym.com