Acceptable Use Policy

Effective: July 28, 2026 · FAVZ Group · Wyoming, USA

1. Purpose

This Acceptable Use Policy ("AUP") governs your use of HexTyx and supplements our Terms of Service. By using HexTyx, you agree to this AUP.

2. Authorisation Requirement

The most important rule: only test systems you own or have explicit written permission to test. This is non-negotiable. HexTyx is a professional security tool. Misuse to attack systems without authorisation is illegal under the Computer Fraud and Abuse Act (USA), Computer Misuse Act (UK), and equivalent laws worldwide.

By submitting any target URL or system for scanning, you make a binding attestation that you have the legal right and explicit authorisation to conduct security testing on that system.

3. Prohibited Uses

You must not use HexTyx to:

Test any AI system, API, or endpoint without explicit written authorisation from the owner
Test systems belonging to governments, critical infrastructure, or financial institutions without a signed engagement agreement
Develop offensive AI attack capabilities intended for use against third parties
Generate, store, or distribute attack payloads outside of your own authorised testing environment
Attempt to extract, reverse engineer, or replicate our scan engine, prompts, or QA methodology
Circumvent plan limits, quotas, rate limits, or access controls
Share account credentials or scan reports with unauthorised parties
Submit scan results as your own original security research without crediting HexTyx
Use the free tier for commercial client engagements without a paid plan
Attempt to probe or attack HexTyx infrastructure itself

4. Responsible Disclosure

If you discover a vulnerability in HexTyx itself through your use of the platform, we ask that you report it responsibly to security@hextyx.com before public disclosure. We commit to acknowledging reports within 5 business days and resolving confirmed vulnerabilities within 90 days.

5. Enterprise and Regulated Industry Use

For testing in regulated environments (healthcare, finance, government), additional contractual requirements may apply. Contact enterprise@hextyx.com before initiating testing in these environments.

6. Enforcement

Violation of this AUP may result in:

Immediate suspension or termination of your account without refund
Reporting to relevant law enforcement authorities
Civil legal action to recover damages

We reserve the right to monitor usage patterns to detect potential misuse. We will never access the content of your scan reports except where required by law or to investigate a reported violation of this AUP.

7. Reporting Misuse

If you believe HexTyx is being misused by another user, please report it to legal@hextyx.com. We take all reports seriously.

8. Updates

We may update this AUP from time to time. Continued use of HexTyx after 14 days' notice of changes constitutes acceptance.

9. Contact

FAVZ Group
Email: legal@hextyx.com