Acceptable Use Policy

Permitted use

RedCell is designed for authorized security practitioners and defenders. Permitted use includes:

• Authorized penetration testing — validating vulnerabilities and proof-of-concepts within explicitly authorized target scopes.
• Bug bounty reconnaissance — mapping attack surfaces, enumerating subdomains, and identifying exposed services for in-scope bug bounty programs.
• Detection engineering — writing, testing, and tuning detections against your own telemetry.
• Incident response — scoping, containment, and remediation on systems you operate.
• Threat hunting — pursuing hypotheses across logs and telemetry you are authorized to access.
• Secure code review — auditing code on systems you own or are authorized to test.

Prohibited use

The following are strictly prohibited:

• Unauthorized access to any system, network, account, or data.
• Targeting systems you do not own or are not explicitly authorized to test.
• Violating defined rules of engagement (ROE) or exceeding authorized scope boundaries.
• Any unlawful activity, or activity that violates the rights of others.
• Using RedCell outputs to develop malware, exploits, or tooling intended to cause harm.

Enforcement

We reserve the right to suspend or terminate accounts, without notice, for any violation of this policy or any use of RedCell that we reasonably believe to be unauthorized, unlawful, or harmful. You are responsible for ensuring you have proper authorization before running RedCell against any system.