Acceptable Use Policy

1. Purpose & Scope

This Acceptable Use Policy ("AUP") defines the ethical rules and technical standards governing access to and use of all websites, software platforms, hosted SaaS applications (including Firevision), developer APIs, and free online utilities provided by Cankal Software and IT Consultancy Ltd.("Cankal Software", "we", "us").

By accessing or using our services, you agree to comply strictly with this policy. Any breach of this AUP may result in immediate suspension or termination of your access, blocking of IP ranges, and legal action where warranted.

2. Strictly Prohibited Activities

You may not access or use Cankal Software platforms or tools for any unlawful, unethical, or abusive purpose, including but not limited to:

Unauthorised Security Scanning & Reconnaissance

Submitting third-party web assets, government networks, or private servers to our scanner tools without explicit, written authorisation from the legitimate domain owner.

Denial of Service (DoS/DDoS) & Rate Limit Abuse

Launching automated, high-frequency scripts, flooding scanner APIs, or attempting to degrade the responsiveness and availability of our infrastructure.

Malicious Payload Injection & SSRF Exploitation

Attempting to bypass our Server-Side Request Forgery (SSRF) filters, probing private IP spaces (127.0.0.1, 10.x.x.x, 192.168.x.x), or executing injection payloads.

Reverse Engineering & Proprietary IP Theft

Decompiling, disassembling, scraping, or attempting to reconstruct the proprietary algorithms, models, and architectures powering Cankal Software systems.

Illegal Content & Intellectual Property Infringement

Hosting, transmitting, or linking to malware, phishing schemes, ransomware, child sexual abuse material (CSAM), or content infringing third-party copyrights.

3. Permitted & Ethical Tool Usage

Our free tools (such as the AEO & LLM Scanner, Website Health & Structure Audit, Vulnerability Check, and 2026 OWASP Top 10 Audit) are provided free of charge for defensive, educational, and constructive optimisation purposes under the following conditions:

Self-Auditing Your Own Assets

Auditing your company's own websites, SaaS platforms, or staging environments.

Authorised Client Audits

Consultants and agencies analysing websites on behalf of consenting clients.

Fair-Use Policy & Monthly Free Scan Limits (10 Scans / Month)

To prevent automated denial-of-service, bot abuse, and resource starvation while safeguarding user privacy, our free diagnostic tools are subject to a fair-use limit of up to ten (10) free audits per calendar month per client. This quota resets automatically on the first day of every calendar month.

In accordance with our strict data minimisation and GDPR commitment, we do not record or build user tracking dossiers. Rate limiting is enforced through privacy-first browser storage and non-intrusive Google reCAPTCHA v3 risk scoring. If your business requires unlimited bulk audits, API access, or automated continuous monitoring, please contact our engineering team.

4. Enforcement, Throttling & Abuse Reporting

We actively monitor system telemetry, API query frequencies, and network logs. We reserve the absolute right to:

Implement automated rate limits, IP throttling, and CAPTCHA challenges to prevent service abuse.
Immediately terminate active sessions or revoke API access for violators of this policy.
Report severe cyber offences to law enforcement authorities, including the UK National Cyber Crime Unit (NCCU) and international counterparts.

5. Reporting Violations

If you become aware of any violation of this Acceptable Use Policy or believe our tools are being misused, please immediately notify our security team at:

Cankal Software Security & Compliance

Email: info@cankalsoftware.com