Acceptable Use Policy

Effective 1 September 2026 · HostCloak · hostcloak.com

These are the rules of the road for Surface Guard, reports, and the optional Live Deck agent. Authorized targets only.

We will not scan hosts you do not control. If you do not own the system or hold written authorization to assess it, do not name it. We will not scan it as a favor.

Who you may assess

You may use HostCloak only to assess:

Systems you own, or
Systems for which you have written permission to assess.

“I found it on the internet,” “it was in a screenshot,” or “I am helping them without asking” is not authorization.

Third-party scanning is prohibited. We will not scan hosts the user does not control.

What you must not do

Enter a third party’s DNS name or IP without written authorization.
Use HostCloak as reconnaissance against networks you do not operate.
Share an account so others can scan unauthorized targets.
Point the scanner at HostCloak infrastructure, other customers, or random internet ranges.
Bypass plan caps by rotating accounts or forging webhooks.
Send a root password, sudo password, or SSH private key. We will never ask. Hosts have no password field.
Use a report to attack, coerce, or break into any system — including the host that was scanned.
Represent a grade as a pentest result or a compliance certificate (PCI, SOC 2, or otherwise).

Enforcement

Violations can result in refused scans, cancelled work, and account close. Unauthorized access to computers is illegal. HostCloak will not help you do it.

Agency / white-label use is for operators who already run boxes for other people with authorization. It does not license you to scan those people’s competitors.

Report misuse

If you believe a host was added without authorization, write to 48e2c64d4df7414b8e8ef31a4a412625@domainsbyproxy.com until a dedicated abuse address exists. See how to report abuse.