Acceptable Use Policy

Checked sends real traffic to real systems. This policy sets out what you may test and how, so testing helps the people who build software and never harms anyone else. It forms part of our Terms of Service.

Only test what you are allowed to test

• Only point Checked at websites, APIs and systems you own, or that their owner has authorised you to test in writing or through a published policy, and stay within that authorisation.
• Large load tests require you to prove you control the domain. Do not try to get around the limits we place on unverified targets.
• Tell anyone who could be affected before a heavy test, such as your hosting provider or CDN, and follow their rules.
• Prefer staging or test environments, and test accounts rather than real customer accounts.

Never use Checked to

• Disrupt, overload or take down a service you are not authorised to test, or carry out any denial-of-service attack.
• Gain access to systems, accounts or data you are not authorised to access, or test stolen or leaked credentials.
• Evade blocks, rate limits or firewalls a site owner has put in place against our traffic.
• Collect personal data from sites you do not own, or scrape content in breach of a site's terms.
• Upload malware, or content that is illegal or that you have no right to share.
• Resell or share access to Checked outside your plan's seats, or interfere with Checked itself, including probing it for vulnerabilities without our permission.

How we enforce it

Our traffic identifies itself so site owners can recognise and block it (see Checked traffic). If we see or are told about misuse, we may stop running tests, block a target, suspend or close the account, and cooperate with the affected party and the authorities. We will usually contact you first unless the harm is serious or ongoing.

Report misuse

If Checked traffic is hitting a system you own without your permission, tell us here with the time and, if you have it, the X-Checked-Load-Test header value. We act on reports quickly.