Authorization to Test Policy

This policy is part of the Dino Terms of Service and is presented for acknowledgement when you connect an API or configure a target.

Why this policy exists

Dino is a security and quality testing tool. When you run a scan, Dino sends real requests to your target API, including requests designed to probe authentication, inputs, error handling, and rate limits. Sending such traffic to a system you are not authorized to test can violate computer-misuse laws, including the United States Computer Fraud and Abuse Act, the United Kingdom Computer Misuse Act, and similar laws in other jurisdictions. You are responsible for having that authorization.

Your warranties

By connecting an API, configuring a target, or running a scan, you represent and warrant that, for every target you configure or scan:

1. You own the target, or you have obtained explicit, current, written authorization from the owner to test it using Dino.
2. The testing you direct through Dino is within the scope of that ownership or authorization.
3. You have all rights necessary to provide Dino with any credentials configured for the target and to authorize Dino to authenticate to and test the target on your behalf.
4. Your use of Dino against the target complies with all applicable laws and with any agreement you have with the target's owner or hosting provider.

Prohibited use

You must not use Dino to test, scan, or send traffic to any system you do not own or are not authorized to test, to gain unauthorized access to any system, to exfiltrate data you are not entitled to, or for any unlawful purpose. See our Acceptable Use Policy.

Scope and conduct

• You control scope. Dino scans the targets and environments you configure.
• Dino bounds scan execution by request, progress, and time budgets, so a scan does not run unbounded against a target.
• Dino offers a safe mode for environments where you want to limit potentially state-changing requests.
• Dino is the testing instrument. You are the party conducting the test and are responsible for its scope and timing.

Responsibility and indemnification

You are solely responsible for ensuring you are authorized to test every target. You agree to indemnify, defend, and hold harmless Dino and its affiliates from and against any claim, loss, liability, damage, cost, or expense, including reasonable legal fees, arising out of or related to your testing of a target you were not authorized to test, or your breach of this policy.

Our rights

Dino may suspend or terminate scanning, or your access, if Dino reasonably believes you are testing a target without authorization or otherwise breaching this policy, and may do so without prior notice where necessary to prevent harm or to comply with law.

Contact

legal@usedino.dev