Acceptable Use Policy

Blocking, challenging or rate-limiting scrapers, abusive bots, credential-stuffing tools, datacenter traffic and AI crawlers on your own site is exactly what Botscope is for, and nothing in this policy limits it. The rules below are about using the service to hide or enable harm.

• Phishing: pages that impersonate a bank, telecom operator, payment provider, government body, delivery company or any other organisation, or that collect passwords, card details or other credentials under false pretences.
• Cloaking: using Botscope to show security scanners, safe-browsing services, search engines, researchers or abuse reporters something different from what your visitors see, or to keep them from seeing a page at all, so that fraudulent or harmful content avoids detection. Banning the address ranges of security vendors in order to hide a page from them is cloaking.
• Fraud and scams, including fake shops, fake invoices and payment requests, and investment or crypto schemes.
• Distributing malware, or pages that exploit visitors' devices.
• Gambling or other content that is illegal where you offer it or where your visitors are.
• Attacking, overloading or probing systems you are not authorised to test.
• Any other use that breaks the law where you or your visitors are.

We review accounts whose traffic or configuration suggests a prohibited use. When we find one, we may, without notice:

• stop protecting the site, so that every visitor and every scanner sees it as it is;
• suspend or close the account;
• keep the records relevant to the abuse;
• report it to the organisation being impersonated, the domain registrar, the hosting provider, safe-browsing and anti-phishing services, and the authorities.

Payments for an account closed under this policy are not refunded.

If you believe a site protected by Botscope is used for any of the above, tell us through the contact form and include the address of the page. We look at every report.