Responsible Use

Scanlyio is intended for defensive security checking. You must only scan websites you own or have explicit permission to assess.

The service must not be used for:

• Unauthorized testing of systems you do not own or control
• Disruption, denial-of-service, or resource exhaustion of any target
• Exploitation of vulnerabilities
• Credential attacks of any kind
• Harassment or abuse directed at a website or its operators
• Evasion of security controls
• Attacks against infrastructure, including internal or private networks

The scanner itself is designed to perform only safe, non-destructive, externally observable checks, and includes protections against being used to probe private or internal infrastructure (SSRF protection).

If you believe the service is being misused, please contact us.