Acceptable Use Policy
Last updated 19 October 2026.
This policy covers use of StackSiren, including Deep Scan. It sits alongside our Terms of use and Privacy policy.
Allowed use
- Scan and Deep Scan only hosts you own or are expressly authorised to test.
- Complete ownership verification (DNS TXT or
/.well-knownfile) and the consent tick before any Deep Scan. - Use results to improve the security of systems you are responsible for.
Forbidden use
- Scanning or Deep Scanning any third-party site without authority.
- Trying to bypass ownership verification, the blocklist, rate limits or the kill switch.
- Using StackSiren to attack, disrupt, or gain unauthorised access to any system.
- Reselling or providing StackSiren as a scanning service against targets your customers have not authorised you to test (unless we have agreed that in writing).
- Probing government, health, emergency-services or military domains, or any domain on our blocklist.
Platform rules
You must also follow the acceptable-use and security-testing rules of any platform that hosts the target (for example Vercel, Netlify, Lovable, Replit, Bolt, Supabase). Permission in StackSiren does not replace those rules.
UK law
Unauthorised access to computer material, and unauthorised acts that impair the operation of a computer, can be offences under the UK Computer Misuse Act 1990. StackSiren is offered only for authorised testing. We may refuse service, terminate accounts, preserve logs and report suspected abuse to the relevant provider or authority.
Opt-out and abuse
Domain owners who want their domain blocked from Deep Scan, or anyone reporting misuse, should email abuse@stacksiren.com. General support: support@stacksiren.com.
Enforcement
We may suspend or terminate access, cancel Deep Scan jobs, and keep abuse-related logs as described in our Privacy policy, without refund where you have broken this policy (statutory rights unaffected).