Acceptable Use Policy

Use SteelCortex lawfully and responsibly

SteelCortex services, client accounts, website features and security capabilities must be used only for lawful purposes and within the authority granted to the user or client organisation.

Prohibited activity

• Accessing, scanning, testing or interfering with systems without proper authorisation.
• Uploading, distributing or facilitating malware, malicious code or harmful payloads.
• Using SteelCortex to harass, threaten, defraud or unlawfully monitor another person or organisation.
• Attempting to bypass access controls, usage limits, authentication or security mechanisms.
• Using stolen credentials, unlawfully obtained data or information that the user has no right to process.
• Interfering with the availability, integrity or performance of SteelCortex or third-party systems.
• Sharing client credentials or allowing unauthorised persons to use a restricted account.
• Using security findings to attack, exploit or publicly expose third parties without lawful authority.

Authorised security testing

Security testing must remain within the written scope agreed for the relevant engagement. Users must not assume that access to SteelCortex or a client account authorises testing of unrelated assets, suppliers, customers or third parties.

Account responsibilities

Users are responsible for protecting account credentials, following MFA requirements where enabled and promptly reporting suspected compromise. Client administrators should remove access when a user no longer requires it.

Enforcement

SteelCortex may restrict or suspend access where misuse, security risk or a material breach of this policy is reasonably suspected. Serious unlawful activity may be reported to the relevant client, provider or authority where legally required or appropriate.

Questions

If you are unsure whether an activity is authorised, stop and obtain written confirmation before proceeding.