RiskShelter
Legal & Policy Governance

Terms of Service & Acceptable Use Policy

Legally binding rules, authorized scanning requirements, Italian legal compliance, ethical conduct, and zero-tolerance abuse policies for RiskShelter.

Privacy PolicyTerms of Service & Acceptable Use

Last Updated: August 27, 2026

1. Acceptance of Terms & Legal Binding Agreement

By registering an account, accessing, or using RiskShelter (the "Platform" or "Service"), you enter into a legally binding agreement governed by Italian Law and applicable European Union Regulations. If you do not agree unconditionally to all provisions set forth herein, you must immediately cease all access and use of the Platform.

2. Core Principle: Mandatory Authorization for Security Scanning

CRITICAL RULE: You must NEVER use RiskShelter to scan, probe, enumerate, or analyze any domain, IP address, subdomain, server, or digital asset unless you possess verifiable, legitimate authorization.

2.1 Authorized Scenarios

You may only initiate scans against targets under the following strict conditions:

  1. Direct Ownership: You are the registered owner or administrative controller of the target domain/system.
  2. Express Written Authorization: You are an authorized security consultant, penetration tester, or auditor holding valid, verifiable, written consent from the target's legitimate owner specifying the scope of assessment.

2.2 Prohibited Scenarios

It is strictly prohibited to:

  • Scan third-party competitors, critical public infrastructures, healthcare systems, government portals, educational institutions, or private systems without explicit written consent.
  • Use scan results to blackmail, extort, publicize zero-day vulnerabilities without responsible coordination, or facilitate unauthorized exploitation.
  • Execute attacks, distributed denial of service (DoS/DDoS), fuzzing that causes server degradation, or automated destructive payload injection.

3. Criminal Liabilities under Italian Law (Codice Penale)

Unauthorized scanning and unauthorized probing of computer networks constitutes a serious criminal offense under the Italian Penal Code (Codice Penale). Violations of these terms may result in severe penal consequences, including but not limited to:

  • Art. 615-ter c.p. (Accesso abusivo ad un sistema informatico o telematico):
    Anyone who illegally accesses a computer or telecommunications system protected by security measures or remains in it against the express or tacit will of the owner is punished with imprisonment from one (1) to five (5) years (up to eight (8) years if involving public or critical national infrastructures).
  • Art. 615-quater c.p. (Detenzione e diffusione abusiva di codici di accesso a sistemi informatici o telematici):
    Illegal possession, procurement, or distribution of credentials or access keys to electronic systems.
  • Art. 615-quinquies c.p. (Diffusione di apparecchiature, dispositivi o programmi diretti a danneggiare o interrompere un sistema informatico):
    Distribution or deployment of tools or programs designed to disrupt, damage, or compromise computer systems.
  • Art. 635-bis c.p. (Danneggiamento di informazioni, dati e programmi informatici):
    Destruction, deterioration, cancellation, or suppression of electronic data, computer programs, or digital systems.

4. Audit Logging, Zero-Tolerance Abuse & Law Enforcement Reporting

RiskShelter operates under an uncompromising zero-tolerance policy towards cyber harassment, unauthorized reconnaissance, and malicious cyber activities.

4.1 Immutable Technical Audit Logging

To safeguard internet infrastructure and protect innocent third parties, RiskShelter logs and cryptographically audits every scan request, including:

  • Originating User Account ID & Email Address;
  • Source IPv4 / IPv6 Address & Geolocation Metadata;
  • Exact Target Domain, Subdomain, and Scan Parameters;
  • Timestamp of Request and Output Generated.

4.2 Proactive Cooperation with Authorities

In the event of unauthorized scanning, malicious abuse reports, or upon receipt of a formal legal request from judicial or police authorities:

  1. Immediate Account Termination: The offending account will be immediately and permanently banned without notice and without refund.
  2. Evidence Disclosure to Law Enforcement: RiskShelter reserves the absolute right to proactively submit technical logs, user identification details, and evidence to the competent Law Enforcement agencies, including:
    • Polizia di Stato – Polizia Postale e delle Comunicazioni;
    • Guardia di Finanza – Nucleo Speciale Tutela Privacy e Frodi Tecnologiche;
    • Carabinieri – Reparto Indagini Telematiche;
    • Europol & INTERPOL Cybercrime Divisions.

5. Morality, Ethics & Common Sense Code of Conduct

All users of RiskShelter must uphold high standards of digital ethics and common sense:

  1. Passive & Non-Destructive Operation: Scans must remain observational and non-invasive (e.g. DNS discovery, certificate transparency logs, passive HTTP headers).
  2. Responsible Disclosure: Any vulnerabilities or security exposures detected on authorized client systems must be reported promptly and privately to the client according to established responsible disclosure standards (e.g., ISO/IEC 29147).
  3. Good Faith Security Research: Security tools are intended solely for defensive hardening, posture verification, and attack surface reduction. Any malicious or exploitative intent will result in immediate expulsion.

6. Third-Party Abuse Reporting & Blacklisting Mechanism

If you are an infrastructure owner, system administrator, or organization and believe a domain belonging to you has been scanned without your permission through RiskShelter:

  • Abuse Email: Contact [email protected] immediately with the subject [ABUSE REPORT] - Domain Name.
  • Immediate Domain Blacklisting: Upon verification, RiskShelter will permanently add your domain to our global scanning exclusion blacklist, preventing any future scans across all user accounts.
  • Investigation & Legal Assistance: We will investigate the originating user account, suspend any abusive actors, and provide relevant forensic records to your legal counsel or law enforcement upon formal request.

7. Account Responsibilities & Subscriptions

  • Account Security: You are responsible for safeguarding your login credentials and two-factor authentication tokens. You remain strictly liable for all actions executed under your credentials.
  • Subscription & Fair Use: Plan quotas, scan frequencies, and worker allocations are subject to our Fair Use limits. Automated scripting or abuse that threatens service stability will be throttled or suspended.

8. Disclaimer of Warranties & Limitation of Liability

  1. As-Is Security Tooling: RiskShelter provides security reconnaissance tools on an "as-is" and "as-available" basis. While we strive for high precision, we make no guarantees that scans will identify all vulnerabilities or misconfigurations.
  2. No Liability for User Misuse: RiskShelter acts strictly as a neutral technology provider. We disclaim all civil, criminal, and financial liability arising from any user's unlawful, unauthorized, or negligent use of our tools.
  3. Indemnification: You agree to defend, indemnify, and hold harmless RiskShelter, its operators, directors, employees, and suppliers from and against any claims, damages, liabilities, costs, and legal fees resulting from your violation of these Terms or infringement of third-party rights.

9. Governing Law and Exclusive Jurisdiction

These Terms of Service and any dispute arising out of or related to the use of RiskShelter shall be governed by and construed in accordance with the substantive laws of Italy, without regard to conflict of law principles.

For any legal dispute arising from or related to these Terms, the competent court of jurisdiction shall be the Court of Rome (Tribunale di Roma, Italy), without prejudice to mandatory consumer jurisdiction where applicable by EU law.

10. Contact Us

For questions regarding these Terms or legal compliance matters: