Acceptable Use

Last updated 12 October 2026.

Please Do

• Use the tools as much as you like, for work, study or teaching.
• Read the code your browser downloads. It is there to be read.
• Tell us when something is wrong.

Please Do Not

• Use the security headers checker against sites you are not allowed to check, or to send large volumes of requests anywhere.
• Try to make the site or its tools reach systems on private networks, or use them to attack anyone else.
• Overload the site, for example with automated requests at a rate a person could not make.
• Register accounts in bulk or with automated tools, register someone else without their permission, or try to reach another member's account or data.
• Upload or send anything unlawful, or anything that infringes someone else's rights.

If someone uses the site in a way that harms it or other people, we may block their access or close their account, and where the law has been broken we may report it to the relevant authorities.

Found a Security Issue? We Want to Hear About It

We welcome reports from people who find a weakness in greywellcyber.com in good faith. If you follow the rules below, we will not pursue or support any legal action against you for your research, and we will work with you to understand and fix the problem.

• Report it to security@greywellcyber.com.
• Test only what our vulnerability disclosure page lists as in scope, and only as far as you need to show the problem.
• Use only accounts you registered yourself. Do not access, change or delete data that is not yours, and stop once you have shown the issue.
• No denial of service, no social engineering of anyone, and no physical testing.
• Give us a reasonable time to fix it before you tell anyone else.

The full policy, including what is in scope and how quickly we respond, is on our vulnerability disclosure page. We do not run a paid bug bounty.