[ legal ]

Acceptable Use Policy

Last updated: 2026-11-01

Hostmetry exists to help people understand and secure what they expose on the internet. This policy applies to everyone who uses Hostmetry Search, Monitor, History, the API or any data obtained from them.

Permitted use

• Discovering and monitoring systems you own or are authorized to assess.
• Penetration testing and red teaming within a written scope.
• Bug bounty work within the rules of the program.
• Academic, journalistic and security research, including aggregate statistics about the internet.
• Threat intelligence and defensive security operations.

Prohibited use

You must not use Hostmetry or its data to:

• access, attack, exploit or disrupt any system without the owner’s authorization;
• build target lists for unauthorized exploitation, ransomware, botnets or credential attacks;
• harass, stalk, dox or track individuals;
• send spam or unsolicited bulk messages to contacts found in the data;
• resell or republish bulk Hostmetry data without a written agreement;
• evade Hostmetry rate limits, share accounts or API keys, or scrape the platform;
• break any applicable law, including computer misuse, privacy and export-control laws.

Responsible disclosure

If you find a vulnerable system that you do not own, we encourage you to notify its owner or the relevant national CERT rather than accessing it. Do not go beyond what is needed to confirm an issue.

Enforcement

We may suspend or terminate access, without refund, for any violation of this policy, and may cooperate with law enforcement and affected parties when required by law.

Reporting misuse

If you believe someone is misusing Hostmetry, write to abuse@hostmetry.com.