Acceptable Use Policy

You may not use the service to

• Break the law, or help someone else break it.
• Get into devices, networks or accounts you're not authorized to access, or get around someone's security controls.
• Send malware, run botnets, or control compromised machines.
• Send spam, phishing or other unsolicited bulk messages.
• Attack others: denial-of-service, scanning networks you don't own, or flooding the relay.
• Store or share content that exploits children, or that infringes others' intellectual property or privacy.
• Run an exit node or relay that resells access to the service, or offer it as a public VPN or proxy for strangers.

You may not misuse the service itself by

• Probing, testing or attacking our systems, except as allowed in our security disclosure program.
• Getting around plan limits, rate limits or access controls, for example by creating many free workspaces for one organization.
• Using the relay to carry traffic that could go directly, at a scale that harms other users.
• Reverse engineering the service to build a competing one, except where the law allows it.
• Sharing your account, auth keys or API tokens with people outside your workspace.

Security testing

You may test the security of your own devices and network through the service. Testing our infrastructure is welcome under the rules on our Security & Disclosure page; please report what you find instead of using it.

What happens if this policy is broken

We may remove content, block devices, or suspend or close the account or workspace involved. Where we reasonably can, we'll warn you first. Serious or repeated violations, or ones that put others at risk, can lead to immediate suspension and reports to the authorities.

Reporting abuse

If you think someone is misusing Underpass, write to legal@getunderpass.com with what you saw, when, and any addresses involved.