Legal
Responsible Scanning Policy
Effective October 30, 2026 · Version 2026-10-30
Draft pending attorney review.
Verification first
No test beyond what any browser can see runs against a target until its owner proves control (DNS TXT record, well-known file, meta tag, or platform connection). Shared hosting domains are verified per exact host only.
Scope lock
Every request is checked against the verified scope. Third-party hosts seen during a crawl are recorded but never tested. In our headless browser, requests to third parties are blocked, not sent.
Gentle by default
5 requests per second per host by default (max 20). We slow down on HTTP 429/503 and stop testing a host after 20 consecutive server errors.
No data taking
Data-exposure checks count records instead of reading them. Evidence is truncated and redacted before storage. We never store discovered secrets in full.
Safe payloads
Injection tests use a reviewed allowlist of non-destructive payloads. No DROP/DELETE/UPDATE SQL, no server file writes, no shell commands beyond a timed sleep or a DNS callback to our own server. Write tests create clearly marked canary records and delete them.
Identification
Our scanner identifies itself with the user agent “EmeraldRedTeam/1.0” and an X-RedTeam-Scan-Id header. See /scanner for our egress IPs and how to opt out.
Contact
Emerald Infinite, Business address pending. legal@emeraldredteam.com