Security Disclosure & Responsible Use

1. Purpose of This Platform

Qourby is a security research and vulnerability assessment tool intended to help organizations and security professionals:

Identify security weaknesses in their own web applications
Conduct authorized penetration testing and security audits
Improve security posture through proactive vulnerability discovery
Comply with security standards and regulations
Educate teams about common web security issues

2. Strictly Prohibited Uses

The following activities are ILLEGAL and PROHIBITED:

Unauthorized Access: Scanning systems without explicit permission
Malicious Attacks: Using findings to compromise, damage, or disable systems
Data Theft: Attempting to access, extract, or exfiltrate data
Service Disruption: Causing denial of service or system instability
Exploitation: Exploiting vulnerabilities for personal gain or harm
Competitive Espionage: Scanning competitors without authorization
Harassment: Using the tool to target individuals or organizations
Criminal Activity: Any use that violates local, state, or federal laws

3. Legal Framework & Compliance

Users must comply with all applicable laws and regulations, including:

United States

Computer Fraud and Abuse Act (CFAA), 18 U.S.C. § 1030 - Prohibits unauthorized access to computer systems
Electronic Communications Privacy Act (ECPA) - Governs interception of communications
Digital Millennium Copyright Act (DMCA) - Protects against circumvention of security measures

International Laws

Computer Misuse Act 1990 (UK) - Makes unauthorized access to computer material a criminal offense
General Data Protection Regulation (GDPR) (EU) - Protects personal data and privacy
Cybercrime Act (Various Countries) - Similar provisions in many jurisdictions worldwide

4. Authorization Requirements

Before scanning any domain or application, you MUST:

Verify Ownership: Prove you own the domain through DNS verification or meta tag validation
Obtain Written Authorization: If testing on behalf of a client, obtain explicit written consent that includes:
- Scope of testing (specific domains, IP ranges, applications)
- Timeframe for testing
- Types of tests authorized
- Limitations and exclusions
- Signatures from authorized representatives
Understand Legal Boundaries: Know what you are legally permitted to test
Document Everything: Maintain records of all authorizations and testing activities

5. Responsible Disclosure Policy

If you discover vulnerabilities using Qourby:

For Vulnerabilities in Client Systems

Report findings privately to the affected organization
Provide detailed, actionable information about the vulnerability
Allow reasonable time for remediation (typically 90 days)
Do not publicly disclose until after remediation or agreed timeline
Do not exploit vulnerabilities beyond what is necessary for demonstration

For Vulnerabilities in Qourby

If you discover security issues in Qourby itself, please report them responsibly:

Email: security@qourby.com
Include detailed steps to reproduce the issue
Do not publicly disclose until we have had time to address the issue
We commit to responding within 48 hours and providing updates every 7 days

6. Ethical Guidelines

As a security professional using this tool, you should:

Respect Privacy: Do not access or view data beyond what is necessary for testing
Minimize Impact: Avoid actions that could disrupt services or harm systems
Be Transparent: Clearly communicate your role and intentions to system owners
Follow Industry Standards: Adhere to frameworks like OWASP, NIST, and ISO 27001
Continuous Learning: Stay updated on laws, regulations, and best practices
Professional Conduct: Maintain integrity and ethical standards at all times

7. Platform Security Measures

Qourby implements safeguards to prevent misuse:

Domain Verification: Ownership verification required before scanning
Rate Limiting: Prevents abuse and excessive scanning
Audit Logging: All activities are logged for security and compliance
Monitoring: Automated detection of suspicious activity patterns
Account Review: Manual review of high-risk activities
Law Enforcement Cooperation: We cooperate fully with legal investigations

8. Consequences of Misuse

Violation of this policy will result in:

Immediate Account Termination: Permanent ban from the service
Legal Action: Civil lawsuits for damages and injunctive relief
Criminal Prosecution: Referral to law enforcement agencies (FBI, Secret Service, etc.)
Financial Liability: You may be held liable for all damages caused
Professional Consequences: Loss of certifications and professional standing
Public Disclosure: Your violations may be publicly disclosed

9. Educational Resources

To use this platform responsibly, we recommend familiarizing yourself with:

OWASP Testing Guide
NIST Cybersecurity Framework
SANS Security Resources
PortSwigger Web Security Academy
Professional certifications: CEH, OSCP, GPEN, CISSP

10. Our Commitment

Qourby is committed to:

Supporting legitimate security research and testing
Promoting responsible disclosure and ethical hacking
Preventing misuse of our platform
Cooperating with law enforcement when necessary
Maintaining the highest security and ethical standards

Final Legal Disclaimer

Qourby is a tool for authorized security testing only. By using this service, you acknowledge that you understand and accept full legal responsibility for your actions. We do not encourage, support, or facilitate unauthorized access to computer systems. You assume all risks associated with your use of this platform. Always ensure you have proper authorization before conducting any security assessments.

Related Policies

Questions about security, responsible use, or reporting vulnerabilities?

security@qourby.com