Acceptable Use Policy
Why this policy exists
AegisCore AI™ includes genuine offensive security capability — adversarial testing, attack simulation, red team operations, and deception. Those capabilities are powerful and tightly scoped. This policy defines the boundary, and we enforce it.
1. Scope
This policy applies to all users of the AegisCore AI™ platform, the AI Security Lab, Adversarial AI Labs services, and any Blue Sentinel AI website or tool.
2. Authorized testing only
Adversarial testing, attack simulation, red teaming, prompt injection testing, and deception capabilities may be directed only at systems, models, agents, and infrastructure that you own or for which you hold documented, current authorization from the owner.
- Testing scope must be agreed in writing before execution
- Testing runs inside the isolated sandbox with no production connectivity by default; any deviation requires explicit written approval
- Authorization must be current — expired authorization is no authorization
3. Prohibited uses
- Testing, probing, or attacking third-party systems without authorization
- Using platform capabilities to develop, refine, or deploy offensive tooling against unauthorized targets
- Exfiltrating, retaining, or disclosing data encountered during testing beyond what the engagement scope permits
- Circumventing tenant isolation, access controls, or rate limits
- Using the services to violate any applicable law, regulation, or third-party right
- Interfering with the integrity or performance of the platform or other tenants
- Misrepresenting findings, posture scores, or certification status to third parties
4. Responsible handling of findings
Findings produced by the AI Security Lab may describe exploitable weaknesses. Treat them as confidential security information: restrict distribution to those with a need to know, transmit securely, and remediate or formally accept the risk through Policy Exception Management.
5. Reporting misuse or vulnerabilities
Report suspected misuse, or a vulnerability in our own platform, to AISecure@bluesentinelai.ai. We support good-faith coordinated disclosure and will not pursue action against researchers acting in good faith within a reasonable disclosure process.
6. Enforcement
We may investigate suspected violations and may suspend or terminate access, with or without notice, where we reasonably believe this policy has been breached. Serious violations may be referred to law enforcement.