Acceptable Use Policy

1.Scope

This policy is part of our Terms of Service. It applies to everyone who uses RuleFix — the website, dashboard, MCP server, API, GitHub App and any client or AI agent acting for you. You are responsible for what your agents, scripts and teammates do with your account and API keys.

2.Scan only what you are authorised to test

• Code: only connect repositories or send files that you own or have permission to share with us for analysis.
• Websites: only add websites that you or your organisation own or operate, or that you are authorised in writing by the owner to test. “It's public” is not authorisation.
• Don't use RuleFix to probe, map or find weaknesses in systems of people who haven't agreed to it, including competitors, customers or government systems.

RuleFix's website scans read publicly available pages in the way a browser would; they don't attempt logins, exploits or denial-of-service. We may refuse or stop a scan, and ask for proof of authorisation, if we have reason to think a target isn't yours.

3.What you must not do

• Break any law, including the Information Technology Act, 2000, data protection law, or export controls and sanctions.
• Upload malware, or use findings or suggested fixes to develop exploits against systems you aren't authorised to test.
• Submit personal data you have no right to process, or deliberately send special categories of personal data (for example health or financial records about individuals) as “code”.
• Attempt to access other workspaces' data, bypass authentication, row-level security or rate limits, or probe our infrastructure — except under our responsible disclosure terms.
• Overload the Service: flooding, automated account creation, or splitting work across keys or accounts to get around limits.
• Share, sell or publish API keys, or embed them in public code or client-side bundles.
• Resell or white-label RuleFix, or use it to build a competing product, without our written agreement.
• Scrape or bulk-download our rules, documentation or content beyond normal use.
• Misrepresent RuleFix findings as a certification, audit opinion or legal advice.

4.Fair use of the API and MCP server

To keep RuleFix fast and safe for everyone, these technical limits apply today (we may adjust them and will document changes):

• Requests per API key

  Value

  60 per minute (short bursts allowed)

• Request body size

  Value

  2 MB

• Files per scan call

  Value

  200

• Size of a single file

  Value

  512 KB

• Failed authentication attempts

  Value

  Throttled per client address

Plan limits (such as the number of scans per month) are on the pricing page. Requests over a limit are rejected with an error; please back off and retry. If you need more, contact support@rulefix.in.

5.Enforcement

If we reasonably believe this policy has been breached, we may remove content, stop scans, revoke API keys, throttle, or suspend or terminate accounts, as described in the Terms — with notice where we can give it. We may report illegal activity to the authorities. Serious or repeated breaches may lead to immediate termination.

6.Reporting misuse

If you believe RuleFix is being used to scan your systems without permission, or is being misused in any other way, email security@rulefix.in with the details (target, time, and any request identifiers). We will investigate promptly.