Use policy
hai is a security testing tool. These rules apply to every account.
Test only what you're authorized to test
Use hai only on systems you own, or that you have explicit, current, written permission to test: for example your own product, a signed client engagement, or a bug-bounty program's published scope. You are responsible for staying within that scope.
Not allowed
Using hai to access, disrupt or damage systems or data you aren't authorized to test; targeting individuals; building malicious software for use against others; handling stolen data; or breaking any law or the terms of the systems you interact with.
Avoid harm
Use the least disruptive method that confirms an issue. Avoid data loss, outages and impact on anyone outside your scope.
You're in control
hai suggests steps and code. You decide what to run and are responsible for it. Review everything before using it on a live system.
Enforcement
We may suspend or close accounts that break this policy, and we cooperate with lawful requests.