# Acceptable Use Policy

Nameward checks domains from the outside using public information. That makes
it easy to point at any domain, so we ask for one thing above all: **monitor
only domains you own or manage**, or that you have permission to monitor
(for example as the MSP or agency that looks after them).

You can prove that you control a domain by adding a DNS record we give you
on the domain's page; verified domains show a "Verified" badge. It's
optional today. If someone reports that a domain is monitored without
permission, we may ask for that proof.

## You may

- Monitor your own domains and hostnames, and your clients' with their
  permission.
- Run the free scan on a domain before deciding whether to monitor it.
- Use the results, reports and alerts in your own work and with your clients.

## You may not

- Add hostnames you don't control, or use the host and port field to probe
  other people's systems. Our scanner refuses private and internal
  addresses, and we watch for patterns of probing.
- Use Nameward to harass, scrape or map organisations you have no
  relationship with.
- Try to get around rate limits or plan limits with automation or multiple
  accounts.
- Send alerts to people who haven't agreed to receive them.
- Attack, overload or reverse-engineer the service, or test its security
  outside our [responsible disclosure](/security) rules.

## What we do

If we see misuse, we may limit or suspend the account and remove the domains
involved. Where the misuse is serious or illegal, we may close the account
without notice and report it. If you think we got it wrong, write to
hello@nameward.app.

To report someone using Nameward against your domains: abuse@nameward.app.

---
Source: https://nameward.app/acceptable-use (updated 2026-10-30)