Terms of Authorized Use
⚠️ impactlab.sh is a professional security research tool. Unauthorized use is illegal and a violation of these terms. Use only on systems you own or have explicit written permission to test.
1. Authorized Use Only
By using impactlab.sh, you represent and warrant that you are using the service solely in connection with:
- Systems and applications that you personally own;
- Systems for which you have received explicit, written authorization from the owner to perform security testing; or
- Authorized bug bounty programs (e.g. HackerOne, Bugcrowd, Intigriti) operating under published program policies that permit this type of testing.
2. Prohibited Use
You may not use impactlab.sh to:
- Test, attack, probe, or gather data from any system without explicit authorization;
- Capture, store, or transmit data from real users without their informed consent;
- Conduct attacks outside the defined scope of an authorized security engagement;
- Violate any applicable law, including the Computer Fraud and Abuse Act (CFAA), the Computer Misuse Act (CMA), GDPR, or equivalent legislation in your jurisdiction.
3. Data Handling
impactlab.sh captures and stores evidence from browser sessions for the purpose of building security vulnerability reports. You are responsible for:
- Ensuring you have legal authority to collect this data in your testing context;
- Deleting session data once your authorized testing engagement concludes;
- Not sharing session data that contains personal information of third parties.
All captured data is associated with your account and retained for a configurable period (default 90 days), after which it is automatically purged.
4. Responsible Disclosure
We encourage responsible disclosure of any vulnerabilities discovered using this tool. Report findings through the appropriate program channels before publishing any details publicly. Follow the disclosure policy of the program you are testing under.
5. No Warranty
impactlab.sh is provided "as is" without warranty of any kind. We make no representations regarding accuracy of scoring, completeness of evidence collection, or suitability for any particular purpose.
6. Limitation of Liability
To the maximum extent permitted by law, impactlab.sh and its operators shall not be liable for any damages arising from misuse of the service, including unauthorized access to third-party systems.
7. Termination
We reserve the right to suspend or terminate access to any account that we reasonably believe is being used in violation of these terms, without prior notice.
8. Contact
Questions about these terms: hello@impactlab.sh