root-me.cloud: Safe harbor

We consider security research and vulnerability disclosure conducted under this policy to be authorized, lawful and carried out in good faith.

If you make a genuine effort to follow this policy during your research, we will:

• Not initiate or recommend legal action against you for your research, and not report you to law enforcement for accidental, good-faith violations;
• Consider your activity authorized under applicable anti-hacking and anti-circumvention laws, and waive any restriction in our terms of service that would otherwise prohibit it, to the limited extent needed to find and report vulnerabilities;
• Work with you to understand and resolve the issue quickly, and recognize your contribution.

This authorization does not extend to actions that this policy forbids — accessing data that is not yours beyond what a proof of concept requires, degrading our service, or harming our users. If legal action is brought against you by a third party for activity that followed this policy, we will make clear that it was authorized.

You are expected to comply with all applicable laws. If you are unsure whether a specific action is authorized, ask us before you proceed.