1. Lawful authority
You may submit, access, or authorize testing only for systems, accounts, data, and materials you are legally permitted to use. Do not impersonate another person or organization, misstate authority, or submit a third party’s private credentials or targets without permission.
2. Security and network abuse
- Do not probe private, loopback, link-local, metadata, internal, or otherwise unauthorized network addresses.
- Do not use redirects, DNS changes, alternate encodings, ports, oversized responses, compression bombs, or timeouts to evade target controls.
- Do not use Folkbench as an open proxy, vulnerability scanner, credential tester, traffic relay, denial-of-service tool, or persistence mechanism.
- Do not attempt to access secrets, raw evidence, other organizations’ workspaces, internal operations, or non-public systems.
3. Evidence and directory integrity
- Do not fabricate sources, measurements, identities, reviews, incidents, or correction requests.
- Do not manipulate a test environment solely to produce a misleading published result.
- Do not bribe, threaten, coordinate abuse, or exploit automation to alter listing, scoring, publication, or review outcomes.
- Do not remove required context, dates, sample limits, or source labels when reusing Folkbench results.
4. Content and high-impact use
Do not submit unlawful, infringing, deceptive, malicious, privacy-invasive, or exploitative content. Folkbench comparisons are not a substitute for qualified review in healthcare, employment, housing, credit, education, public benefits, law enforcement, or other high-impact decisions.
5. Automation and service protection
Reasonable public browsing is permitted. Automated access must respect published technical controls and may not overload the service, bypass rate limits, defeat access restrictions, scrape private or personal data, or reproduce the directory as a competing misleading service.
6. Enforcement and reporting
Folkbench may reject a target, stop a run, quarantine evidence, remove content, limit access, suspend an account, preserve relevant audit records, or report conduct when reasonably necessary. Decisions consider severity, intent, recurrence, impact, and the possibility of safe remediation.
Report suspected abuse through the contact page without including secrets or active exploit material.
7. Privacy, credentials, and sensitive data
Do not upload personal data, children’s data, special-category data, customer content, passwords, API keys, session cookies, payment information, or private evidence unless an applicable signed agreement and written authorization expressly allow it. Use synthetic or redacted data for tests.
Do not attempt to discover, export, infer, or retain another person’s credentials, private data, or workspace content. Report an accidental exposure promptly through the contact page.
8. Copyright and source use
Do not upload or republish material without the rights, license, or permission needed for the intended use. A correction or evidence submission must identify its source and preserve required attribution, dates, limitations, and confidentiality markings.
9. Legal and regulated activity
Do not use Folkbench to evade sanctions, export controls, access restrictions, contract limits, privacy law, or a provider’s security controls. Do not use a Folkbench result as the sole basis for a regulated or high-impact decision. You remain responsible for assessing the law and permissions that apply to your target and location.
10. Reports, appeals, and cooperation
Folkbench may request safe information needed to investigate abuse, preserve evidence, or correct a decision. You may submit a concrete appeal or correction through the contact page; submitting an appeal does not authorize further testing or require Folkbench to publish unverified material.
Folkbench may cooperate with valid legal process and may preserve or disclose limited information when reasonably necessary to protect people, systems, evidence, or legal rights.