Last updated: 2026-06-09. Governing law: Israel.

Acceptable Use Policy (AUP)

This Acceptable Use Policy ("AUP") governs your use of the EyalSec / es2 Service and the es-python interpreter (the "Service") provided by EyalSec ("EyalSec"). It is incorporated by reference into the Terms of Service (/legal/terms). Capitalized terms have the meanings given in the Terms. Violating this AUP may result in suspension or termination (Section 5).

es-python is a defensive security-monitoring tool: it runs on your own machines, taints and reports your own process data, and fuzzes its own process inputs. The rules below keep that use lawful and within scope.

1. Authorized monitoring only

• Install and run es-python only on systems you own or are expressly authorized to monitor. You must have the right to inspect the runtime data of the monitored processes.
• Obtain all consents and authorizations required by law before monitoring, including from device owners, employees, contractors, and any individuals whose data may appear in Event Payloads.
• Do not use the Service to surveil third parties or third-party systems without authorization. Do not deploy es-python on systems you do not control or have not been authorized, in writing where appropriate, to monitor.

2. No offensive or malicious use

You must not use the Service to:

• develop, test, store, stage, or deliver malware, ransomware, exploits, or attack tooling against third-party systems without authorization;
• conduct unauthorized penetration testing, intrusion, or "red-team" activity against systems you do not own or are not authorized to test;
• exfiltrate, intercept, or collect data you are not authorized to access;
• circumvent security controls, access controls, or authentication of any system without authorization; or
• engage in any activity that is unlawful, infringing, defamatory, or harmful to others.

(Authorized security research and testing on your own or authorized systems is permitted; that is the intended use of es-python's taint, fuzz, and foreign-code-detection features.)

3. Export controls and sanctions

You represent, warrant, and covenant that:

• You will comply with all applicable export-control and economic-sanctions laws, including those of Israel, the United States (EAR/OFAC), the European Union, and the United Kingdom.
• You will not access, use, download, export, re-export, or transfer the Service or es-python, directly or indirectly, in or to any comprehensively embargoed or sanctioned destination, currently including Iran, North Korea, Cuba, Syria, and the sanctioned regions of Ukraine (including Crimea and the so-called Donetsk and Luhansk regions), or any other destination subject to comprehensive sanctions.
• You are not a denied, restricted, or sanctioned party (e.g., on the US SDN, Entity, or Denied Persons lists, the EU/UK consolidated sanctions lists, or any equivalent Israeli list), and you are not owned or controlled by, or acting on behalf of, any such party.
• You will not use the Service for any prohibited end-use (e.g., weapons of mass destruction, or military/intelligence end-uses that require a license you do not hold).

See the export-control memo at /legal/export for EyalSec's self-classification.

4. Fair use of the platform

• Do not attempt to gain unauthorized access to the Service, other customers' data, or EyalSec's infrastructure.
• Do not probe, scan, or test the vulnerability of the Service except with EyalSec's prior written authorization (e.g., under a coordinated disclosure program).
• Do not overload, disrupt, or abuse the ingestion API or dashboard (e.g., denial-of-service or excessive automated requests beyond your plan limits).
• Do not misrepresent your identity or your authorization to monitor a machine.

5. Consequences of violation

EyalSec may investigate suspected violations and may suspend or terminate your access to the Service or es-python, remove offending content, and/or report unlawful activity to authorities, with or without notice depending on the severity and applicable law. EyalSec may also take these steps where required to comply with law or sanctions. Termination for AUP violation does not entitle you to a refund and does not limit EyalSec's other remedies.

6. Reporting

Report suspected violations or security issues to eyal@eyalsec.com.