Acceptable use policy
Use our services to protect sites you own or are authorized to manage. Everything else is off limits.
Last updated: October 28, 2026
1. Permitted use
You may use Patchwise services to scan, audit, patch, and harden PHP sites that you own or are explicitly authorized to manage. You may use our free health check to assess your own sites. You may use our client portal to manage your orders, tickets, and profile. You may read and share our publicly published articles and guides with attribution.
2. Prohibited uses
You may NOT: (a) request scans of sites you do not own or are not authorized to test — this is unauthorized scanning and may be illegal. (b) Use our reports or findings to exploit, harm, or attack any site, including your own. (c) Attempt to use our infrastructure, edge functions, or scan tools to attack, overload, or probe systems. (d) Reverse-engineer, decompile, or attempt to extract our internal methodologies or tools. (e) Misrepresent our findings in public statements or legal proceedings. (f) Share your account credentials with others. (g) Use our services in violation of any applicable law.
3. Scan authorization
By submitting a scan request, you confirm that you own the target site or have written authorization from the site owner to scan it. We may request proof of ownership or authorization before proceeding. If we determine that a scan request is unauthorized, we will refuse the scan and may suspend your account. We cooperate with law enforcement in cases of suspected unauthorized scanning.
4. Reporting and findings
Our scan reports and findings are provided for your internal defensive use. You may share them with your hosting provider, developer, or security team. You may NOT publish them publicly, use them to disparage competitors, or present them as evidence of another party's negligence without our written consent. Findings are point-in-time snapshots and may not reflect the current state of a site.
5. Account security
You are responsible for maintaining the security of your account credentials. Use a strong, unique password. Enable two-factor authentication if available. Notify us immediately if you suspect unauthorized access to your account. We are not liable for losses resulting from compromised account credentials.
6. Violations and enforcement
If you violate this policy, we may: warn you, suspend your account, terminate services without refund, report unlawful activity to authorities, and pursue legal remedies. We investigate violations promptly and act based on the severity and intent of the violation. Most issues can be resolved with a warning if they are unintentional.
7. Contact
To report a violation or ask whether a specific use is permitted, email us at the address on our contact page.