# Acceptable Use Policy — Hexes Security

> What customers and users may not do with Hexes products, services and websites.

- Canonical: https://hexessecurity.com/legal/acceptable-use-policy
- Last updated: 2026-11-13
- Site index for agents: https://hexessecurity.com/llms.txt

_Legal_

# Hexes Acceptable Use Policy

Version 1.0 · Effective 2026-11-11 · Status: published

**Version 1.0 · Effective date: 2026-11-11**

This Acceptable Use Policy (**"AUP"**) applies to everyone who uses the products, services, portals and websites of **Hexes Security, Inc.** (together, the **"Offerings"**, which has the meaning in the Hexes Customer Agreement and also includes Hexes Security, Inc.'s websites and portals; "Cloud Services" has the meaning in the Customer Agreement). It is part of the Hexes Customer Agreement and the Hexes Website Terms of Use. Hexes security products inspect and control network traffic, processes and files; they are powerful tools and must be used lawfully and responsibly.

## 1. Lawful and authorized use

You may use the Offerings only on systems, networks, workloads and data that you own or are authorized to monitor and protect, and only in compliance with applicable law. You are responsible for obtaining any authority, notices and consents required to inspect, record or capture communications and activity (including packet captures, payload inspection and data loss prevention), such as under wiretap, electronic communications, employment and privacy laws.

## 2. Prohibited uses

You must not use the Offerings to:

1. gain unauthorized access to, monitor, intercept or disrupt any system, network, account or data, or to attack, probe or scan systems you are not authorized to test;
2. develop, distribute or operate malware, ransomware, botnets, command-and-control infrastructure, or tools whose primary purpose is to evade security controls;
3. conduct surveillance of individuals in violation of law or their rights, or to target people based on protected characteristics;
4. violate the privacy, intellectual property or other rights of others, or process personal data without a lawful basis;
5. facilitate fraud, phishing, spam, money laundering, terrorism, human trafficking, child sexual abuse material, or other illegal activity;
6. violate export control or sanctions laws;
7. interfere with or overload Hexes Security, Inc.'s websites, hosted services or other systems, attempt to access another customer's data in a shared Offering (such as a console that Hexes Security, Inc. hosts for several evaluation customers), use an evaluation environment that Hexes Security, Inc. provides for anything other than evaluating the Offerings, or circumvent rate limits, license controls or security measures;
8. help or encourage anyone else to do any of the above.

## 3. Security research

Good-faith security research on Hexes software running in your own environment is welcome. Testing of Hexes Security, Inc.'s websites, hosted services and other systems must follow our Vulnerability Disclosure Policy.

## 4. Enforcement

Hexes Security, Inc. may investigate suspected violations of this AUP. If Hexes Security, Inc. reasonably believes you have violated it, it may take proportionate action, including warning you, requiring you to remedy the violation, suspending access to Cloud Services, portals or Support, or terminating the Agreement as permitted by it. Where legally permitted, Hexes Security, Inc. may report suspected unlawful activity to law enforcement or affected parties.

## 5. Reporting

Report suspected violations to legal@hexessecurity.com, and security vulnerabilities to support@hexessecurity.com (subject "Security report").

## 6. Changes

Hexes Security, Inc. may update this AUP by publishing a new version with a new version number and effective date, subject to the Customer Agreement.

[All legal documents](https://hexessecurity.com/legal)

---

_About Hexes Security:_ Hexes Security builds commercial cloud-workload security for Kubernetes: inline zero-trust enforcement at layer 7 — network, process and file — from policy learned from each workload (Learning → Watching → Enforcing). It extends inline enforcement to eBPF, AI-agent and MCP traffic, and the software supply chain. Hexes is not open source, not a CSPM/CIEM, not a SIEM and not a CNI.