Version 1.0 | Last Updated: 09.22.2026
This Acceptable Use Policy (this “AUP”) is part of the Agreement between Discern and Customer described in the Discern Security Master Subscription Terms at https://www.discernsecurity.com/terms-of-service (the “Terms”). It applies to all use of the Service by Customer and its Authorized Users, and Customer is responsible for their compliance. Capitalized terms used and not defined in this AUP have the meanings given in the Terms. A material violation of this AUP is a material breach of the Agreement and may result in immediate suspension under Section 10 of the Terms.
1.1 Customer may connect to the Service, and may direct the Service (including Automated Actions) at, only systems, accounts, and environments that Customer owns or is expressly authorized to monitor and manage. Customer shall not use the Service to assess, scan, monitor, access, or act on any system of a third party without that third party’s authorization.
1.2 Customer shall not use the Service, any Output, or any information obtained through the Service to attack, exploit, gain unauthorized access to, or disrupt any system, or to develop or distribute tools designed to do so. Information the Service surfaces about vulnerabilities and misconfigurations is provided solely so that Customer can remediate its own environment.
2.1 Customer shall not, and shall not permit any third party to:
(a) use the Service in violation of applicable law or third-party rights, or to store or transmit unlawful, infringing, or deceptive material;
(b) interfere with or disrupt the integrity or performance of the Service, other customers’ use of the Service, or the networks and systems used to provide it;
(c) attempt to gain unauthorized access to the Service, to any Discern system, or to any other customer’s data or configurations;
(d) probe, scan, or test the security of the Service, or conduct penetration testing against it, without Discern’s prior written consent;
(e) introduce malicious code into the Service or use the Service to distribute malicious code;
(f) circumvent usage limits, authentication, or other access or security controls, or share Authorized User credentials;
(g) access the Service by automated means other than interfaces Discern documents, or scrape or bulk-extract data from the Service;
(h) submit data to the Service that Customer lacks the right to submit, or data prohibited by Section 6.6 of the Terms; or
(i) engage in the conduct restricted by Section 2.4 of the Terms, including resale, competitive use, benchmarking publication, and use of the Service or Outputs to train an artificial intelligence model.
3.1 If Customer discovers a suspected vulnerability in the Service itself, Customer shall promptly create a support ticket inside the Discern Platform and shall not publicly disclose it before Discern has had a reasonable opportunity to remediate. Discern welcomes good-faith reports and will not treat good-faith research conducted within this Section 3 as a violation of this AUP.
4.1 Discern may investigate suspected violations of this AUP and may suspend access as stated in Section 10 of the Terms, remove or disable material that violates this AUP, and terminate for material breach as stated in Section 9.2 of the Terms. Discern will use the least severe effective measure reasonably available and, except where Section 10 of the Terms permits immediate suspension, will contact Customer before acting.
4.2 Reports of abuse involving the Service may be sent to [abuse email].
5.1 Section 17 of the Terms governs updates to this AUP. Discern shall post each updated version at https://www.discernsecurity.com/acceptable-use-policy with a new version number and “Last Updated” date and shall maintain an archive of prior versions.
