Acceptable Use Policy

Credential Stuffing

Using LeakJar data or APIs to attempt unauthorized access to accounts on any service by testing breached credential pairs.

Unauthorized Access

Using our services to gain unauthorized access to any system, network, or account that you do not own or have explicit permission to test.

Offensive Security & Red Teaming

Using LeakJar services as part of offensive security operations, penetration testing against third-party systems without authorization, or any form of attack simulation without explicit written consent from the target organization.

Reselling or Redistributing Data

Reselling, sublicensing, or redistributing any data, results, or outputs obtained through LeakJar services to any third party, except where an authorized data partner is expressly permitted under a written agreement with LeakJar to provide approved data or results to its customers for defensive account-security purposes.

Building Competing Services

Using LeakJar services to build, train, or improve a competing breached credential detection product or service, except for authorized data partners using approved LeakJar data or results under a written agreement to support their customers' account-security workflows.

Harassment or Doxxing

Using breach data to harass, threaten, blackmail, or expose individuals. This includes correlating breach data to identify or target specific individuals.

Bulk Data Extraction

Systematically querying our APIs to reconstruct, enumerate, or extract our underlying breached credential datasets.

Circumventing Security Controls

Bypassing, disabling, or circumventing our security controls, rate limits, access restrictions, or k-anonymity and other privacy protections, or otherwise attempting to defeat the safeguards that keep sensitive data confidential.