Security Assessment Authorization

Assessments require customer authorization

BitGuardIT performs security assessments only against assets the customer owns or is explicitly authorized to assess. Customers prove authorization through ownership verification (such as DNS) or a staff-reviewed authorization letter before scanning proceeds.

BitGuardIT does not offer a service for assessing third-party systems without that authorization. Submitting unauthorized targets violates the Terms of Service and Acceptable Use Policy and may violate applicable law.

Technical evidence that may be collected

Depending on the authorized assessment and enabled capabilities, BitGuardIT may collect and process:

• DNS information for authorized domains.
• Network metadata, including addresses, ports, and protocol observations.
• HTTP and TLS observations, including certificates and security headers.
• Exposed service information visible from authorized external assessment.
• PCAP or other network data when the customer uploads captures or enables the Network Intelligence Capture Agent.
• Security findings and supporting evidence generated from those observations.
• Results of controlled security-validation activities when explicitly authorized.

Sensitive information that may be encountered

If a customer-authorized asset exposes sensitive information — for example in public HTTP content, certificates, DNS records, misconfigured services, or submitted packet captures — that information may appear in assessment evidence.

BitGuardIT does not market assessment as a credential-harvesting service. Encountering exposed secrets or personal data is a possible consequence of assessing systems that already expose them. Access controls and tenant isolation in the SaaS are applied to assessment evidence. Customers remain responsible for not submitting assets they are not allowed to assess and for handling findings in accordance with their own policies.

Controlled validation is not unrestricted exploitation

Where BitGuardIT performs bounded security validation, it does so as controlled assessment — not as an unrestricted exploit service. Marketing and legal copy must not be read as a promise that every finding is exploited or that successful security impact is always demonstrated.

Educational programs

Educational use of BitGuardIT is still customer-authorized use. Institutions must confine student and instructor exercises to assets they own or have explicit permission to assess.

Legal review

Questions of governing law, liability allocation, insurance, certifications, and data-protection rights require advice from qualified counsel. BitGuardIT LLC does not claim certifications, regulatory approvals, insurance coverage, encryption standards, retention periods, or data-residency guarantees on this page unless they are separately documented and verified.