Compliance & Authorization Compliance

All RedFalcon detection runs strictly within authorized scope. We assert and enforce: use this tool only on your own assets or targets you are explicitly authorized to test. Unauthorized use is illegal. Built-in authorization gate: unauthorized use degrades to principle explanations with no active scanning.

✔ Own / Authorized Targets Only ✔ Built-in Authorization Gate ✔ Unauthorized Self-Degrade ✔ Authorization Archived

1. Condition of Use: Authorization

Lawful use requires: your own assets, or targets you hold written authorization for. The distinction:
  • Own assets: websites/systems/intranet assets you own, operate, host, or are responsible for (e.g. your official site, your server, systems you maintain).
  • Written authorization: a valid written agreement with the target owner (authorization agreement / commissioned testing contract / authorization letter) specifying scope and time.

2. Built-in Authorization Gate

🔐

Install Confirmation

During install you enter organization info, target domains and confirm the authorization commitment; without this, install stops.

🛡️

No Authorization = No Scan

Unauthorized or invalid authorization: the program degrades to principle explanations — no active scanning or data collection.

📜

Authorization Archived

An Authorization Confirmation Record is auto-generated and archived with the report for evidence.

⚖️

Compliance Commitment

We assert a lawful scope of use and remind the user at every run to take responsibility for their actual use.

3. Relevant Laws

📖

Cybersecurity Law Art. 12

No organization or individual may engage in activities that endanger network security, such as illegally intruding into others' networks, disrupting normal network functions, or stealing network data.

📖

Cybersecurity Law Art. 27

No one may provide programs or tools for illegal intrusion, disruption of normal network functions, or data acquisition beyond normal means; nor support others' activities endangering network security.

📖

Criminal Law Art. 285/286

Crime of illegally intruding into computer information systems, illegally obtaining computer data, and damaging computer information systems.

🗂️

MLPS 2.0

Used together with classified compliance (等保) testing for self-assessment and remediation of your own assets.