Authorized testing

Airship is a security tool, and its agents act on real systems. You are solely responsible for making sure you have authorization to test every target you scan.

Before you scan

• Own the target, or hold explicit, documented permission from its owner.
• Confirm the scope: which hosts, applications and environments are included.
• Check the terms of any cloud or hosting provider that runs the target.

Testing systems without authorization may violate laws such as the Computer Fraud and Abuse Act (CFAA) and equivalent laws elsewhere. The terms of service set out each side's responsibilities.

Your data

Your configurations and scan results are yours. Airship doesn't access or review your scan data except to operate the service, investigate abuse or comply with law. See the privacy policy.