Acceptable use

You may browse the website, evaluate our services, and contact us about legitimate work. Follow applicable law and respect the rights, privacy, and safety of others.

• Unauthorised access, credential theft, bypassing access controls, or exploiting a vulnerability.
• Malware, malicious payloads, denial-of-service attempts, or activity intended to disrupt availability.
• Spam, abusive submissions, impersonation, phishing, or attempts to mislead other visitors or our team.
• Sharing information unlawfully, including confidential data or personal information you are not authorised to disclose.
• Evading rate limits, abusing enquiry endpoints, or excessive automated requests that impair the service.
• Using our identity or content to suggest an affiliation or endorsement that does not exist.

A service description about agent testing or red teaming is not authorisation to test this website, its providers, or other systems. Security testing and adversarial evaluation require a separately agreed scope, access, data-handling rules, and permission from the system owner.

Do not submit malicious prompts or payloads to enquiry channels as a substitute for an authorised evaluation environment.

Email hello@geria.io with the subject “Security report”. Include the affected page or feature, a concise description, and the minimum information needed to understand the issue.

Avoid accessing other people’s data, changing records, disrupting the service, or sending sensitive data in an initial email. Reporting a concern does not grant permission to continue testing or create a bounty or safe-harbour agreement.

To protect the website and other people, we may reject submissions, rate-limit requests, or restrict access associated with suspected abuse. Where appropriate, we may investigate the issue or comply with a lawful request from a relevant authority.

If you think legitimate use has been affected, contact us with the details so we can review it.

Read the website terms alongside these rules. Our privacy policy explains how information is handled, including technical information used to protect the service.