Skip to content
BreachPilot

Legal

License and authorized use

BreachPilot is open-source software for authorized security testing only. The license gives you the code. The authorization rule governs every use of it.

Only test systems you own or have explicit written permission to assess.
Apache-2.0 Open source Authorized testing only

License

BreachPilot is open source under Apache-2.0. The full terms live in the repository. This page summarizes the posture, it does not replace the license text.

Read the full licenseBrowse the repository

Contributing a change means contributing it under the same Apache-2.0 terms. See contributing for the workflow that goes with that grant.

Authorized use

The license permits running, studying, modifying, and distributing the software. It does not permit testing systems without permission. Every install, every run, and every report carries the same rule: only test systems you own or have explicit written permission to assess.

Keep the paper trail. Written authorization, a defined scope, and the tamper-evident audit chain are what separate an assessment from an incident. If a target is not in writing, it is not in scope.

What this page is

This site is the public home of an open-source security tool, not a commercial SaaS terms-of-service agreement. There are no accounts, no subscriptions, and no hosted assessment service. The binding documents are the Apache-2.0 license text and whatever written testing agreement you hold with the owner of the systems you assess.

Built for authorized security testing

Only test systems you own or have explicit written permission to assess.

Attack tooling demands a paper trail. Keep your written authorization with every run, and keep every run inside it.

Read the safety modelReport a vulnerability