Acceptable use policy
DuckINT is for lawful, authorized open-source intelligence research. By using it you agree to the terms below.
Permitted use
Querying public or lawfully accessible information for legitimate purposes, for example:
- security research, threat intelligence and incident response;
- domain, DNS, certificate and infrastructure due diligence;
- checking the exposure of accounts, domains and assets you own or are explicitly authorized to assess.
Prohibited use
- Harassing, stalking, doxxing or profiling private individuals.
- Attempting unauthorized access to any account or system.
- Harvesting, testing or exploiting credentials.
- Circumventing provider terms, rate limits, quotas or access controls.
- Any purpose that is unlawful in your jurisdiction or the operator's.
Breach-exposure checks are only for email addresses you own or are explicitly authorized to investigate.
Searches and pivots
Every search — including a one-click pivot from a related indicator — sends real requests to third-party providers, and a search that returns results uses one credit from your daily allowance. Pivot deliberately and keep investigations proportionate to a legitimate purpose.
Data handling
DuckINT returns normalized metadata and redacts secret material server-side. It never displays or exports passwords, session tokens or reusable credentials — breach results contain breach metadata only. Do not attempt to use the service to obtain such material.
Abuse controls
Usage is subject to daily quotas and rate limits. Automated abuse, quota circumvention and attempts to overload providers may lead to suspension. Administrators can review aggregate usage, and administrative actions are audited.
No warranty
Results come from third-party providers and may be incomplete, delayed or inaccurate. DuckINT makes no guarantee of completeness or correctness and is provided as is. Verify findings before acting on them.