Acceptable Use and Security Policy

គោលការណ៍ប្រើប្រាស់ និងសុវត្ថិភាព · Version 2026-11-01 · CyberDefense IDS (ids.cyberdefense.asia)

1. What you may protect

Add only domains, IP addresses and servers that your company owns or has written permission to manage. You are responsible for every system you add.

2. The platform is not a target

Do not scan, probe, brute-force, load-test or attack the IDS servers, ids.cyberdefense.asia, cyberdefense.asia or any address of the platform. This includes port scanners such as nmap, vulnerability scanners, login guessing and floods. A security test of the platform needs written permission from the platform administrators before it starts.

3. Internal threats are blocked for 24 hours

Servers under our protection are trusted to stay friendly. A protected or monitored server that scans or attacks the IDS servers is treated as an internal threat, not as a mistake:

• it is blocked at once, without warning, for 24 hours on the IDS servers' firewalls and on Cloudflare;
• while blocked, its monitoring and alerts from the platform stop, because the platform no longer accepts its connections;
• the platform administrators are alerted with the company's name, and the event is kept in the audit log;
• a repeat may suspend the company's account.

If your server was taken over and used for the scan, tell us: the block still applies for 24 hours, and we help you clean the server.

4. Your Suricata rules and allow list

You may add alert and pass rules for your own servers. Blocking rules are not accepted: blocking is done by the platform. The IDS servers are always added to every rule set automatically, so no rule can cut your servers off from their protection. A rule that hides real attacks on your systems is your responsibility.

5. Accounts

Each account is for one person. Do not share passwords or two-factor codes. Do not use scripts, bots or automated browsers on the portal: automation suspends the account at once. Report a lost device or a suspected break-in to your company admin straight away.

6. Data

The platform stores security logs, IP addresses, alerts and findings of the systems you add, only to protect them. Detailed security logs are kept for 90 days. Blocked attacker addresses may be shared between protected companies to stop the same attacker everywhere.

7. Changes

When this policy changes, every user is asked to read and accept the new version at the next login.