Policy
Authorized Services Policy
Our Protect services exist to help people and businesses secure and recover what they own. This page states plainly what that requires, and what we don't do.
Ownership or authorization is required
Before any account security or recovery engagement begins, we require that you either own the account or system in question, or have explicit, verifiable authorization from whoever does — for example, a business owner authorizing work on a company account, or an account holder authorizing work on their own behalf. We confirm this before starting, not after.
What we do
Account security checkups, authorized recovery assistance through a provider's own recovery process, MFA and passkey setup, password manager setup, admin and identity access reviews, domain/DNS protection, phishing awareness guidance, authorized security assessments of systems you own, and incident containment assistance. See Protect for the full list.
What we don't do
We do not provide unauthorized access to accounts or systems, password cracking, MFA bypass, credential theft, phishing kits, spyware, or any form of access to a third party's account without that party's explicit authorization. Requests for any of the above are declined, regardless of the story behind them.
If you're not sure it qualifies
Reach out and describe the situation. We'll tell you directly whether it's something we can help with, and if it isn't, we'll say so rather than take on work we shouldn't.