Terms of use.
The rules for using DigiAsh, written to be read. By creating an account or using the service you agree to them. Last updated October 2026.
Who runs DigiAsh
DigiAsh is a free, independent project operated by its developer, known as DungeonXplorer. You can reach the operator at contact@digiash.com or through the contact page. DigiAsh is not affiliated with, endorsed by or sponsored by any of the threat-intelligence providers it connects to.
What DigiAsh does
DigiAsh searches threat-intelligence providers for an IP address, domain, URL or file hash, using API keys from your own accounts with those providers, and shows the results together with a risk score. It runs a search only when you ask it to, and uses your keys only for your searches. It never shares one person's keys or results with anyone else.
Your provider accounts and their terms
- Each key you add belongs to your own account with that provider. You agreed to that provider's terms when you signed up with it, and those terms still apply when you search through DigiAsh.
- Many free plans have conditions. Most are for non-commercial use only; some limit how many lookups you can make or how their data may be shared. DigiAsh shows the main condition of each provider's free plan next to its key, with a link to its terms, but the provider's own terms are what count.
- If you use DigiAsh for work, check that your plan with each provider allows that, and upgrade with the provider if it doesn't.
- You're responsible for activity under your keys, including staying within each provider's limits.
Using the results
- Results are for your own security work: investigating, defending systems you're responsible for, and research.
- The data comes from the providers and remains theirs. Don't resell it, republish it in bulk, or use DigiAsh to build a copy of a provider's database.
- Before you publish a report outside your organisation, check the providers' terms. For example, VirusTotal's terms don't allow you to say publicly which antivirus vendors flagged something without that vendor's permission.
Acceptable use
Use DigiAsh lawfully and in good faith. In particular, don't:
- use it to identify, track or harass private individuals;
- use it to plan or carry out attacks on systems you're not authorised to test;
- overload DigiAsh or the providers, automate searches outside the dashboard, or get around rate limits, lockouts or bot checks;
- share your account, use someone else's, or add API keys that aren't yours to use;
- try to access other people's accounts or data, or interfere with how the service works.
If you find a security problem, please report it privately to contact@digiash.com instead of testing it further. The Security Policy explains how the service is protected.
Your account
- Keep your password to yourself. Turning on two-factor authentication is strongly recommended.
- An account is for one person. You must be 16 years or older to create one.
- You can download your data or delete your account at any time from the Security panel of your dashboard.
- Accounts that break these terms or put the service or its providers at risk may be suspended or deleted, where possible after a warning.
What DigiAsh promises, and what it doesn't
- DigiAsh is provided free and "as is". It may be unavailable at times, and it may change or stop.
- Results come from third parties and can be incomplete, out of date or wrong. A low score doesn't prove something is safe, and a high score doesn't prove it's malicious. The risk score is an aid to your judgement, not a verdict: don't rely on it alone for decisions with serious consequences.
- As far as the law allows, DigiAsh and its operator aren't liable for losses arising from using the service or from the data providers return. Nothing in these terms limits liability that can't legally be limited, or affects your rights as a consumer under the law where you live.
Privacy
How personal data is handled is described in the Privacy Policy.
Changes to these terms
When these terms change, this page is updated first and the date at the top changes with it. If a change significantly affects how you use DigiAsh, account holders will be told by email before it takes effect.