Terms of Use

Summary

Control Plane Labs is provided free of charge, as-is, for personal and professional use. By using this site you accept the terms below. If you do not accept them, please do not use the site.

Acceptable use

You may use the tools and content on Control Plane Labs for:

• Personal reference and learning.
• Professional work (debugging, operations, security review of systems you are authorized to test).
• Educational or training purposes with attribution.
• Non-commercial redistribution of individual articles with attribution and a link back to the original.

You may not use the tools or content on this site to:

• Attack, probe, or test systems you are not authorized to test.
• Circumvent authentication, license, or access controls of any third party.
• Scrape the site at a rate designed to overwhelm our infrastructure or that of our data providers.
• Rebrand, resell, or re-host the tools as your own commercial product without written permission.

Tools are provided as-is

The tools on this site are provided free of charge with no warranty of any kind, express or implied. In particular:

• Not for production security auditing without independent verification. Our TLS inspector, CT-log lookup, DNS lookup, header inspector, and password strength tools are useful diagnostic aids, but no free browser tool is a substitute for a professional security audit. Do not make production security decisions based solely on a tool result from this site.
• Data completeness. Data-backed tools (CT lookup, HIBP breach check, DNS lookup) return the results the underlying data source returned at the time of your request. Data providers may have latency, may miss records, and may be temporarily unavailable.
• Client-side computation. Tools that run in your browser depend on the correctness of your browser’s JavaScript engine and the Web Crypto API. In the rare case of a browser bug, tool results may be incorrect.

We will not be liable for indirect, incidental, consequential, or special damages arising from your use of any tool or content on this site. Where liability cannot be excluded by law, our total liability is limited to $0 (zero), consistent with the free-of-charge nature of the service.

Rate limits

To keep the free tier free, server-side tool endpoints (/api/ct-lookup, /api/hibp-check, /api/cert-inspect) are rate-limited to 30 requests per IP per hour by default. If you need higher volumes for a legitimate use case, see the CertIndex API for paid access.

Intellectual property

• Original content (articles, tool intros, cheat sheets, code samples written by us) is © Ennis Studio and licensed under the Creative Commons Attribution 4.0 International license (CC BY 4.0). You may reuse it with attribution and a link back.
• Third-party content (screenshots of vendor consoles, RFC excerpts, logos) belongs to the respective owners and is used under fair use.
• Trademarks referenced on this site (Kubernetes, Nginx, Cloudflare, AWS, Google Cloud, Microsoft Azure, etc.) belong to their respective owners.

Comments

Some articles have a comments section powered by Giscus (GitHub Discussions). Comments are moderated. We reserve the right to remove comments that are spam, abusive, off-topic, contain personal data, or reveal exploit details.

Changes to these terms

We may update these terms. Material changes will be announced in the Friday recap newsletter and via a banner on this page for at least 30 days. Continued use after the effective date of a change constitutes acceptance of the updated terms.

Governing law

These terms are governed by the laws of the State of Michigan, USA, without regard to conflict-of-laws principles.

Contact

Legal: ben@ennis-studio.com Owner: Ennis Studio, Grand Rapids, Michigan, USA.