Acceptable use

Effective 2026-08-07 · Shinrasec, operated by Martin Mielke

Kura distributes dual-use security tools. This policy keeps access and use authorized and accountable.

Use only within explicit scope

Run Aoba, Yuzu, and their generated artifacts only against systems you own or are explicitly authorized to assess. Confirm that the authorization covers the exact hosts, accounts, techniques, timing, and possible side effects before execution.

Prohibited activity

• Accessing, testing, disrupting, or retaining data from systems outside your authorization.
• Using the tools for malware delivery, persistence, credential theft, extortion, denial of service, or evasion of lawful controls.
• Publishing, selling, sublicensing, or sharing a download outside the licensed customer.
• Removing or altering an attribution marker to conceal redistribution.
• Bypassing Kura authentication, license, download, or administrative controls.
• Sharing Shinra ID sessions or credentials with another person.

Handle output safely

Tool output may contain credentials, system details, exploit material, or personal data. Collect only what the authorized work requires, restrict access, and delete it according to your engagement and legal obligations.

Enforcement and reporting

We may suspend access, preserve relevant access and download records, and contact the customer when activity presents risk. Report suspected unauthorized use or redistribution immediately to martin@shinrasec.com.