NadhifEffective date: 31 October 2026 Provider: Alhamou (hamou.de) ("Alhamou", "we", "us")
These Terms of Use ("Terms") govern your use of Nadhif, the Mac application, its command line tool, its website and its documentation (together, "Nadhif" or the "Software"). By installing, opening or using Nadhif you accept these Terms, the Nadhif License and the Privacy Policy. If you do not accept them, do not install or use Nadhif. If you use Nadhif on behalf of an organisation, you confirm that you may bind it to these Terms.
1. A proprietary product
Nadhif is proprietary software owned by Alhamou. It is not open source, and no part of it is published under an open source license. You receive a limited right to use the compiled application as described in the Nadhif License. You do not acquire any ownership of Nadhif or any right in its source code.
2. What you may do
You may install and run the official Nadhif application, as published by Alhamou, on Mac computers that you own or control, for your own personal or internal business purposes, as long as you follow these Terms.
3. Source code and protection of the Software
The source code, internal design, algorithms, audit rules, detection signatures and scripts of Nadhif are trade secrets of Alhamou. Unless Alhamou has authorised you in writing, you must not:
- access, view, open, read, copy, download, store or share any part of the source code;
- reverse engineer, decompile, disassemble, decrypt, debug, trace or otherwise analyse the application to derive its source code, rules or signatures;
- modify, patch, translate, adapt or create derivative works of Nadhif, or inject code into it;
- remove, disable or bypass any safety check, confirmation, domain verification, rate limit, licence check or other technical protection;
- extract, scrape or reuse Nadhif's rules, signatures, texts, translations or other content in another product;
- sell, rent, lend, sublicense, distribute, publish, mirror or re-host Nadhif, or offer it to others as a service;
- remove or change any copyright, trademark or other notice;
- use Nadhif, or knowledge gained from it, to build or improve a competing product.
Where a law gives you a right that cannot be excluded by contract (for example a limited right to decompile for interoperability), that right is not affected, but only to the extent and for the purpose the law strictly allows.
4. Acceptable use
Nadhif can audit Macs, servers and websites. These are powerful tools, and you are fully responsible for how you use them. You must not use Nadhif, or allow it to be used:
- against any computer, server, network, domain or website that you do not own, or that you are not explicitly authorised in writing by its owner to test;
- to get around, fake or misrepresent a domain ownership verification, an SSH host key check, or any other check Nadhif uses to make sure you are entitled to scan a target;
- to find, exploit or weaponise vulnerabilities in systems you are not authorised to test, or to gain unauthorised access to any system, account or data;
- to disrupt, overload or degrade any service, including by repeated, automated or excessive scans (denial of service);
- to collect, harvest or process personal data of other people without a lawful basis;
- for deception, fraud, phishing, impersonation, or to mislead anyone, including by presenting Nadhif reports in a false, altered or misleading way, or by claiming a certification, endorsement or audit by Alhamou that did not happen;
- to develop, distribute or support malware, spyware or any other harmful code, or for any criminal, malicious or abusive purpose;
- in breach of any applicable law, including computer misuse, data protection, export control and sanctions laws.
Active tests in Nadhif (form submissions, injection probes, uploads) are off by default and change data on the target. Turn them on only for systems you own or are authorised to test, and preferably against a staging copy.
5. Vulnerabilities in Nadhif
If you find a security vulnerability in Nadhif itself, report it to Alhamou privately through hamou.de and do not disclose it publicly before we have had a reasonable time to fix it. You must not exploit such a vulnerability, use it to access data that is not yours, or share it with others. Good-faith reports that follow this section are welcome and will not be treated as a breach of Section 3.
6. Your files, your systems, your responsibility
Nadhif moves files to its Recently Cleaned area, deletes items from the Trash when you confirm it, removes apps and packages when you ask it to, and runs read-only audits on servers you add. Before you clean or remove anything, review what Nadhif shows you. Keep backups of anything important. You are responsible for the decisions you make in Nadhif, for the commands or fixes you choose to apply from its reports, and for the systems you point it at.
Reports, findings and recommendations are provided for information only. They may be incomplete or inaccurate, may contain false positives or miss real problems, and are not a security certification, legal advice or a guarantee that a system is secure.
7. Third-party services
Some features contact third-party services (for example api.osv.dev, registry.npmjs.org, crt.sh, api.certspotter.com, web.archive.org, www.cisa.gov and Spamhaus). These services are run by third parties under their own terms. Alhamou does not control them and is not responsible for their availability, content or practices. What is sent to them is described in the Privacy Policy.
8. Updates and changes
Alhamou may update, change, suspend or discontinue Nadhif, or any feature, at any time. We may change these Terms; the new version applies from its effective date. If you keep using Nadhif after that, you accept the new Terms.
9. Disclaimer of warranties
To the maximum extent permitted by law, Nadhif is provided "as is" and "as available", without warranties of any kind, express or implied, including warranties of merchantability, fitness for a particular purpose, accuracy and non-infringement. Alhamou does not warrant that Nadhif will be error-free or uninterrupted, or that it will find every problem.
10. Limitation of liability
To the maximum extent permitted by law, Alhamou is not liable for any indirect, incidental, special, consequential or punitive damages, or for any loss of data, files, profits, revenue, business or goodwill, arising from or in connection with Nadhif or these Terms, even if advised of the possibility of such damages. Nothing in these Terms excludes or limits liability that cannot be excluded or limited by law, in particular liability for intent, gross negligence, or injury to life, body or health, or mandatory consumer rights.
11. Indemnity
You will indemnify and hold Alhamou harmless from any claims, damages, losses and costs (including reasonable legal fees) brought by third parties that result from your breach of these Terms, in particular from scanning or testing systems without authorisation, to the extent permitted by law.
12. Termination and enforcement
Your right to use Nadhif ends automatically if you breach these Terms or the License. You must then stop using Nadhif and delete all copies. Alhamou may enforce its rights by all legal means, including injunctions and claims for damages. Sections 3, 6, 9, 10, 11 and 13 continue to apply after termination.
13. General
These Terms, the License and the Privacy Policy are the entire agreement between you and Alhamou about Nadhif. If a provision is found invalid, the rest stays in force, and the invalid provision is replaced by a valid one that comes closest to its purpose. A failure to enforce a right is not a waiver of it. You may not transfer your rights under these Terms; Alhamou may. These Terms are governed by the laws applicable at Alhamou's registered place of business, without regard to conflict-of-law rules, and without depriving consumers of the protection of mandatory laws of their country of residence. If these Terms exist in several languages, the English version prevails.
14. Contact
Alhamou — hamou.de