Abuse policy
Reporting abuse on a preview.
Houseguest™ previews are created by our customers. Reports of phishing, malware or other misuse go to one address.
How to report
Email abuse@houseguest.dev with:
- The full URL, including the hostname, for example https://app.acme.houseguest.page/login or https://staging.example.com/.
- What is wrong: phishing, malware, unwanted email or something else. For phishing, the brand or service being imitated.
- When it was seen: the date, time and time zone.
- How it arrived, if it came in a message. For an email, the full message with its headers.
- Contact details, for follow-up questions.
Screenshots help: Houseguest relays previews from the customer's own servers and does not store their pages.
What happens next
- Each report is reviewed and acknowledged. Reports of active phishing, malware or child sexual abuse material are handled first.
- Depending on what is found, the preview is ended or the customer's whole workspace is suspended. Suspension stops every preview and connection in that workspace at once and affects no other customer.
- The customer is notified where appropriate. The reporter's identity is not shared with the customer.
- Repeated or serious abuse ends the customer's access to Houseguest.
Phishing and malware
Credential harvesting, impersonation and malware are prohibited. A confirmed report leads to immediate suspension.
Copyright
Copyright notices: abuse@houseguest.dev, with the full URL and the work claimed to be infringed.
Child safety
Child sexual abuse material is reported to the National Center for Missing & Exploited Children (NCMEC), as US law requires, and the workspace is suspended. Reports go to abuse@houseguest.dev with the URL and a description. Do not attach or forward the material. Reports can also go directly to the NCMEC CyberTipline.
Other misuse
Unwanted email sent through Houseguest, public websites run on previews, attacks on the service and other misuse are handled the same way. Security vulnerabilities in Houseguest itself: security@houseguest.dev.
About preview addresses
Addresses under houseguest.page belong to customers' previews: the part before houseguest.page names the customer's workspace. Previews on a customer's own domain, such as staging.example.com, are available only after the customer proves control of that domain. Houseguest does not create the content on any preview.