Terms of service

The service runs automated security checks against websites, applications and source code that YOU connect to it, and reports the results. It is a testing aid. Checks that could not run are reported as skipped or errored and are never shown as passes.

You may connect only targets you own or have explicit permission to test. The service requires you to confirm "I own or have authorization to scan this target." before every scan and verifies control of public targets before scanning them. Scanning systems you are not authorized to test — through this service or the command-line tool — is a material breach of these terms and may also be unlawful.

Do not use the service to attack, disrupt or overload any system; do not attempt to breach the service's own security, exceed its plan limits, or interfere with other users; do not upload unlawful content or use test identities with credentials you are not entitled to use. The operator may suspend or terminate accounts that violate these rules.

Scan configurations and results about your applications belong to you. Evidence in findings is redacted before storage, but reports can describe weaknesses in your applications — treat them and any share links you publish as sensitive. Share links can be revoked in the app at any time. See the privacy policy for what is stored and how to request deletion.

The service does not guarantee that your application is secure. Checks are point-in-time observations with known blind spots; a passing scan does not mean vulnerabilities do not exist, and the service explicitly reports which checks did not run. You remain responsible for the security of your own applications.

The service is provided as-is, without an uptime commitment. Free and paid plans are limited as described on the pricing page. Where paid plans are enabled, billing is handled by Stripe; payment disputes are resolved with Stripe and the operator.

You must be at least [[AGE REQUIREMENT]] old, and able to form a binding contract, to create an account.

THE SERVICE IS PROVIDED "AS IS" WITHOUT WARRANTIES OF ANY KIND, to the maximum extent permitted by law. To the maximum extent permitted by law, the operator is not liable for indirect, incidental or consequential damages, or for losses arising from reliance on scan results, up to the amounts you paid for the service in the twelve months before the claim (or, for free use, zero). Some jurisdictions do not allow some of these limitations; in that case they apply to the smallest extent permitted.

You may stop using the service at any time and request deletion of your account and data via [[CONTACT EMAIL]]. The operator may suspend or terminate access for breach of these terms, with notice where practicable.

Material changes are announced on this page with a new version number and date. Signed-in users are asked to review and accept the new version before continuing; continued use of the service after that constitutes acceptance.

These terms are governed by [[GOVERNING LAW AND JURISDICTION]]. The operator's contact address is [[CONTACT EMAIL]][[POSTAL ADDRESS IF REQUIRED]].