Terms of service

A vulnerability scan of the targets you specify, followed by a written report describing what was found. This is an assessment service, not a penetration test, and not a guarantee that your systems are secure.

A scan reports what it can observe at the time it runs. It cannot prove the absence of a vulnerability, and a clean report is not a certification.

You may only order scans against systems you own or have documented written permission to test. You warrant that this is the case for every target you submit.

We verify ownership before scanning, but that verification protects both of us — it does not transfer your responsibility to us. If you supply false evidence of authorisation, you are liable for the consequences.

Payment is taken through Stripe. We never receive or store your card details. Your card is authorised when you place an order and charged only once we have verified your authorisation evidence and the scan is cleared to run.

If we cannot verify your evidence, the authorisation is released and you are not charged. If a scan fails for reasons on our side, we refund it.

Report files, raw scanner output and individual findings are deleted automatically once they pass our retention window. Download anything you need before then; we cannot recover deleted material.

Records of your authorisation to be scanned are kept for as long as the order exists, as the evidence that the engagement was permitted.

Scanning carries inherent risk. While we exclude destructive checks and run nothing designed to cause harm, active scanning can in rare cases affect fragile or misconfigured systems. You accept that risk when you authorise a scan.

Our liability is limited to the amount you paid for the affected order.