Legal

Terms

Last updated 14 August 2026

Plain terms for a service that attacks a website on request.

What you are authorising

When you prove a site is yours and start a scan, you are instructing us to run non-destructive security tests against that site, at the IP address your proof resolved to. You confirm you own that site or are authorised by its owner to have it tested.

That authorisation covers the host you proved and nothing else. We do not scan a second host, a subdomain or a third party on the back of it.

What we provide

A scan, a report of what it found, the log of every check it ran, and a PDF of that report. Every critical and high finding is in the free report in full. Findings at medium and low are recorded, and the full write-up that details them is the paid product.

A scan is evidence of what we tested and what came back on the day we ran it. A passing verdict means no confirmed critical or high finding stood against the site when we last looked. It is not a guarantee that your site is secure, and we do not offer one.

What you must not do

Do not point the service at a site you do not own or are not authorised to test. See our acceptable use policy, which forms part of these terms.

Payment

Payment is taken by Stripe at the point of purchase. The amount you are charged is the amount shown at checkout.

Ending it

You can stop at any time. A continuous plan stops re-scanning at the end of the period you paid for, and any badge issued from it moves to unverified.

A contact address is not published yet. Start a scan and the account area is where we answer.