Terms of Service

1. Description of the Service

SiteSecura provides automated website security and security-posture assessment tools. Depending on your plan, the Service may provide:

• Website security scans;
• HTTPS and SSL/TLS configuration checks;
• DNS and email-security checks (including SPF and DMARC);
• HTTP security-header analysis;
• Cookie-security observations;
• Technology stack and server disclosure detection;
• Deterministic security scores;
• Security findings and prioritized recommendations;
• Scan history and trend metrics;
• Interactive security reports and PDF exports;
• Automated website monitoring and SSL expiration alerts;
• AI-assisted explanations or remediation guidance;
• Agency and team-management features;
• Custom white-label reporting for eligible plans; and
• Other features that SiteSecura may introduce from time to time.

SiteSecura is designed primarily to evaluate publicly reachable website and domain configuration information. The Service is not intended to replace a professional penetration test, vulnerability assessment, secure code review, security architecture review, incident-response service, or professional cybersecurity consultancy.

2. Authorization to Scan

You may only submit, scan, monitor, or otherwise assess a domain, website, server, or other target when:

1. You own the target; or
2. You have explicit authorization from the owner or an authorized representative to perform the assessment.

By submitting a target to SiteSecura, you represent and warrant that you have the necessary authority to request the assessment. You are solely responsible for ensuring that your use of SiteSecura complies with:

• Applicable laws and cybersecurity regulations;
• Contractual obligations;
• Hosting-provider policies and Acceptable Use Policies;
• Target website terms;
• Third-party service agreements;
• Organizational security policies; and
• Any authorization requirements applicable to the target.

SiteSecura does not determine whether you have authorization to scan a target. SiteSecura does not grant you permission to scan a third-party system. Submitting a domain to SiteSecura does not establish authorization from the domain owner.

3. Nature of Security Assessments

SiteSecura performs automated defensive security checks based on information that can be obtained through the Service's supported scanning methods. Depending on the feature and plan, assessments may inspect information such as:

• DNS records and DNSSEC parameters;
• HTTP and HTTPS response headers and redirect behaviors;
• TLS certificates, ciphers, and expiration dates;
• Security headers (e.g., HSTS, CSP, X-Frame-Options);
• Cookie security flags (e.g., Secure, HttpOnly, SameSite);
• Publicly observable technology indicators;
• Supported email-security DNS records (SPF, DMARC); and
• Publicly reachable server configuration information.

The scanner is designed to avoid destructive or intrusive testing. SiteSecura does not represent that every possible vulnerability, misconfiguration, weakness, exposure, or security issue will be detected. A scan result indicating that a check passed does not mean that the target is secure, invulnerable, compliant, or free from vulnerabilities.

4. No Guarantee of Security

SiteSecura does not guarantee that:

• A website is secure;
• A website is free of vulnerabilities or exploitable defects;
• A website cannot be compromised or subjected to attacks;
• A website will not experience downtime or performance degradation;
• A website will not experience a security incident or data breach;
• A security incident will be prevented;
• All vulnerabilities will be identified by the Service;
• All findings will be accurate, comprehensive, or complete;
• Security scores represent an absolute or exhaustive measurement of security;
• Recommendations will completely remediate any underlying vulnerability; or
• The Service will satisfy a particular compliance, insurance, regulatory, contractual, or security requirement.

Security scores are assessment indicators generated from the checks performed by SiteSecura. They should not be interpreted as a certification, seal of approval, or warranty of absolute protection.

5. Security Scores and Findings

SiteSecura may calculate security scores using predefined scoring rules and observations collected during an assessment. Scores may change when:

• Scanner rules or detection signatures change;
• Scoring methodology is calibrated or upgraded;
• Target website server configuration changes;
• DNS records or hosting providers change;
• TLS certificates change or expire;
• Security headers are modified or removed;
• Additional checks become available on the platform; or
• SiteSecura identifies improvements in its defensive assessment methodology.

A score is an informational security posture indicator, not a universally accepted security rating. Findings may contain severity, evidence, technical details, explanations, recommendations, estimated remediation time, documentation links, and confidence information. You remain responsible for independently validating findings before making security, operational, financial, or technical decisions.

6. AI-Generated Content

Certain SiteSecura plans may include AI-assisted explanations, summaries, recommendations, remediation guidance, or other generated content. AI-generated content:

• May contain technical inaccuracies, hallucinations, or incomplete guidance;
• May not be applicable to your specific server architecture or hosting environment;
• Should not be treated as professional cybersecurity or legal advice; and
• Should not be treated as a guarantee that a recommended directive will remediate an issue.

AI-generated content is generated from available scan metadata and may not identify every relevant engineering consideration. You are solely responsible for reviewing and testing all code snippets or configuration changes in a non-production environment before implementing them.

7. Prohibited Activities

You may not use SiteSecura to:

• Scan websites, hosts, or systems you do not own or lack explicit authorization to assess;
• Conduct unauthorized reconnaissance or vulnerability discovery against third parties;
• Scan private networks, local intranet hosts, or RFC 1918 addresses;
• Scan localhost (127.0.0.1 or ::1);
• Scan cloud metadata endpoints (such as 169.254.169.254);
• Conduct denial-of-service testing or volume flood attacks;
• Perform destructive, invasive, or state-altering security testing;
• Attempt authentication bypass or brute-force user credentials;
• Exploit identified vulnerabilities or deliver exploit payloads;
• Deploy malware, trojans, ransomware, or malicious scripts;
• Intentionally disrupt the availability or operations of a target;
• Perform broad, untargeted, or Internet-wide automated scanning;
• Circumvent SiteSecura's quota limits, rate limits, or concurrency restrictions;
• Abuse or overload the Service's infrastructure;
• Use SiteSecura as an anonymous proxy for unauthorized reconnaissance;
• Attempt to access another customer's organization, websites, or reports;
• Reverse engineer or decompile protected portions of the Service, except where legally non-waivable;
• Circumvent subscription restrictions or feature entitlements;
• Share user credentials in a manner that violates your purchased plan limits; or
• Use the Service in violation of any applicable local, national, or international law.

8. Account Registration

You must provide accurate, current, and complete information when creating an account. You are responsible for:

• Maintaining the confidentiality and security of your login credentials;
• Maintaining the security of your account and linked API tokens;
• Promptly notifying us of any unauthorized access or security compromise; and
• Ensuring that information associated with your account remains accurate and updated.

You must not create accounts for fraudulent purposes, use automated account-creation mechanisms, or impersonate another person or organization.

9. Organization and Agency Accounts

If you use SiteSecura on behalf of an organization or agency, you represent and warrant that you have full authority to bind that entity to these Terms. Organization administrators may have authority to invite team members, manage websites, assign permissions, view and delete audit reports, and configure white-label branding.

You are responsible for ensuring that all invited team members comply with these Terms. Agency customers are strictly responsible for obtaining proper written authorization from their clients prior to submitting client web properties to SiteSecura.

10. Reports

Reports generated by SiteSecura are provided solely for informational and defensive security-assessment purposes. Reports may include security scores, technical findings, evidence, recommendations, and historical comparisons. Reports should not be represented as:

• Official security certifications or accreditations;
• Penetration-testing certificates;
• Regulatory compliance certificates (e.g., SOC 2, ISO 27001, PCI-DSS);
• Guarantees of security or safety; or
• Warranties that a system is free from security vulnerabilities.

White-label reports may be generated by eligible subscription plans. If you distribute a SiteSecura-generated report to a third party, you are responsible for ensuring that you have the lawful right to disclose its contents.

11. Monitoring and Alerts

Where monitoring is enabled, SiteSecura periodically assesses configured targets and compares current observations against historical baselines. Alerts may be triggered by events such as SSL certificate expiration warnings, score reductions, DNS alterations, or missing security headers.

Monitoring and alerts are provided on a best-effort basis. We do not guarantee uninterrupted monitoring, immediate delivery of email alerts, detection of every configuration change, or detection of security incidents. You remain responsible for maintaining your own operational security monitoring and incident-response capabilities.

12. Third-Party Services

SiteSecura relies on vetted third-party service providers to deliver aspects of the infrastructure, including:

• Firebase Authentication: User authentication and identity verification;
• Stripe: Payment processing and subscription management;
• Cloudflare: Reverse proxy, CDN, and DDoS mitigation;
• Transactional Email Providers: Dispatch of security alerts and system emails; and
• Infrastructure & Hosting Providers: Secure application hosting and database services.

Your use of third-party features may also be subject to the respective provider's terms and privacy policies. SiteSecura is not responsible for service interruptions caused solely by third-party providers outside our reasonable control.

13. Subscriptions and Billing

Paid subscriptions are billed in advance on a recurring monthly or annual basis, as displayed at checkout. Subscription prices, quotas, and feature benefits may change over time; price changes for recurring subscriptions will be communicated in advance in accordance with applicable law.

Payments are securely processed by Stripe. SiteSecura does not store raw credit card or debit card numbers in its application databases.

14. Cancellation

You may cancel your subscription at any time through the billing dashboard or Stripe customer portal. Unless otherwise stated:

• Cancellation stops future automatic renewals;
• Paid features remain accessible until the end of your current prepaid billing cycle; and
• Cancellation does not automatically generate a refund for past periods.

Specific refund terms are detailed in our Refund & Cancellation Policy.

15. Refunds

Refund eligibility depends on your active plan, the transaction type, applicable law, and the criteria set forth in our Refund & Cancellation Policy. Where required by applicable consumer protection laws, non-waivable statutory rights are preserved.

16. Free Trials & Promotional Offers

If SiteSecura offers free trials, promotional discounts, temporary credits, or coupons, the specific terms presented at the time of the offer will govern. Promotional offers may have eligibility criteria, expiration dates, or usage limits and may be revoked if abuse is detected.

17. Usage Limits

Each subscription plan includes defined resource limits regarding monthly scans, monitored domains, report exports, team seats, and API concurrency. SiteSecura enforces these limits automatically.

You may not circumvent usage limits through multiple account registrations, bot automation, IP rotation, or credential sharing. For full details on quotas, consult our Fair Usage Policy.

18. Suspension and Termination

We reserve the right to suspend or terminate your access to the Service where reasonably necessary to:

• Protect the Service, our infrastructure, or other users;
• Investigate suspected unauthorized or abusive scanning activity;
• Prevent or mitigate security incidents;
• Enforce subscription limits and terms;
• Address recurring payment failures; or
• Comply with applicable legal orders or statutory requirements.

Where reasonably practicable, we will provide advance notice before suspension or termination, except where immediate action is required to remediate harm.

19. Intellectual Property

SiteSecura and its licensors retain all right, title, and interest in and to the Service, including software, algorithms, scanner rules, scoring methodologies, user interfaces, branding, trademarks, documentation, and recommendation libraries. No rights are granted to you except as expressly set forth in these Terms.

20. Your Data and Content

You retain ownership of all lawfully submitted content and domain targets. You grant SiteSecura a non-exclusive, worldwide, royalty-free license to access, process, and analyze submitted targets solely to the extent necessary to deliver scans, compile reports, maintain monitoring, provide customer support, and safeguard platform integrity.

Personal information is handled strictly in accordance with our Privacy Policy.

21. Confidentiality

You should avoid submitting confidential trade secrets or unneeded sensitive data into scan configurations. Where a separate Data Processing Agreement (DPA) or non-disclosure agreement applies, its specific provisions will govern confidentiality between the parties.

22. Service Availability

We strive to provide dependable, high-availability services, but we do not guarantee uninterrupted or error-free operations. The Service may be temporarily unavailable due to scheduled maintenance, security updates, third-party network outages, or events beyond our reasonable control.

23. Disclaimer of Warranties

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE SERVICE IS PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS. SITESECURA EXPRESSLY DISCLAIMS ALL WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, ACCURACY, AND SECURITY.

24. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, SITESECURA AND ITS AFFILIATES, OFFICERS, DIRECTORS, EMPLOYEES, CONTRACTORS, AND SERVICE PROVIDERS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, DATA, GOODWILL, OR ANTICIPATED SAVINGS ARISING FROM OR RELATED TO YOUR USE OF THE SERVICE.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, SITESECURA'S AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THE SERVICE WILL BE LIMITED TO THE GREATER OF:

Nothing in these Terms limits liability that cannot legally be limited or excluded under applicable law.

25. Indemnification

To the maximum extent permitted by applicable law, you agree to defend, indemnify, and hold harmless SiteSecura and its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising from or related to:

• Your unauthorized scanning of any website or domain target;
• Your breach or violation of these Terms;
• Your violation of any applicable law or third-party rights;
• Your distribution or representation of generated reports; or
• Actions or configuration changes you implement based on Service results.

26. Changes to the Service

We continually enhance our security assessment engine. We may add, modify, or discontinue features, scanner modules, scoring models, and plan allowances. Where required by applicable law, material changes will be announced in advance.

27. Changes to These Terms

We may update these Terms from time to time. When updates are published, the "Last Updated" date at the top of this page will be revised. Your continued use of the Service following the publication of revised Terms signifies your acceptance.

28. Governing Law and Disputes

These Terms and any disputes arising out of or related to the Service will be governed by the laws of [JURISDICTION], without regard to conflict-of-law principles, subject to mandatory consumer rights available under applicable law.

29. Contact Information

If you have questions regarding these Terms, please contact our legal and security teams: