Back to home

Terms of Service

The rules for using the SiteXray scanner and services.

Last updated: 2026-10-22

Using the scanner

  1. Only scan sites you are allowed to test. You may scan a website only if you own it, manage it, or have the owner's permission. You confirm this before every scan.
  2. No abuse. Do not automate scans, try to get around rate limits, or use the scanner to map or attack sites you do not control. We may block access if we see this.
  3. Passive checks only. The scanner reads public pages and a small set of well-known file paths. It is not a penetration test, and a good grade does not guarantee a site is secure.
  4. No warranty. The scanner is provided as is. Results can be incomplete or wrong (for example, when a server hides its version or a distribution has backported a fix). Verify findings before acting on them.

Paid services

Fix sprints, monitoring and managed patching are agreed in writing (email is fine) before work starts, including scope, price and the access you grant. We work only on systems you authorize, keep access to what the job needs, and remove it when we finish. Changes to production are made at agreed times and you remain responsible for backups unless we agree otherwise.

Liability

To the extent the law allows, we are not liable for indirect or consequential losses, and our total liability for a paid service is limited to the amount you paid for it in the previous 12 months.

Changes

We may update these terms. Material changes will be shown on this page with a new date.

Contact

Questions about these terms: use the contact form.