Terms & Conditions

1. About WebScanify

WebScanify ("we", "our", "the Service") is an automated website security scanning and vulnerability assessment platform. The Service is provided at webscanify.com and via its API. These Terms govern your use of the website, scanner, reports, and all related features. WebScanify is operated from India and subject to the Information Technology Act, 2000 and its amendments ("IT Act").

2. Eligibility

You must be at least 18 years old to create an account. By using the Service you represent that:

• You are at least 18 years of age.
• You have the legal capacity to enter into a binding agreement under applicable law.
• You will use the Service only for lawful purposes and in accordance with these Terms.
• If acting on behalf of a company, you have authority to bind that company to these Terms.

3. Authorisation Requirement

You may only scan domains, systems, or web applications for which you hold ownership or explicit written authorisation. WebScanify does not perform automated verification of domain ownership prior to initiating a scan. Verification is solely your responsibility. By submitting a scan request you make a legally binding declaration that you:

• own the target domain or system, or hold documented written authorisation from the owner to conduct security testing on it; and
• will retain that authorisation documentation and make it available to WebScanify or competent authorities upon request.

Payment for a scan plan alone does not constitute proof of authorisation. By submitting a scan you make a legally binding declaration that you hold the required authorisation. False declarations may constitute an offence under Section 66 of the IT Act (India), the Computer Fraud and Abuse Act (US), the Computer Misuse Act 1990 (UK), or equivalent law in your jurisdiction.

WebScanify bears no liability whatsoever for scans performed without appropriate authorisation. Accounts conducting unauthorised scans will be suspended immediately and referred to relevant law enforcement and regulatory authorities including CERT-In.

See our Acceptable Use Policy for full details.

4. Accounts & Subscriptions

Some features require a registered account. You are responsible for maintaining the confidentiality of your login credentials. You agree to notify us immediately of any unauthorised use of your account at [email protected].

We offer free and paid subscription plans billed on a per-domain basis. By subscribing you agree to the pricing displayed at the time of purchase. Prices may change with 30 days' advance notice to existing subscribers.

Free accounts are limited in scan depth and report access. Paid accounts unlock full reports, rescan capability, PDF/DOCX/HTML export, compliance readiness checks, and advanced finding details.

5. Prohibited Activities

You must not use WebScanify to:

• Scan domains, IP addresses, or systems you do not own or are not authorised to test.
• Perform denial-of-service, brute-force, active exploitation, or any offensive attack.
• Resell, sublicense, or redistribute scan results without our prior written permission.
• Reverse-engineer, decompile, or attempt to extract the source code of the Service.
• Use automated bots, scrapers, or scripts beyond normal personal use of the Service.
• Circumvent rate limits, authentication mechanisms, or any other security control.
• Upload malicious code or attempt to compromise the integrity of the platform.
• Harvest, scrape, or collect personal data of third parties via scan results.
• Scan critical national infrastructure (hospitals, government systems, utilities) without lawful authority.

6. Scan Results, Readiness Checks & Accuracy

WebScanify provides security scan results and compliance readiness checks on an "as-is" basis. Our compliance outputs (GDPR, OWASP, PCI-DSS, NIST, ISO 27001) are automated readiness indicators only. They do not constitute a formal compliance audit, certification, or professional opinion. No WebScanify output should be submitted to a regulator, auditor, or court as evidence of compliance without independent verification by a qualified professional.

Automated scanning tools have inherent limitations and may produce false positives or miss certain vulnerabilities. You should engage qualified security professionals for critical infrastructure, regulated industries, or formal compliance requirements. We do not guarantee detection of all security issues in a target system.

7. Authenticated Scan Credentials

The Service offers optional authenticated scanning where you may provide login credentials for a target system. Regarding these credentials:

• Credentials are transmitted over TLS 1.3 (TLS 1.2, 1.1, and 1.0 are disabled) and used solely for the duration of the scan session.
• Credentials are never written to our application database. They are passed to the isolated scan worker via an encrypted internal message queue and are consumed immediately when the scan begins. After task consumption, credentials are no longer present anywhere in our systems.
• Credentials are accessible only to the scan worker process during active execution and are not logged, exported, or visible to staff.
• We do not log, export, or share credentials with any third party.

You must only provide credentials for systems you are authorised to scan. Providing credentials for systems you do not own is a violation of these Terms and may constitute a criminal offence.

8. Payment & Billing

Payments are processed by Razorpay (India) or Stripe, both of which are PCI-DSS Level 1 compliant. We do not store your card number, CVV, or full payment details. By purchasing a plan you agree to the pricing displayed at checkout.

Subscription charges are non-refundable except as set out in our Cancellation & Refund Policy. You may cancel at any time; cancellation takes effect at the end of the current billing period. Refund disputes are governed by Indian law and subject to the jurisdiction of courts in Madhya Pradesh, India.

9. Service Level Commitment

We target a monthly uptime of 99.5% for the WebScanify platform, measured as calendar-month availability excluding scheduled maintenance windows. Scheduled maintenance will be announced via a site banner or email at least 24 hours in advance where practicable.

Our target response time for support requests submitted via the in-app contact form is 2 business days (Monday–Friday, India Standard Time). We do not guarantee response times during public holidays or force-majeure events.

These are good-faith operational targets, not contractual guarantees. If you experience a significant outage (continuous unavailability exceeding 48 hours), please contact [email protected] to discuss a goodwill service credit at our discretion. No automatic credits are issued.

10. Intellectual Property

The WebScanify name, logo, software, and all content on this website are owned by or licensed to WebScanify and protected by applicable intellectual property laws including the Copyright Act, 1957 (India). You may not reproduce, distribute, or create derivative works without our prior written consent.

You retain ownership of your domain and data you submit for scanning. By using the Service you grant WebScanify a limited, non-exclusive licence to process that data solely to provide and improve the Service. We may use anonymised, aggregated scan statistics for research and transparency reporting.

11. Disclaimer of Warranties

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT ANY WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR THAT RESULTS WILL BE COMPLETE OR ACCURATE.

12. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, WEBSCANIFY'S AGGREGATE LIABILITY FOR ALL CLAIMS ARISING OUT OF OR IN CONNECTION WITH THESE TERMS OR YOUR USE OF THE SERVICE SHALL NOT EXCEED THE TOTAL AMOUNT YOU PAID US IN THE THREE (3) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM. WEBSCANIFY SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES.

Any misuse of scan results, unauthorised scanning, or illegal activity conducted by a user is solely that user's liability. WebScanify will cooperate fully with regulatory and law enforcement authorities investigating such misuse, including but not limited to CERT-In, the Ministry of Electronics and Information Technology (MeitY), and equivalent international bodies.

13. Termination

We may suspend or terminate your account with immediate effect if you breach these Terms, conduct unauthorised scanning, or engage in activities that harm the Service or other users. No refund is due upon termination for cause. Provisions that by their nature survive termination (including Sections 6, 11, 14, 15) will continue in full force.

14. Transparency

WebScanify is committed to responsible operation of a security scanning service. We will publish periodic (at minimum annual) anonymised aggregate usage and compliance reports covering scan volumes, abuse reports actioned, and policy updates. These reports will be available on our website. No personally identifiable information or scan targets will be included.

15. Changes to These Terms

We may update these Terms to reflect legal requirements or changes to the Service. We will notify registered users by email at least 14 days before material changes take effect. Continued use after the effective date constitutes acceptance. The then-current version always governs.

16. Governing Law & Disputes

These Terms are governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000, the IT (Amendment) Act, 2008, and the Consumer Protection Act, 2019 where applicable. Any dispute arising out of or in connection with these Terms that cannot be resolved amicably within 30 days shall be subject to the exclusive jurisdiction of the courts of Madhya Pradesh, India. Nothing in this clause prevents either party from seeking emergency injunctive relief in any competent court.

If any provision of these Terms is found unenforceable by a court of competent jurisdiction, the remaining provisions continue in full force.

17. Contact

For questions about these Terms, contact us at: [email protected] or visit our Contact Us page. For legal notices, use the subject line "Legal Notice - WebScanify Terms".