Acceptance of Terms
These Terms of Service ("Terms") form a legally binding agreement between you ("User") and $Vulnera ("we", "us") governing all use of VAPT Security Scanner ("Service"). Using the Service constitutes unconditional acceptance.
Description of Service
VAPT Security Scanner is a passive, non-invasive web security analysis tool. It:
- ›Fetches publicly accessible HTTP response headers from URLs you submit
- ›Analyses security headers, TLS/SSL configuration, cookie attributes, and frontend library versions
- ›Cross-references detected library versions against public CVE/OSV vulnerability databases
- ›Produces a security report based solely on publicly observable information
Permitted & Prohibited Use
3.1 You May Only Scan
- ›Websites and servers you own outright
- ›Systems for which you hold explicit written authorisation from the legal owner
- ›Systems operated by your employer where an authorising policy exists in writing
- ›Intentionally vulnerable training platforms (e.g., DVWA, HackTheBox, TryHackMe) within their terms
- ›Bug-bounty programme targets within their explicitly defined scope
3.2 Prohibited Uses — Zero Tolerance
- ›Scanning any system without the owner's prior, explicit, written consent
- ›Using scan results to plan, facilitate, or execute any form of cyberattack
- ›Mass-automated scanning of third-party domains or IP ranges
- ›Scanning government, military, healthcare, financial, or critical infrastructure without authorisation
- ›Reselling or redistributing scan results without a separate written licence
- ›Any use that violates applicable local, national, or international law
No Warranty — Service Provided 'As Is'
THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO:
- ›Merchantability or fitness for a particular purpose
- ›Accuracy, completeness, or currency of scan results
- ›That results constitute a certified penetration test or security audit
- ›Uninterrupted or error-free availability
Scan results are informational only and may not reflect all vulnerabilities present. They must not be relied upon as a substitute for a professional, certified security assessment.
Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, $VULNERA SHALL NOT BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES INCLUDING BUT NOT LIMITED TO:
- ›Data loss, revenue loss, or reputational harm
- ›Security incidents arising from vulnerabilities not detected by the Service
- ›Actions taken by any party based on or using scan results you generated or shared
- ›Downtime or interruptions to the Service
Indemnification
You agree to indemnify and hold harmless $Vulnera, its officers, agents, and assigns from any claim, liability, damage, loss, or expense (including legal fees) arising from:
- ›Your use or misuse of the Service
- ›Your breach of these Terms or any applicable law
- ›Harm caused to any third party as a result of scans you initiated
- ›Infringement of any intellectual property or privacy rights
Intellectual Property
All software, algorithms, designs, UI, and content comprising the Service are the exclusive property of $Vulnera or its licensors. You receive a limited, non-exclusive, revocable, non-transferable licence to use the Service as described herein. You acquire no ownership rights.
Scan Data & Results
Scan results are yours. We may retain anonymised, aggregated metadata (no personally identifiable information, no specific domain results) for service improvement. We will not sell or disclose your individual scan results to third parties except as required by law.
Third-Party Data Sources
The Service queries third-party databases including OSV.dev and the NIST NVD. We do not control the accuracy or availability of these sources and accept no liability for omissions or errors therein.
Modifications to Terms
We may update these Terms at any time. Material changes will be signalled by a new "Last Updated" date. Continued use after changes constitutes acceptance.
Termination
We may suspend or terminate your access immediately and without notice if we believe you have breached these Terms or applicable law. Sections 4, 5, 6, and 7 survive termination.
Governing Law & Disputes
These Terms are governed by the laws of India. Any dispute shall first be addressed through good-faith negotiation, failing which it shall be submitted to the exclusive jurisdiction of the courts of India.