Terms of Service — Critical End Security

By purchasing a scan or using this website you agree to the following terms. Please read them carefully.

1. Services

Critical End Security ("we", "us") provides one-time cybersecurity assessment scans and related reporting services for domains you own or have explicit written authorisation to test. Services are described in detail on the About page.

2. Authorisation

By submitting a domain for scanning you confirm that you are the owner of that domain or have been granted explicit written permission by the owner to conduct a security assessment on it. We perform passive, read-only checks only. We never attempt to exploit vulnerabilities, gain unauthorised access, or interact with your systems beyond standard HTTP requests and DNS lookups.

You agree not to submit domains you do not own or control. Misuse of this service may result in immediate cancellation without refund and may be reported to relevant authorities.

3. Payment

All payments are processed securely via Stripe. Prices are displayed in USD. Payment is due in full before the scan begins. We do not store your payment card details.

4. Refund Policy

Because our service involves significant manual work per assessment, we have the following policy:

Before the scan starts: A full refund is available if you request it within 24 hours of payment and before we have begun the assessment.
After the scan is complete: No refunds are issued once the PDF report has been delivered, as the work has been completed in full.
If we are unable to scan your domain: A full refund will be issued.

To request a refund, contact us via the contact page.

5. Delivery

Reports are delivered via email to the address provided at checkout, typically within 24 hours of payment. Delivery time may vary depending on demand. If you have not received your report within 48 hours, please contact us.

6. Confidentiality

All scan results and client information are strictly confidential. We will not share, sell, or disclose your domain, findings, or personal information to any third party, except as required by law. See our Privacy Policy for full details.

7. Scope and Limitations

Our assessments are point-in-time snapshots based on publicly available information and passive checks. They do not constitute a comprehensive penetration test and do not guarantee the absence of all vulnerabilities. Security postures can change rapidly; findings are accurate as of the date of the scan only. We recommend re-scanning periodically.

We are not responsible for any security incidents that occur before, during, or after the assessment, or for vulnerabilities not identified in the scope of the chosen plan.

8. Limitation of Liability

To the fullest extent permitted by applicable law, Critical End Security shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of our services. Our total liability for any claim shall not exceed the amount paid for the specific scan that gave rise to the claim.

9. Changes to These Terms

We may update these Terms from time to time. The date at the top of this page reflects the most recent revision. Continued use of our services after any changes constitutes acceptance of the new terms.

10. Contact

Questions about these Terms? Email us at [email protected] or use the contact form — we'll respond within 24 hours.