Terms of Service

1. The Service

Hexora is a web application vulnerability scanner that checks publicly accessible websites for common security misconfigurations. The Service runs automated, non-intrusive checks against URLs you provide and returns a report of potential findings.

2. Eligibility

You must be at least 18 years old to use the Service. By registering, you confirm you meet this requirement.

3. Your account

You are responsible for maintaining the security of your account credentials. You must not share your login details with others. You are responsible for all activity under your account. Notify us immediately at security@hexora.uk if you believe your account has been compromised.

4. Acceptable use

You may only scan websites and domains that you own or have explicit written authorisation to scan. By submitting a URL for scanning, you represent and warrant that you have the legal right to scan that target.

You must not use the Service to:

• Scan websites you do not own or have authorisation to scan
• Attempt to exploit vulnerabilities discovered by the Service
• Use scan results to attack or harm any third party
• Interfere with or overload the Service
• Reverse-engineer the Service
• Resell scan results without a paid plan that permits this
• Submit URLs targeting internal or private systems
• Circumvent rate limits or access controls

We reserve the right to suspend or terminate your account without notice if we reasonably believe you have violated these Terms.

5. Free and paid plans

The Service offers a free tier and paid subscription plans. Paid subscriptions are billed monthly or annually as selected at checkout. Payments are processed securely by Stripe. We do not store your payment card details. You may cancel your subscription at any time through the billing portal. Cancellation takes effect at the end of your current billing period. No refunds are provided for partial billing periods. We reserve the right to change our pricing with 30 days' notice to existing subscribers.

6. What the Service is not

Hexora is an automated scanning tool. It is not a substitute for professional penetration testing, a full security audit, or legal compliance certification. Scan results are informational and provided on a best-effort basis. A clean scan result does not mean your website is free from vulnerabilities.

7. Limitation of liability

The Service is provided "as is" without warranties of any kind. We do not warrant that the Service will be uninterrupted, error-free, or that results will be complete or accurate. To the maximum extent permitted by law, we shall not be liable for any indirect, incidental, special, consequential, or punitive damages. Our total liability shall not exceed the amount you paid us in the 12 months preceding the claim, or £100, whichever is greater.

8. Intellectual property

The Service is owned by us and protected by intellectual property laws. Your subscription grants you a limited, non-exclusive, non-transferable right to use the Service. Scan results generated for your targets belong to you.

9. Data handling

We collect and process personal data as described in our Privacy Policy.

10. Changes to these Terms

We may update these Terms from time to time. If we make material changes, we will notify you by email. Continued use of the Service after changes take effect constitutes acceptance.

11. Governing law

These Terms are governed by the laws of England and Wales. Any disputes shall be subject to the exclusive jurisdiction of the courts of England and Wales.

12. Contact

Questions about these Terms: hello@hexora.uk.