Terms of Service

1. Acceptance of Terms

These Terms of Service ("Terms") constitute a legally binding agreement between you ("User", "you", or "your") and the operator of PentestScanner ("PentestScanner", "we", "us", or "our"), governing your access to and use of the platform and services available at pentestscanner.com (the "Service").

By registering for an account, accessing, or using the Service in any way, you confirm that you have read, understood, and agree to be bound by these Terms, our Privacy Policy, and any additional guidelines or policies incorporated herein by reference.

If you are using the Service on behalf of an organisation, you represent and warrant that you have the authority to bind that organisation to these Terms, in which case "you" refers to both you individually and that organisation. If you do not agree to these Terms, you must not use the Service.

2. Description of Service

PentestScanner is an automated web application penetration testing platform. The Service enables users to initiate security scans against web applications and receive structured reports identifying potential vulnerabilities, misconfigurations, and security weaknesses.

The Service is provided as a software-as-a-service (SaaS) offering across the following subscription plans:

• Starter — CHF 39 per month
• Professional — CHF 99 per month
• Business — CHF 249 per month
• Enterprise — custom pricing, available upon request

Feature availability, scan limits, and concurrent scan quotas differ between plans. Plan details are published on our pricing page and may be updated from time to time. The Service is hosted on Swiss and EU infrastructure and is intended for use by security professionals, developers, and organisations responsible for their own web assets.

3. Authorised Use Only

As a condition of using the Service, you represent, warrant, and covenant that:

• You are the owner of every target web application, domain, or IP address you submit for scanning, or you hold explicit, written authorisation from the owner of that system to conduct security testing.
• You will retain records of such authorisation for the duration of each engagement and make them available to us upon request.
• You will not use the Service to scan third-party infrastructure, cloud services, shared hosting environments, or any system for which you do not have clear, verifiable permission.
• You understand that security scanning can cause unintended load, errors, or service disruption on target systems, and you accept full responsibility for any such effects.

Sole liability for unauthorised scanning: Any scanning activity conducted without the required ownership or written permission is carried out entirely at your own risk and on your own initiative. PentestScanner accepts no responsibility whatsoever for any direct, indirect, or consequential harm — including legal proceedings, fines, civil claims, or regulatory action — arising from your unauthorised use of the Service. You agree to fully indemnify and hold harmless PentestScanner, its officers, employees, and contractors against any and all claims, costs, damages, and liabilities resulting from such activity.

We reserve the right to suspend or terminate your account immediately, without notice or refund, if we have reasonable grounds to believe you are conducting or have conducted unauthorised scanning.

4. Account Registration and Security

To access the Service you must register for an account and provide accurate, current, and complete information. You agree to keep your registration information up to date.

• You are responsible for maintaining the confidentiality of your login credentials and API keys.
• You are responsible for all activity that occurs under your account, whether or not authorised by you.
• You must notify us immediately at hello@pentestscanner.com if you suspect any unauthorised access to or use of your account.
• You may not share your account credentials with third parties or create accounts on behalf of others without their knowledge.
• One account per person or organisation is required; multiple accounts to circumvent plan limits are prohibited.

5. Subscription, Billing, and Cancellation

5.1 Billing Currency and Cycles

All prices are stated in Swiss Francs (CHF) and are exclusive of any applicable taxes unless stated otherwise. Subscription fees are billed in advance on a monthly basis from the date you first subscribe. Your subscription renews automatically at the end of each billing period unless cancelled.

5.2 Payment

You authorise us (or our payment processor) to charge your nominated payment method for all fees due. If a payment fails, we may retry the charge and may suspend access to the Service until outstanding amounts are settled. You are responsible for ensuring your payment details remain valid and up to date.

5.3 Plan Changes

You may upgrade or downgrade your subscription plan at any time through your account settings. Upgrades take effect immediately with a pro-rated charge for the remainder of the billing period. Downgrades take effect at the start of the next billing period.

5.4 Cancellation

You may cancel your subscription at any time through your account settings or by contacting us at hello@pentestscanner.com. Cancellation takes effect at the end of your current billing period. You will retain access to the Service until that date. We do not provide refunds for partial billing periods or unused portions of a subscription, except where required by applicable law.

5.5 Free Trials

Where a free trial is offered, it begins on the date of registration and ends at the conclusion of the stated trial period. Unless you cancel before the trial ends, your account will automatically convert to a paid subscription and your payment method will be charged.

6. Acceptable Use Policy

You agree to use the Service only for lawful purposes and in accordance with these Terms. The following conduct is strictly prohibited:

• Scanning any web application, server, network device, or infrastructure without ownership or explicit written permission from the owner.
• Using the Service to conduct denial-of-service attacks, brute-force credential attacks, or any activity designed to disrupt or damage systems.
• Using scan results, reports, or Service output to facilitate attacks, extortion, blackmail, or any other malicious activity against any party.
• Attempting to circumvent, reverse-engineer, or tamper with the Service's own infrastructure, scanning engines, or security controls.
• Reselling, sublicensing, or otherwise commercialising access to the Service without our prior written consent.
• Using the Service to collect or harvest data about third parties in a manner that violates applicable privacy law.
• Submitting false, misleading, or fraudulent information in connection with your account or scan targets.
• Any use of the Service that violates applicable local, national, or international law or regulation, including computer crime laws.

We may, at our sole discretion, investigate any suspected violation of this policy and take appropriate action, including suspending or terminating your account, reporting activity to relevant authorities, and pursuing available legal remedies.

7. Intellectual Property

All rights, title, and interest in and to the Service — including the platform software, scanning engines, algorithms, user interface, documentation, trademarks, and trade names — are and remain the exclusive property of PentestScanner and its licensors. Nothing in these Terms grants you any ownership rights in the Service.

Subject to your compliance with these Terms and payment of applicable fees, we grant you a limited, non-exclusive, non-transferable, revocable licence to access and use the Service solely for your own internal security testing purposes.

You retain all intellectual property rights in any data, content, or reports generated from your scans. You grant us a limited licence to process your scan data solely to the extent necessary to provide and improve the Service. We will not disclose your scan results or target information to third parties except as required by law or as described in our Privacy Policy.

8. Disclaimers

The Service is provided on an "as is" and "as available" basis without warranties of any kind, either express or implied, to the fullest extent permitted by applicable law.

No guarantee of security: Scan results produced by the Service are informational in nature and reflect the state of a target application at the time the scan was conducted. A scan report — whether it identifies vulnerabilities or not — does not constitute a guarantee, certification, or warranty that the scanned application is secure, free of vulnerabilities, or compliant with any security standard. New vulnerabilities may emerge after a scan is completed.

False positives and false negatives: Automated scanning tools, by their nature, may generate false positive findings (flagging issues that do not exist) or false negative findings (failing to detect issues that do exist). You should treat scan results as one input into a broader security programme and validate findings before acting on them. We recommend supplementing automated scans with manual security review where appropriate.

Service availability: We do not warrant that the Service will be uninterrupted, error-free, or available at all times. We may carry out scheduled or emergency maintenance that temporarily affects availability.

We make no warranty that the Service will meet your specific requirements or that results will be accurate, complete, or fit for any particular purpose.

9. Limitation of Liability

To the maximum extent permitted by applicable Swiss law, PentestScanner and its officers, employees, agents, and contractors shall not be liable for any indirect, incidental, special, consequential, or punitive damages — including loss of profits, loss of data, business interruption, reputational harm, or costs of substitute services — arising out of or in connection with your use of or inability to use the Service, even if we have been advised of the possibility of such damages.

In any case, our aggregate liability to you for all claims arising under or in connection with these Terms or the Service shall not exceed the total fees paid by you to PentestScanner in the three (3) months immediately preceding the event giving rise to the claim.

These limitations reflect a reasonable allocation of risk between the parties. Some jurisdictions do not allow the exclusion or limitation of certain damages; in such cases, our liability shall be limited to the fullest extent permitted by law.

10. Data Processing and Privacy

PentestScanner processes personal data in accordance with the Swiss Federal Act on Data Protection (nDSG / revDSG), its implementing ordinances, and — where applicable — the EU General Data Protection Regulation (GDPR). Our Privacy Policy, which forms part of these Terms by reference, describes in detail what data we collect, how we use it, your rights as a data subject, and how to exercise them.

Key data processing commitments:

• All data is stored on infrastructure located in Switzerland or within the European Economic Area (EEA).
• We do not sell personal data to third parties.
• Where we engage sub-processors, we ensure equivalent data protection standards are maintained through contractual agreements.
• Scan data and reports are retained only for as long as necessary to provide the Service and as required by law.
• You may request access to, correction of, or deletion of your personal data at any time by contacting us.

For data processing enquiries or to exercise your rights, contact our data protection team at hello@pentestscanner.com.

11. Changes to Terms

We reserve the right to modify these Terms at any time. When we make material changes, we will notify you by email to the address associated with your account and/or by posting a prominent notice on the Service prior to the changes taking effect. The updated Terms will be effective no sooner than 14 days after notification, except where changes are required by law, in which case they may take effect immediately.

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised Terms. If you do not agree to the revised Terms, you must cancel your subscription and stop using the Service before the changes take effect.

12. Governing Law and Jurisdiction

These Terms, and any dispute or claim arising out of or in connection with them or their subject matter, shall be governed by and construed in accordance with the laws of Switzerland, without regard to its conflict of law provisions.

The parties irrevocably submit to the exclusive jurisdiction of the competent courts of Zurich, Switzerland to settle any dispute or claim arising out of or in connection with these Terms. If you are a consumer domiciled in the EU, you may also benefit from mandatory consumer protection provisions of the law of your country of residence, and from the jurisdiction of courts at your place of domicile.

13. Contact Information

If you have any questions, concerns, or requests relating to these Terms or the Service, please contact us: