Terms & Conditions

1. The Service

SCARP assesses the externally visible security posture of domains and related internet-facing assets, and produces reports and scores from that assessment. The Service is provided on a subscription basis. Features, scanner coverage, and scoring methodology may change as the Service develops. We will not materially reduce the functionality of a paid subscription during its paid term.

2. Authorisation to assess targets

This clause is essential. You may only submit a domain or asset that you own, or for which you hold documented permission from the owner to commission a security assessment. You warrant that you hold that authorisation for every target you submit, and you are solely responsible for it.

Passive assessment draws on public and third-party sources. Active checks send requests to the target and are gated: they require the relevant entitlement on your subscription, verification of domain ownership, and where configured an approval step. You must not use the Service against systems you are not authorised to assess.

3. Accounts and security

You are responsible for the confidentiality of your credentials and API keys, and for activity under your account. Tell us promptly via our contact page if you believe an account or key is compromised. Access is for the subscribing organisation; do not resell or share it externally without our written agreement.

4. Acceptable use

You agree not to:

• submit targets you are not authorised to assess;
• use the Service to cause disruption or degradation of any system;
• attempt to circumvent entitlement gating, domain verification, rate limits, or quota enforcement;
• reverse engineer the Service or build a competing product from it, except where the law permits;
• use the Service unlawfully or in breach of third-party rights.

We may suspend access where we reasonably believe these Terms have been breached or continued use presents a legal or security risk. We will tell you why, and restore access once resolved.

5. Fees, billing, and taxes

Subscription fees, billing periods, and included quotas are those shown at the point of purchase and on our pricing page. Payments are processed by PayPro Global acting as authorised reseller and merchant of record, whose terms also apply to the transaction. Prices exclude VAT and other applicable taxes unless stated otherwise; tax is calculated at checkout from your billing location.

Fees are non-refundable once a subscription term begins, except in the limited circumstances set out in our Refund & Cancellation Policy. Subscriptions renew automatically for successive terms unless cancelled before the current term ends; cancellation stops the next renewal and does not refund the term in progress. Payments, invoices, and cancellation are managed through the PayPro Global customer portal. We give at least 30 days’ notice before a price change affects your subscription.

The Service is supplied to businesses and professional users for use in their trade or profession, and is not offered to consumers. Nothing in these Terms excludes a right that cannot lawfully be excluded.

6. Your data and confidentiality

We process personal data as described in our Privacy Policy. Assessment findings about your assets are your confidential information. We use them to operate and improve the Service, and we do not publish findings attributable to you without your written consent. Our security controls are described on our security page.

7. Intellectual property

We retain all rights in the Service, including its software, scoring methodology, and report templates. You retain all rights in the data and targets you submit. You may use the reports the Service produces for your internal and customer-facing risk purposes, including sharing them with insurers, auditors, and the assessed party.

8. Disclaimers

The Service assesses externally observable signals at a point in time. It is not a penetration test, a compliance certification, or legal advice, and it is not a guarantee that an assessed system is secure. An assessment that finds no issues does not mean none exist. You remain responsible for your own security decisions and remediation. Except as expressly stated, and to the fullest extent permitted by law, the Service is provided “as is” without warranties of any kind.

9. Limitation of liability

To the fullest extent permitted by law, neither party is liable for indirect, incidental, special, or consequential loss, or for lost profits, revenue, or data. Our total aggregate liability arising out of or relating to the Service is limited to the fees you paid us in the twelve months before the event giving rise to the claim. Nothing here limits liability that cannot lawfully be limited, including for fraud or for death or personal injury caused by negligence.

10. Term, suspension, and termination

Either party may terminate for material breach that remains uncured 30 days after written notice. You may cancel at any time as described in the Refund & Cancellation Policy. On termination your right to use the Service ends, and we retain then delete data in line with the retention periods in the Privacy Policy. You may export your reports before termination takes effect.

11. Changes to these Terms

We may update these Terms. Where a change materially affects your rights we will give notice by email or in the product before it takes effect, and the date above will change. Continued use after that point constitutes acceptance.

12. Governing law and contact

These Terms are governed by the laws of the jurisdiction in which SCARP is established, whose courts have exclusive jurisdiction, without affecting mandatory consumer protections available to you locally.

Questions about these Terms: contact us.