Terms of Service

These Terms of Service ("Terms") govern your use of DomainScan, the online service available at domainscan.tech (the "Service"). By creating an account or using the Service you agree to these Terms and to our Privacy Policy. If you do not agree, do not use the Service.

1. Who we are

The Service is provided by Denis Kasperowicz, Gdynia, Poland, a natural person conducting unregistered business activity (działalność nierejestrowana) under Polish law ("we", "us").

Contact: support@domainscan.tech. Abuse reports: abuse@domainscan.tech.

2. What the Service does

DomainScan performs automated, external security checks of internet domains that you have verified, and presents the results as a report. Depending on your plan, a scan may include:

• TLS/SSL analysis of the certificate, protocols and cipher suites, including checks for known TLS vulnerabilities;
• analysis of HTTP security headers, cookies, CORS and HTTPS redirects;
• detection of open TCP ports and service versions (nmap, top 100 ports);
• subdomain discovery using public sources and DNS resolution;
• checks for known vulnerabilities and exposures using public nuclei templates (paid plans).

Scans are non-destructive and do not attempt to log in, exploit vulnerabilities or modify data. They do, however, send network traffic to the scanned systems, which may be logged or flagged by firewalls, intrusion detection systems or your hosting provider.

Paid plans may also include daily automated monitoring, email alerts, PDF reports, API access and white-label reports, as described on the pricing page.

3. Authorization to scan — your key obligation

To protect third parties, we require you to prove control over each domain by publishing a DNS TXT record (_verify.<your-domain>) before it can be scanned. By adding and verifying a domain you represent and warrant that:

1. you own the domain and the systems it points to, or you have the owner's explicit permission to run security scans against them, including the systems of any hosting or cloud provider involved where their policies require it;
2. you will keep that authorization valid for as long as the domain remains in your account, and you will remove the domain as soon as you lose control of it or the authorization ends;
3. you will not point a verified domain (including via DNS changes after verification) at systems you are not authorized to scan;
4. if you use the Agency plan or white-label reports to scan domains of your clients, you have a written authorization from each client.

We refuse to scan domains that resolve to private, loopback or reserved IP addresses.

4. Acceptable use

You must not:

• scan or attempt to scan systems without authorization, or circumvent domain verification;
• use the Service to attack, overload or disrupt any system, or to prepare an attack;
• bypass plan limits, create multiple accounts to obtain additional free scans, or share accounts;
• use the API or automation in a way that degrades the Service for others;
• resell access to the Service, except for providing reports to your own authorized clients on the Agency plan;
• attempt to gain unauthorized access to the Service, its infrastructure or other users' data;
• use the Service for any unlawful purpose.

If we receive an abuse complaint or reasonably suspect a breach of sections 3 or 4, we may immediately suspend scans, the domain or the account, share relevant information with the affected party, the hosting provider or law enforcement authorities where legally permitted, and terminate the account. You agree to indemnify us against claims of third parties resulting from scans you started without proper authorization.

5. Our scanner

Our scans originate from the servers of DomainScan. Where the scanning tools allow it, HTTP requests identify themselves with the User-Agent DomainScan/1.1 (+https://domainscan.tech). If you believe your systems were scanned without the owner's permission, contact abuse@domainscan.tech with the date, time and your IP address or domain. We investigate every report and stop scanning the affected domain while we do.

6. Your account

• You must be at least 16 years old, and you must provide a valid email address that you check regularly; security alerts are sent to it.
• Keep your password and API keys confidential. You are responsible for all activity under your account and API keys. Tell us immediately if you suspect unauthorized access.
• You can stop using the Service at any time and delete your account with all its data in Plan & API → Delete account. Deleting the account cancels an active subscription immediately.

7. Plans, payments and cancellation

• The Free plan is free of charge and has the limits shown on the pricing page.
• Paid plans (Starter, Pro, Agency) are monthly subscriptions billed in US dollars in advance through our payment processor Stripe. Prices shown on the pricing page are final prices. We do not store your card details.
• The Starter plan may include a free trial (currently 7 days). Unless you cancel before the trial ends, the subscription starts automatically and the first payment is charged.
• Subscriptions renew automatically each month until cancelled. You can upgrade, downgrade or cancel at any time in Plan & API → Manage billing. A cancellation takes effect at the end of the current billing period; after that the account returns to the Free plan.
• Except as required by law (see section 8), payments for a started billing period are not refunded.
• We may change prices for future billing periods. We will notify you by email at least 14 days in advance, and you may cancel before the change takes effect.

8. Right of withdrawal (consumers)

If you are a consumer, or a sole trader using the Service not for your professional purposes where Polish law grants you consumer protection, you may withdraw from a paid subscription within 14 days of concluding it without giving a reason, by emailing support@domainscan.tech.

By starting a paid subscription you expressly request that we begin providing the Service immediately, during the withdrawal period. If you withdraw, you will pay only for the Service provided until the moment you informed us of the withdrawal, proportionally to the subscription price, and we will refund the rest within 14 days using the original payment method.

9. No guarantee of security

The Service is an automated tool. It can produce false positives and miss vulnerabilities (false negatives), and results reflect the state of a system only at the time of the scan. A good grade does not mean that a system is secure. The Service is not a penetration test, a security audit or professional advice, and it does not replace them. You are responsible for evaluating the results and for any changes you make to your systems.

10. Availability

We aim to keep the Service available but do not guarantee uninterrupted operation. Scans, monitoring and alerts may be delayed or temporarily unavailable, for example during maintenance or when scanners are under heavy load. We may change or discontinue features; if we discontinue a paid plan, we will refund prepaid amounts for the unused period.

11. Liability

To the extent permitted by law, our total liability arising from the Service is limited to the amount you paid us in the 12 months before the event giving rise to the claim, and we are not liable for indirect damages or lost profits, including damage resulting from vulnerabilities not detected by the Service. These limitations do not apply to damage caused intentionally or through gross negligence, or where liability cannot be limited by law, and they do not affect the statutory rights of consumers.

12. Complaints

You can submit a complaint about the Service to support@domainscan.tech. Please describe the issue and how you would like it resolved. We respond within 14 days. Consumers may also use out-of-court complaint and redress procedures, for example with the help of a municipal or district consumer ombudsman (rzecznik konsumentów).

13. Changes to these Terms

We may update these Terms, for example when we add features or when the law changes. We will publish the new version on this page and notify registered users by email at least 14 days before material changes take effect. If you do not accept the changes, you may close your account before they take effect.

14. Governing law

These Terms are governed by Polish law. If you are a consumer, you also keep the protection of mandatory provisions of the law of your country of residence. Disputes will be settled by the competent common court; for consumers this is determined by the applicable statutory provisions.