Terms of Service

1. Definitions

• "Service" refers to PlenoScan, including the website, API, scanning tools, and all related services.
• "User," "You," "Your" refers to any individual or entity using the Service.
• "Target" refers to any website, application, API, or digital property submitted for scanning.
• "Scan" refers to the automated security analysis performed by the Service.
• "We," "Us," "Our" refers to PlenoScan and its operators.

2. Description of Service

PlenoScan is a security scanning service that analyzes publicly accessible web applications to identify potential security vulnerabilities, including but not limited to:

• Exposed API keys and secrets in client-side code
• Broken access controls on API endpoints
• Security misconfigurations
• Outdated dependencies with known vulnerabilities
• Information disclosure issues

The Service only scans publicly accessible resources and does not attempt to bypass authentication, exploit vulnerabilities, or access private systems.

3. Scan Limitations

You acknowledge and agree that:

• No guarantee of detection: We do NOT guarantee that our scans will identify all vulnerabilities, security issues, or threats in your Target.
• False negatives may occur: Some vulnerabilities may not be detected due to limitations in automated scanning technology, obfuscation, or novel attack vectors.
• False positives may occur: Some reported issues may not be actual vulnerabilities in your specific context.
• Point-in-time assessment: Scan results reflect the state of your Target at the time of scanning. New vulnerabilities may emerge after a scan.
• Publicly accessible only: We only scan publicly accessible resources. Vulnerabilities in authenticated areas, server-side logic, databases, or internal systems will NOT be detected.
• Your responsibility: You are solely responsible for your security posture, remediation decisions, and implementing fixes based on scan results.

A "clean" scan result does NOT mean your application is secure. We strongly recommend supplementing automated scans with manual security reviews, code audits, and professional penetration testing for comprehensive security coverage.

4. Authorization Requirement

By submitting a Target for scanning, you represent and warrant that:

• You are the legal owner of the Target; OR
• You have explicit written authorization from the owner to perform security testing; OR
• You are an authorized employee, contractor, or agent with permission to conduct security assessments on the Target.

Scanning websites, applications, or systems without proper authorization may violate applicable laws, including but not limited to the Computer Fraud and Abuse Act (CFAA) in the United States and similar laws in other jurisdictions. You assume all legal responsibility for ensuring you have proper authorization.

5. Acceptable Use Policy

You agree NOT to use the Service to:

• Scan any Target you do not own or have explicit authorization to test
• Attempt to exploit, attack, or cause damage to any system
• Conduct denial-of-service attacks or flood any system with requests
• Access, download, or exfiltrate data you are not authorized to access
• Use scan results to harm, extort, or blackmail any individual or organization
• Violate any applicable laws, regulations, or third-party rights
• Interfere with or disrupt the Service or its infrastructure
• Reverse engineer, decompile, or attempt to extract the source code of the Service
• Resell, redistribute, or sublicense the Service without authorization
• Use the Service for any illegal or unauthorized purpose

We reserve the right to suspend or terminate your access to the Service immediately, without notice, for any violation of this Acceptable Use Policy.

6. No Exploitation Commitment

PlenoScan is a defensive security tool. We commit that we will NOT:

• Exploit any vulnerabilities discovered during scans
• Access, store, or exfiltrate any sensitive data from Targets
• Sell, share, or disclose vulnerability information to third parties
• Use scan results for any purpose other than generating security reports for you
• Conduct scans beyond the scope of publicly accessible resources

7. Disclaimer of Warranties

8. Limitation of Liability

9. Indemnification

You agree to indemnify, defend, and hold harmless PlenoScan, its operators, affiliates, directors, officers, employees, and agents from and against any and all claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising out of or related to:

• Your use of the Service
• Your violation of these Terms of Service
• Your violation of any applicable law or regulation
• Your scanning of any Target without proper authorization
• Any claim that your use of the Service caused damage to a third party
• Your negligence or willful misconduct

This indemnification obligation will survive the termination of these Terms and your use of the Service.

10. User Responsibilities

You are solely responsible for:

• Obtaining all necessary authorizations before scanning any Target
• Complying with all applicable laws and regulations
• Maintaining the security of your account credentials
• All activities that occur under your account
• Implementing appropriate security measures based on scan results
• Verifying scan results before taking any action

11. Intellectual Property

The Service, including its original content, features, functionality, and underlying technology, is and will remain the exclusive property of PlenoScan and its licensors. The Service is protected by copyright, trademark, and other intellectual property laws. You may not copy, modify, distribute, sell, or lease any part of our Service without explicit written permission.

12. Termination

We may terminate or suspend your access to the Service immediately, without prior notice or liability, for any reason, including but not limited to:

• Breach of these Terms of Service
• Violation of the Acceptable Use Policy
• Suspected fraudulent, abusive, or illegal activity
• Request by law enforcement or government agencies

Upon termination, your right to use the Service will immediately cease. All provisions of these Terms which by their nature should survive termination shall survive, including but not limited to ownership provisions, warranty disclaimers, indemnity, and limitations of liability.

13. Governing Law & Jurisdiction

These Terms shall be governed by and construed in accordance with the laws of the United States and the State of Delaware, without regard to its conflict of law provisions. Any disputes arising under or in connection with these Terms shall be subject to the exclusive jurisdiction of the state and federal courts located in Delaware. You waive any objections to jurisdiction and venue in such courts.

14. Dispute Resolution

Before filing any legal claim, you agree to attempt to resolve any dispute informally by contacting us. If the dispute is not resolved within thirty (30) days, either party may proceed with formal legal action.

YOU AGREE THAT ANY DISPUTE RESOLUTION PROCEEDINGS WILL BE CONDUCTED ON AN INDIVIDUAL BASIS AND NOT AS A CLASS ACTION, COLLECTIVE ACTION, OR REPRESENTATIVE ACTION. You waive any right to participate in a class action lawsuit or class-wide arbitration.

15. Severability

If any provision of these Terms is held to be invalid, illegal, or unenforceable, the remaining provisions shall continue in full force and effect. The invalid or unenforceable provision shall be modified to the minimum extent necessary to make it valid, legal, and enforceable while preserving its original intent.

16. Entire Agreement

These Terms of Service, together with our Privacy Policy, constitute the entire agreement between you and PlenoScan regarding the use of the Service and supersede all prior agreements, understandings, and communications, whether written or oral.

17. Changes to Terms

We reserve the right to modify or replace these Terms at any time at our sole discretion. If we make material changes, we will provide notice by posting the updated Terms on this page and updating the "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the new Terms.

18. Contact Information

For questions about these Terms of Service, please contact us at: @lukefrostdev on X (Twitter)