Terms of use

1. About these terms

Attack Surface Scanner by Braintruder (“the service”) is provided by Assertive Infosec Solutions Limited, a company registered in England and Wales (company number 16983517), the company behind Braintruder (“we”, “us”). By creating an account you agree to these terms on behalf of yourself and the organisation whose work email you use. Our privacy notice explains how we handle personal data.

2. Who can use it

• The service is for businesses and other organisations, not for consumers. You must be at least 18 and use it for your work.
• Accounts are for work email addresses only: free, disposable and shared-hosting addresses can’t register. There is one account per mailbox, and you must keep the sign-in links we email you to yourself.

3. The service is free

There are no paid plans. Each registration may scan up to three domains. We may contact you about your results (you can stop this on your account page) and show clearly labelled adverts for Braintruder, our AI-driven penetration testing product. We may change, limit or stop the service at any time, and we don’t promise it will always be available.

4. Permission to scan

• Only add domains your organisation owns or that you have the owner’s permission to assess. You confirm that you are authorised by your organisation to have its domains checked, and that adding a domain doesn’t breach any agreement you have (for example with a hosting provider).
• Passive checks use public information and a few ordinary requests, much like visiting the website. Active checks (port checks, subdomain probing and exposure checks) run only on your work email’s own domain or on domains you have proved you control with a DNS record or a file on the website. Don’t try to get active checks run on anything else.
• Testing systems without permission can be an offence under the Computer Misuse Act 1990 and similar laws elsewhere. You are responsible for the domains you add.

5. Acceptable use

• Don’t use the service to harass anyone, to get around its limits (for example with multiple accounts), to attack or overload any system, or to probe systems you aren’t authorised to test.
• Don’t interfere with the service itself, reverse engineer it or scrape it.
• We may refuse, limit or stop scans and suspend or close accounts, without notice, if we reasonably believe these terms are being broken or to prevent harm. Domain owners can opt out of scanning at any time on the scanner page.
• You agree to compensate us for losses, claims and reasonable costs that arise because you added a domain you weren’t authorised to have checked or otherwise broke this section.

6. Results and reports

• The scanner is a lightweight, automated external check, not a penetration test or professional advice. Results can contain false positives and will miss issues; findings marked “likely” are based on version numbers and are not confirmed. Use your own judgement before acting on them.
• Your reports are yours to use within your organisation and with your advisers. If you create a share link, anyone with the link can read the report until it expires or you revoke it, so share it with care.
• The service, its software and its content (including the fix guidance) belong to us or our licensors.

7. No warranties

• The service is free and provided “as is” and “as available”, with no warranties of any kind, express or implied, including that it is fit for any purpose, will find every issue, or will be accurate, available or free of errors.
• We are not liable for indirect or consequential loss, loss of profit, business, data or goodwill, or for loss arising from your use of the results.
• Nothing in these terms limits liability for death or personal injury caused by negligence, for fraud, or any other liability that cannot be limited by law.

8. Ending your use

You can stop using the service and delete your account at any time from your account page. Deletion is permanent and the same email address can’t register again. Sections 4 to 7 and 10 continue to apply after your account ends.

9. Changes

We may update these terms. We’ll change the date at the top and email registered users about material changes before they take effect. If you keep using the service after that, the new terms apply.

10. Law and contact

These terms are governed by the law of England and Wales, and the courts of England and Wales have exclusive jurisdiction. If any part of them is found unenforceable, the rest still applies. Questions about these terms: info@assertivesolutions.io.