Terms of Service
Last updated: September 20, 2026
1. Acceptance
By creating an account, submitting a site for scanning, unlocking a report, or paying for any WP-Sec service, you agree to these Terms of Service and our Privacy Policy. If you do not agree, do not use the service. You must be at least 18 years old and able to form a binding contract.
2. The service
WP-Sec provides automated, read-only WordPress security and SEO audits ("reports"), delivered instantly for a one-time price per report, plus optional month-to-month monitoring subscriptions. Reports are generated by automated software from data observable from the public internet at the time of scanning.
3. Authorization & acceptable use
By submitting a domain for scanning you represent and warrant that you own or administer the site, or are otherwise explicitly authorized to have it probed. Our probes are deliberately light (page fetches, TLS handshakes, DNS lookups, HEAD/GET requests against well-known sensitive paths, and a small, capped number of deliberately-failed logins used only to detect lockout/rate-limiting). Even so, such probes may trigger security systems, logs, rate limits or WAF alerts on the target. You accept full responsibility for any consequence of requesting a scan, and you agree not to use the service to probe domains you are not authorized to test.
4. No security guarantee — informational only
Reports are informational only. They are point-in-time, best-effort observations. A high score does not mean a site is secure, and a low score does not mean a site was or will be compromised. We do not detect every vulnerability: zero-days, server-side-only issues, authenticated-only issues, and issues outside the scanned surface may not be detected. Nothing in a report is professional, legal, compliance, or security-consulting advice.
5. Disclaimer of warranties
THE SERVICE AND ALL REPORTS ARE PROVIDED "AS IS" AND "AS AVAILABLE", WITH ALL FAULTS AND WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ACCURACY, COMPLETENESS, AVAILABILITY OR TIMELINESS.
6. Limitation of liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW, WP-SEC, ITS OWNERS, OPERATORS AND AFFILIATES SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, DATA, GOODWILL, BUSINESS, OR SECURITY INCIDENTS (INCLUDING ANY HACK, BREACH, DEFACEMENT OR COMPROMISE OF YOUR SITE), ARISING OUT OF OR RELATED TO THE SERVICE OR ANY REPORT — WHETHER BASED ON WARRANTY, CONTRACT, TORT (INCLUDING NEGLIGENCE), OR ANY OTHER LEGAL THEORY, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
IN ALL CASES, OUR AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THE SERVICE IS LIMITED TO THE AMOUNTS YOU ACTUALLY PAID US IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM, OR USD $50 IF YOU HAVE PAID NOTHING.
7. Indemnification
You agree to indemnify, defend and hold harmless WP-Sec, its owners and operators from and against any and all claims, damages, obligations, losses, liabilities, costs and expenses (including attorney's fees) arising from: (a) your use of the service; (b) your violation of these terms; (c) your submission of a domain you were not authorized to have scanned; or (d) any action you take or fail to take based on a report.
8. Payments, subscriptions & refunds
Reports are digital goods delivered instantly; all sales are final except where required by law or explicitly granted by us. Monitoring subscriptions are billed monthly via Stripe and renew until canceled; you can pause or cancel anytime from your dashboard, and past reports remain accessible. We may change prices prospectively at any time.
9. Third-party data & links
Reports incorporate third-party data (CVE databases, DNS, breach corpora, DataForSEO, blocklists). We do not control and are not responsible for third-party accuracy, availability, or content.
10. Data & removal
We retain audit results to operate, compare, and benchmark the service. Domain owners may request removal of their domain's reports by contacting info@wpsecaudit.com with proof of control.
11. Changes
We may update these terms at any time; the "last updated" date above reflects the current version. Continued use after a change constitutes acceptance.