A decision-support tool, with limits.

1. The service

Securvex analyzes public HTTP and HTTPS websites using automated checks. It may query registry, DNS, transport, threat-intelligence, and optional AI services. It produces an estimated risk rating and an evidence report. The service is decision-support software, not a guarantee, certification, audit, or professional security opinion.

The deployment may run without external threat-intelligence credentials or AI. In that state, the report marks those checks as not configured. That is not a clean result.

2. No warranty and no guarantee of safety

The service is provided on an “as is” and “as available” basis to the maximum extent permitted by law. The operator does not warrant that the service will be uninterrupted, error-free, complete, current, or accurate.

• A low or unknown risk result does not mean a website is safe.
• A high risk result is not proof of unlawful conduct.
• Threat data can be stale, incomplete, or wrong.
• The scanner cannot inspect content behind logins, execute JavaScript, or analyze downloads.

You are responsible for your own security decisions, including independently verifying websites before entering credentials, making payments, or sharing sensitive information.

3. Acceptable use

You may use the service to assess public websites for safety. You may not:

• Use the service to attack, overload, scrape, probe, or exploit any system.
• Submit URLs that contain credentials or private access tokens.
• Attempt to bypass rate limits, SSRF protections, authentication, or other controls.
• Use the service in a way that violates applicable law or third-party rights.
• Resell, rebrand, or misrepresent results as a guarantee of safety or as an official certification.
• Interfere with the service, its database, or other users.

Automated or high-volume use requires the operator's prior permission and may be subject to separate terms and provider limits.

4. Third-party services and data

Scans may send the submitted URL, hostname, or domain to external services such as Google Safe Browsing, VirusTotal, abuse.ch URLhaus, RDAP registries, DNS resolvers, and an optional AI endpoint. A keyless community phishing feed may be downloaded by the deployment, but the submitted URL is compared locally and is not sent to it. External services have their own terms and privacy policies. The operator is not responsible for their availability, accuracy, or practices.

Threat-intelligence and AI features are optional and depend on deployment configuration. Third-party names are used to identify data sources and are not endorsements or claims of affiliation.

5. Reports and retention

Reports are stored for a limited period, 30 days by default. Report links are bearer secrets: anyone with the link can view the report until it expires. Do not share a report link publicly if the target or findings are sensitive. The operator may delete reports earlier for operational, legal, or abuse reasons.

6. Availability and changes

The operator may modify, suspend, or discontinue the service at any time. Features, providers, scoring rules, and limits may change. The operator does not promise any specific uptime, response time, retention period, or support level unless a separate written agreement says otherwise.

7. Intellectual property

The application, branding, and original content of this deployment are protected by applicable law. Third-party names, data, and services remain the property of their respective owners. You may use report outputs for your own internal decision-making. Do not present them as an official certification or as the operator's endorsement of a third party.

8. Limitation of liability

To the maximum extent permitted by applicable law, the operator and contributors will not be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for loss of profits, data, goodwill, or business opportunity, arising from use of or inability to use the service. This includes decisions made based on a scan result and any interaction with a scanned website.

Where liability cannot be excluded, it is limited to the amount the operator received for the specific use giving rise to the claim, or the minimum amount required by law, whichever is greater. Some jurisdictions do not allow certain exclusions, so parts of this section may not apply to you.

9. Indemnity

To the extent permitted by law, you agree to indemnify the operator against claims, losses, and expenses arising from your misuse of the service, your violation of these terms, or your infringement of third-party rights.

10. Governing terms

These terms are governed by the laws applicable where the deployment operator is established, without regard to conflict-of-law rules. Any dispute is subject to the courts that have jurisdiction over the operator, unless mandatory law provides otherwise. If a provision is unenforceable, the remaining provisions remain in effect.

These terms are not legal advice. The deployment operator should have them reviewed for its jurisdiction and business model.

11. Contact

Questions about these terms should be directed to the operator of this deployment.