Service terms

1. The service

PlainShield Security provides scheduled, passive security configuration checks of websites, domains and email DNS records that you register, together with reports and recommendations. Optional services (authorized assessments, remediation) are provided only under a separately agreed written scope.

2. Authorization

• You may only register assets you own or are authorized to have tested.
• Before any scan, you must verify control of the asset and sign a scan authorization describing the permitted methods, rate limits, scan window and an emergency contact.
• You may pause scans or revoke authorization at any time from the dashboard.
• You are responsible for confirming that your hosting provider's terms permit the checks.

3. What the service is not

The standard service is not a penetration test, does not test application logic or authentication, and cannot detect all vulnerabilities. A clean result does not mean your systems are secure. We do not provide 24/7 monitoring or incident response unless separately contracted in writing.

4. No changes to your systems

We do not access or change your systems. We provide findings and recommendations; you remain responsible for deciding whether and how to implement them.

5. Fees

Subscriptions are billed monthly in advance and may be cancelled at any time, effective at the end of the billing period. Work beyond included allowances is quoted and approved in advance.

6. Liability

To the maximum extent permitted by law, our aggregate liability is limited to the fees paid in the three months preceding the claim. Nothing in these terms limits liability that cannot be limited by law.

7. Data

See our Privacy Policy. You can export or permanently delete your organization's data at any time.