Terms & Conditions
These terms govern access to Hack My Website, operated by AIVI Intelligence Private Limited.
1. Authorized Use & Target Ownership
You may only register and scan web domains that you directly own or are explicitly authorized in writing to test. Scanning external infrastructure without authorization is strictly prohibited and constitutes a material breach of these terms.
2. Non-Destructive Scanning Model
Our scanning engines (OWASP ZAP, Nuclei, Semgrep) execute non-destructive, non-DoS vulnerability checks. While the scanner is designed to avoid downtime, customers are advised to run scans during maintenance windows or staging environments for mission-critical systems.
3. Ephemeral GitHub Code Audits
When connecting a GitHub repository for SAST and secret scanning, repository contents are processed ephemerally in memory solely for the duration of the scan. No source code files are permanently saved to our persistent storage.
4. Subscription Tiers & Razorpay Billing
Subscription plans (Free, Starter, Pro, Agency) are billed monthly. Paid plans can be managed or canceled at any time via the customer workspace portal. Quotas reset automatically at the beginning of each billing cycle.
5. Agency White-Label Distribution
Agency tier subscribers may distribute white-labeled PDF reports to third-party clients. The agency subscriber remains responsible for explaining the findings to their clients.
6. Limitation of Liability
Hack My Website provides automated security assessments to help identify vulnerabilities before production launch. Automated scanning does not guarantee total absence of security vulnerabilities and should complement standard code review practices.