Terms of Service

1. Acceptance of Terms

By accessing or using VulneraX, a vulnerability management and security scanning platform operated by Dimitris Marakomichelakis ("we," "us," or "our"), you agree to be bound by these Terms of Service. If you are using VulneraX on behalf of a business or organization, you represent that you have the authority to bind that entity to these terms, and "you" refers to both you individually and that entity.

If you do not agree to these terms, you may not access or use VulneraX. Your access to and use of VulneraX is also conditioned on your acceptance of and compliance with our Privacy Policy.

2. Account Registration and Responsibilities

To use VulneraX, you must create an account by providing accurate and complete information. You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account.

You agree to:

• Provide accurate, current, and complete information during registration
• Maintain the security of your password and account credentials
• Notify us immediately of any unauthorized use of your account or security breach
• Accept responsibility for all activities conducted through your account
• Use your account in compliance with these Terms of Service

We reserve the right to suspend, limit, or terminate your account if you violate these terms or engage in any activity that we reasonably believe threatens the security or integrity of VulneraX or its users.

3. Service Description and Modifications

VulneraX is a SaaS platform that provides vulnerability scanning, security assessment tools, dependency analysis, and related services ("Services"). Our platform is designed to help organizations identify, track, and remediate security vulnerabilities in their web applications and infrastructure.

Free Plan: Includes 5 vulnerability scans per month, basic reporting, and access to standard security tools.

Pro Plan ($59/month): Includes 50 vulnerability scans per month, 30 AI-powered dependency scans per month, advanced reporting, CI/CD integration, team management, and access to all premium security tools.

We reserve the right to modify, suspend, or discontinue any aspect of VulneraX at any time, including features, scan limits, pricing, or the availability of the Services. We will provide reasonable notice of any material changes to the Services or pricing.

We may also impose limits on certain features or restrict your access to parts or all of the Services without notice or liability, particularly if you exceed your plan limits or violate these terms.

4. Acceptable Use Policy

Authorization Requirement: You must have explicit permission to scan or test any target system. Scanning systems you do not own or do not have authorization to test is strictly prohibited.

You agree to use VulneraX only for lawful purposes and in compliance with all applicable laws and regulations. The following activities are strictly prohibited:

• Scanning or testing systems without explicit authorization from the owner
• Using VulneraX for any illegal or unauthorized purpose
• Attempting to gain unauthorized access to any system, network, or data
• Interfering with or disrupting the Services or servers connected to VulneraX
• Transmitting viruses, malware, or any other malicious code
• Using VulneraX to launch attacks against third parties
• Reverse engineering, decompiling, or attempting to derive the source code of VulneraX
• Automated scraping or bulk data collection from the platform
• Sharing API keys or account access with unauthorized parties
• Using Pro tools (reverse shell generator, subdomain finder, phishing simulator) for malicious purposes or without proper authorization

User Responsibility: You are solely responsible for ensuring you have proper authorization before conducting any security scans or tests. VulneraX is a tool that facilitates vulnerability identification, but the responsibility for obtaining authorization and conducting ethical security testing lies entirely with you.

No Liability for Unauthorized Use: VulneraX and Dimitris Marakomichelakis accept no responsibility or liability for any damage, harm, or legal consequences resulting from unauthorized scanning or testing activities conducted by users. You agree to indemnify and hold harmless VulneraX and Dimitris Marakomichelakis from any claims arising from your use of the Services without proper authorization.

5. Subscription Plans and Usage Limits

VulneraX offers two subscription tiers:

• Free Plan: 5 vulnerability scans per calendar month, basic features
• Pro Plan: $59 per month, 50 vulnerability scans, 30 AI dependency scans, all premium features including team management, CI/CD integration, and advanced security tools

Scan limits reset at the beginning of each billing cycle. Unused scans do not roll over to the next billing period. If you exceed your monthly scan limit, additional scans will be blocked until your next billing cycle or you upgrade to a higher plan.

Some premium features may incur additional usage-based charges beyond the standard Pro Plan subscription fee. Such charges will be clearly disclosed before you incur them.

6. Billing, Cancellations, and Refunds

Pro Plan subscriptions are billed monthly at $59. All payments are processed securely through Stripe, our third-party payment processor. By providing payment information, you authorize us to charge your designated payment method on a recurring monthly basis.

Cancellations: You may cancel your Pro Plan subscription at any time through your account settings or by contacting us. Your subscription will remain active until the end of your current billing period. After cancellation, your account will revert to the Free Plan at the start of the next billing cycle.

Refunds: All subscription fees are non-refundable unless required by applicable law. We reserve the sole discretion to evaluate refund requests on a case-by-case basis. No refunds or credits are provided for partial months of service, unused scans, or subscription upgrades/downgrades.

Price Changes: We may change our pricing at any time. Price changes will take effect at the start of your next billing cycle following the notice period. Continued use of the Services after a price change constitutes acceptance of the new pricing.

Failed Payments: If your payment fails, we will attempt to charge your payment method again. If payment remains unsuccessful after multiple attempts, we may suspend or terminate your subscription and access to Pro features.

7. API Keys and CI/CD Integration

VulneraX provides API keys that enable programmatic access to the Services, including scan initiation, report generation, and integration with external systems. You are responsible for:

• Keeping your API keys confidential and secure
• Rotating API keys immediately if they are compromised
• All activities conducted using your API keys
• Ensuring automated systems using our API comply with these Terms

CI/CD integrations (GitHub, GitLab webhooks) allow you to trigger scans automatically during your deployment pipelines. You must ensure that webhook endpoints are properly secured and that only authorized users can configure integration settings.

We may revoke or rotate API keys for security reasons or if we detect abuse. We reserve the right to rate limit API requests to ensure platform stability.

8. User Content

"User Content" refers to all data, information, and materials you upload, submit, or store through VulneraX, including scan targets, vulnerability findings, reports, test profiles, and team data.

You retain all ownership rights to your User Content. By uploading User Content to VulneraX, you grant us a limited, worldwide, non-exclusive license to use, process, and store your User Content solely for the purpose of providing the Services to you.

We will not access, review, or disclose your User Content except:

• As necessary to provide the Services and troubleshoot technical issues
• When required by law, court order, or governmental request
• To enforce these Terms of Service or investigate potential violations
• To protect our rights, privacy, safety, or property

You are solely responsible for:

• Ensuring you have all necessary rights to share the User Content you upload
• Backing up important User Content regularly
• Ensuring User Content does not violate any laws or third-party rights

Upon account termination or deletion request, we will delete your User Content within a commercially reasonable period, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing our rights).

9. Disclaimer

VULNERAX IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.

We do not warrant that:

• The Services will be uninterrupted, error-free, or completely secure
• Vulnerability scans will detect all security vulnerabilities
• Reports or recommendations will be completely accurate or complete
• Any specific vulnerability remediation advice will be effective

Security scanning is inherently limited and cannot guarantee the identification of all vulnerabilities. False positives and false negatives may occur. You should not rely solely on VulneraX for your security posture and should employ multiple security measures and professional security audits.

Authorization Disclaimer: VulneraX is a tool that facilitates security assessments. We do not verify, endorse, or take responsibility for whether users have obtained proper authorization for their scanning activities. Users are solely responsible for ensuring they have explicit permission before scanning any target.

No Liability for Scanning Activities: Dimitris Marakomichelakis and VulneraX accept no liability for any damage, harm, legal action, or consequences arising from your scanning activities, whether authorized or unauthorized. By using VulneraX, you agree to indemnify and hold us harmless from any claims related to your use of the Services.

10. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW:

IN NO EVENT SHALL DIMITRIS MARAKOMICHELAKIS, VULNERAX, OR THEIR AFFILIATES, OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, OR SUPPLIERS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, LOSS OF DATA, BUSINESS INTERRUPTION, OR COST OF SUBSTITUTE SERVICES, ARISING OUT OF OR RELATED TO YOUR USE OF OR INABILITY TO USE VULNERAX, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

IN NO EVENT SHALL OUR TOTAL CUMULATIVE LIABILITY ARISING FROM THESE TERMS OR YOUR USE OF VULNERAX EXCEED THE AMOUNTS PAID BY YOU TO US IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM OR €100, WHICHEVER IS GREATER.

These limitations apply regardless of the legal theory on which the claim is based, whether tort, contract, strict liability, or any other theory, and survive even if any remedy fails of its essential purpose.

11. Termination

By You: You may terminate your account at any time by contacting us or through your account settings. Upon termination, your right to use VulneraX ceases immediately.

By Us: We may terminate or suspend your account and access to VulneraX immediately, without prior notice or liability, if you:

• Violate these Terms of Service
• Engage in unauthorized or illegal scanning activities
• Fail to pay subscription fees
• Abuse, threaten, or harass our team or other users
• Engage in any activity that threatens the security or stability of VulneraX

Upon termination:

• Your right to use the Services immediately ceases
• We may delete your account and User Content within a commercially reasonable time
• All outstanding fees become immediately due and payable
• Provisions that by their nature should survive termination will survive

We reserve the right to retain User Content as required by law or for legitimate business purposes, subject to our Privacy Policy commitments.

12. Governing Law and Contact Information

These Terms of Service shall be governed by and construed in accordance with the laws of the European Union and the applicable laws of the member state in which you reside or, if you are a business, the member state where Dimitris Marakomichelakis is based.

Any disputes arising from these Terms or your use of VulneraX shall be subject to the exclusive jurisdiction of the courts of the European Union member state referenced above.

If you are a consumer with habitual residence in an EU member state, you also benefit from any mandatory provisions of the consumer protection laws of your country of residence.

Contact Information:

If you have any questions about these Terms of Service, please contact us at: dimitrismarako@outlook.com

Dimitris Marakomichelakis operates VulneraX as a solo web development project.I am committed to providing a secure and reliable service while respecting user privacy and complying with applicable EU regulations.