Skip to content
Check a domain

Legal

Terms of Service

Effective date: 19 October 2026 · Version: 1.2

These terms are the agreement between you and us when you use ScanDefend. They include the documents they link to:

If these documents conflict, the Scan Authorization Terms and the Acceptable Use Policy take priority on anything about scanning, the Refund and Credit Policy takes priority on credits and refunds, and these terms take priority on everything else.

You accept these terms when you tick the box at the order step, create an account, or otherwise use ScanDefend. If you don't accept them, don't use ScanDefend.

1. Who we are

ScanDefend is a trading name of IronSky Limited, a company registered in Ireland.

  • Company number: 659967 (Companies Registration Office, Ireland)
  • Registered office: First Floor, Penrose 2, Penrose Dock, Cork, Ireland
  • VAT number: IE3670108PH
  • Support: support@scandefend.com · Billing: billing@scandefend.com

"We", "us" and "ScanDefend" mean IronSky Limited trading as ScanDefend. "You" means the person using ScanDefend and, if you use it for an organisation, that organisation. A "consumer" is an individual acting for purposes outside their trade, business, craft or profession.

2. What ScanDefend does

ScanDefend checks the public configuration of websites for common security weaknesses and explains the results in plain language.

  • Quick Scan is a passive, read-only, external check of information a website and public sources already make available. It looks at a site the way a visitor's browser would and consults public records about the domain. It does not log in, submit forms or try to break anything. The Scan Authorization Terms describe it in more detail.
  • Future services. If we add a service that actively tests or scans websites, it will run only for a signed-in customer who has proved control of the domain, under terms we publish at that time.

3. What a scan is, and what it is not

Please read this section carefully. It limits what you can expect from ScanDefend.

  • ScanDefend does not perform penetration testing. A scan is not a security audit, a penetration test, a certification or a guarantee. It reports what our checks could observe from outside, at the time they ran.
  • A scan will not find every issue. "No issues found" means nothing was found in the checks that ran. It is not a statement that a site is secure, and it says nothing about anything outside those checks.
  • Results are a point-in-time snapshot. A website can change minutes after a scan. A report is not updated after it is produced.
  • Results can be wrong. Findings carry a confidence label. Some may be false positives, and real problems may be missed or rated differently from how a specialist would rate them.
  • Every report lists its limits. Each report says what was checked and what wasn't, with the reason where a check could not run.
  • Reports are information, not advice. Nothing in a report or on our website is legal, compliance, insurance or professional security advice. You are solely responsible for deciding what to do with a report, for any changes you make to a website, and for getting professional advice where you need it.

4. AI-written text

Where a report or message from us includes text written with the help of an AI model, it is labelled as such. AI-written text explains our findings; it does not run scans, widen their scope or change a finding's severity. It can still be inaccurate or incomplete. The findings and evidence in the report are what count.

5. Accounts

  • You don't need an account to buy or run a Quick Scan. You need one to keep reports, download them and see your history.
  • You can sign in with a passkey, an email link or code, or a supported third-party sign-in provider. We may add or remove sign-in methods.
  • Keep your sign-in methods secure. You are responsible for everything done through your account, and you must tell us at support@scandefend.com straight away if you think it has been misused.
  • If you create or use an account for an organisation, you confirm you have authority to bind it to these terms.
  • You must be at least 18 years old to use ScanDefend.
  • You can export your data or delete your account from your dashboard. See the Privacy Notice.

When you start checkout, we set a secure cookie in your browser (a "claim session") that lets you follow your scan, see its preview and spend your credits. It lasts up to 7 days.

If you lose the cookie or change device, we can email a single-use resume link to the email address used at checkout. The link expires after 15 minutes. Access depends on control of that inbox. Anyone who controls that inbox can use the link, so keep it secure.

If you lose access to that inbox, we restore access only after extra checks against our payment provider's records, a 24-hour delay with notice to the original address, and only to a newly verified email address. We may refuse a recovery request we cannot verify.

Unclaimed anonymous assessments are deleted after 30 days. Save your report to an account to keep it.

7. Buying credits

  • Price: Quick Scan credits are sold in packs: 1 credit for USD 8, 5 credits for USD 18, or 20 credits for USD 59, plus applicable tax. One credit runs one Quick Scan of one website. Prices may change; a change never affects credits you have already bought.
  • Merchant of record: credit purchases are processed through Stripe Managed Payments. Stripe, through its Link service, is the merchant of record for your purchase: it takes the payment, calculates and charges any tax, and issues your receipt and any invoice under the terms Stripe shows you at checkout. Your statement may show LINK.COM*. IronSky Limited provides the ScanDefend service, and these terms govern that service and your use of credits.
  • Tax and currency: prices are set in US dollars. Tax is added at checkout based on your location. Stripe may offer you the price in your local currency; any conversion is Stripe's.
  • Card details: we never see or store your full card details.
  • Quotes: the price you pay comes from a quote shown before checkout. If the quote expires before you pay, your payment still becomes credit at the price you paid.
  • When credits arrive: credits are added only when Stripe confirms the payment. Some payment methods take longer to clear.
  • Where credits live: before you have an account, credits belong to an anonymous wallet reached through your claim session or resume link. When you save a report to an account, the remaining credits move to that account.
  • Payment questions (charges, receipts, tax, invoices) go to Stripe through the link on your receipt, or to billing@scandefend.com. Service questions go to support@scandefend.com.

8. Credits

  • Credits are prepaid, have no cash value, are not transferable (except to your own account as described above) and can't be resold.
  • Credits expire 12 months after the purchase they came from. Expired credits are removed and are not refunded.
  • Credits can be used only for the scans we offer for them at the time.
  • If a payment is disputed or reversed, unused credits from that purchase are frozen while the dispute is open, and removed if the payment is reversed.
  • Credits are refunded only as set out in the Refund and Credit Policy or where the law requires it.

9. Capacity, waiting and cancelling

We limit how much scanning runs at any time so the service stays safe and affordable.

  • If we're at capacity when you pay, your payment is kept as credit and your scan starts automatically when capacity frees up. If you've waited more than 24 hours, you can have a refund instead.
  • We may stop accepting new scans at any time (for example for maintenance, an incident, a cost limit or a provider's requirement). Credits stay valid while we do.
  • You can cancel a scan that hasn't started yet, and its credit is returned. A scan that is already running can't be cancelled.

10. Consumers: your right to withdraw

If you are a consumer in the EU or EEA (or another country that gives a similar right), you normally have 14 days from purchase to withdraw from a contract for a digital service.

  • Unused credits: you can withdraw within 14 days of purchase for credits you haven't used. Our Refund and Credit Policy goes further and refunds unused credits on request for 30 days.
  • Scans you start: when you start a scan, you expressly ask us to perform it straight away, within the withdrawal period, and you acknowledge that you lose your right to withdraw for that scan once it has been fully performed. A Quick Scan is usually fully performed within minutes.

Because Stripe is the merchant of record, Stripe may also apply its own refund and cooling-off rules to the payment.

11. Your responsibilities

You must:

  • order scans only where you are entitled to, as set out in the Scan Authorization Terms. You alone are responsible for having any authority needed to scan a website you order a scan of.
  • follow the Acceptable Use Policy and all laws that apply to you;
  • give accurate information, including the email address you use at checkout;
  • keep reports, report links, resume links and sign-in links confidential and share them only with people who need them; and
  • decide for yourself whether and how to act on a report.

12. Our right to refuse, suspend or cancel

We may refuse, delay, stop or cancel any scan or order, and suspend or close any account or wallet, at our discretion and without giving reasons in advance, including where:

  • we suspect a breach of these terms, the Scan Authorization Terms or the Acceptable Use Policy;
  • the site owner has opted out or complained, or a per-site or per-customer limit has been reached;
  • the target isn't a public website, or scanning it could harm the site, others or us;
  • we are at capacity or have paused scanning;
  • continuing would create legal, regulatory, security or reputational risk for us; or
  • the law, a court, an authority or a provider we rely on requires it.

If we cancel a scan before it runs, or it fails on our side, its credit is returned to your wallet. If we act because you broke these terms, the Scan Authorization Terms or the Acceptable Use Policy, we may also cancel your unused credits without refund, except where the law requires a refund.

13. Reports, our service and your feedback

  • Reports. Subject to these terms, you may use the reports you order for any lawful purpose, including sharing them with people responsible for fixing the issues. You may not present a report as a penetration test, an audit or a certificate that a site is secure.
  • Our service. We and our licensors own the ScanDefend service, software, website, check catalogue, report format, templates and brand, and all intellectual property in them. We give you a limited, personal, non-exclusive, non-transferable, revocable right to use ScanDefend under these terms. You must not copy, resell, reverse engineer, scrape or build a competing service from ScanDefend, or remove any notices from it.
  • Aggregated data. We may create anonymised, aggregated statistics from scans that don't identify you or any website (for example, how common a missing header is) and use them to operate, improve and promote ScanDefend and to publish research. These statistics belong to us.
  • Feedback. If you send us ideas or feedback, we may use them freely without any obligation to you.

14. Availability and changes

  • ScanDefend is in beta. It is provided "as is" and "as available". Features may change, be paused or be withdrawn. We don't promise any level of availability, speed or uptime, or that the service will be error-free or uninterrupted.
  • We may change the service at any time. If we withdraw Quick Scan permanently, we'll refund unused, unexpired credits.
  • We may change these terms. For material changes, we'll give account holders at least 14 days' notice by email or in the product. Changes apply to orders placed after they take effect, and continued use after that date means you accept them. Changes never reduce the value of credits you already bought.

15. No other promises

To the fullest extent the law allows, we give no warranties, conditions or other promises about ScanDefend, reports or results, whether express or implied, including any implied terms of satisfactory quality, fitness for a particular purpose, accuracy, completeness or non-infringement. In particular, we don't promise that a scan will find every weakness, that a site is secure, or that acting on a report will prevent any incident.

If you are a consumer, this section does not affect the statutory rights you have that cannot be excluded, such as the right to a service provided with reasonable care and skill.

16. Liability

16.1 What we never exclude. Nothing in these terms limits or excludes our liability for death or personal injury caused by our negligence, for fraud or fraudulent misrepresentation, or for anything else that cannot be limited or excluded by law, including a consumer's mandatory rights.

16.2 Losses we are not responsible for. Subject to 16.1, we are not liable, whether in contract, tort (including negligence), breach of statutory duty or otherwise, for:

  • any indirect, special or consequential loss;
  • loss of profits, revenue, business, contracts, goodwill or anticipated savings;
  • loss or corruption of data;
  • any security incident, breach, attack or downtime affecting your or anyone else's website or systems, or any issue a scan did not detect;
  • any decision you make, or don't make, based on a report; or
  • losses caused by events outside our reasonable control (section 19).

16.3 Cap. Subject to 16.1, our total liability to you for all claims arising out of or in connection with ScanDefend or these terms, in any 12-month period, is limited to the greater of (a) the total amount you paid for credits in the 12 months before the event giving rise to the claim and (b) EUR 100.

16.4 Consumers. If you are a consumer, we are responsible for loss you suffer that is a foreseeable result of our breach of these terms or our failure to use reasonable care and skill. Loss is foreseeable if it is obvious it will happen or if both of us knew it might happen when you ordered. ScanDefend is provided for domestic and private use only when you use it as a consumer, so we are not liable to consumers for business losses. The cap in 16.3 applies to consumers to the extent the law allows.

16.5 Time limit. To the extent the law allows, any claim against us must be brought within one year of the date you became aware, or should reasonably have become aware, of it.

17. Your responsibility for misuse (indemnity)

If you use ScanDefend in the course of a business, you will indemnify and hold harmless IronSky Limited, its directors, staff and contractors against all claims, losses, damages, fines, penalties, costs and expenses (including reasonable legal fees) arising from:

  • any scan you order of a website you were not entitled to have scanned;
  • your breach of these terms, the Scan Authorization Terms or the Acceptable Use Policy;
  • your use or disclosure of reports or results; or
  • any claim by a third party (including a website owner, host or authority) connected with your use of ScanDefend.

If you are a consumer, you are responsible for losses you cause us by breaking these terms, the Scan Authorization Terms or the Acceptable Use Policy, to the extent the law allows.

18. Suspension and ending this agreement

  • You can stop using ScanDefend at any time, and delete your account from your dashboard. When you delete your account, any unused credits in it are forfeited. Ask for a refund of eligible credits under the Refund and Credit Policy before you delete it.
  • We may suspend or end your access at any time under section 12, or with 30 days' notice for any other reason. If we end your access for a reason other than your breach, we'll refund your unused, unexpired credits.
  • Sections 3, 8, 13 and 15 to 21 continue after this agreement ends.

19. Events outside our control

We are not responsible for any failure or delay caused by events outside our reasonable control, including failures of hosting, network, payment or email providers, internet outages, attacks on our systems, power failures, acts of government, and natural events. We'll take reasonable steps to limit the effect on you.

20. General

  • Transfer. We may transfer our rights and obligations under these terms to another organisation, for example as part of a sale or reorganisation of our business. You may not transfer yours without our written consent.
  • Entire agreement. These terms and the documents they include are the whole agreement between you and us about ScanDefend. If you are a business, you confirm you haven't relied on any statement not set out in them.
  • Severability. If a court finds part of these terms invalid, the rest stays in force, and the invalid part applies to the greatest extent the law allows.
  • No waiver. If we don't enforce a right straight away, we can still enforce it later.
  • Third parties. Nobody other than you and us has any right to enforce these terms.
  • Notices. We may send notices to the email address linked to your wallet or account. You can send notices to support@scandefend.com or to our registered office.
  • Language. These terms are in English. If they are translated, the English version prevails to the extent the law allows.

21. Law and disputes

These terms, and any dispute or claim arising out of or in connection with them or ScanDefend (including non-contractual disputes or claims), are governed by the law of Ireland, and the courts of Ireland have exclusive jurisdiction.

If you are a consumer, this is without prejudice to the mandatory protections of the law of the country where you live, and you may also bring proceedings in the courts of that country where the law gives you that right.

Please contact us first at support@scandefend.com; most problems can be solved quickly that way.

22. Contact