1. Your account and agreement
By selecting the agreement checkbox and creating an account, you agree to these terms and acknowledge the Privacy Notice. You must be at least 18 and able to enter into this agreement. If you act for an organization, you must have authority to bind it and authorize testing on its behalf.
Keep your account information accurate and your credentials secure. You are responsible for activity you authorize and for the people you invite into your workspace. Tell us promptly if you suspect unauthorized access. Registration does not guarantee activation; account access may require approval and email verification.
2. Permission to test is your responsibility
Only add and scan systems you own or have explicit permission to test. DNS verification demonstrates control of a domain; it does not establish legal permission from every owner, hosting provider, customer, or third party involved.
A scan may discover and test hosts within the verified domain and its subdomains. Before starting, make sure your authority covers that scope, your selected scan options, your hosting provider’s rules, and any affected systems. Do not start a scan if those permissions are unclear. You authorize Lugescan and the providers it uses to perform the testing you request within the permitted scope.
3. Scanning carries operational risk
Security scans send automated requests and probes to your systems. Depending on the selected checks, they may trigger alerts, create logs, consume resources, affect availability, or interact with application behavior. Safeguards reduce risk but cannot eliminate it. Arrange backups, monitoring, an appropriate testing window, and any third-party approvals before scanning sensitive or production systems. Stop testing if you observe an unexpected impact.
4. Responsible use
Do not use Lugescan for unauthorized access, disruption, fraud, harassment, malware, data theft, or attempts to bypass service safeguards or limits. Do not target infrastructure outside your authorized scope. Do not submit stolen credentials, unnecessary personal information, payment details, health records, or other sensitive information. If a workflow accepts credentials, use a dedicated test account with the minimum permissions and revoke it afterward.
Handle vulnerability information responsibly. Share reports only with authorized recipients and give affected owners a reasonable opportunity to investigate before disclosure.
5. What reports can and cannot tell you
Findings are automated assessments and may use AI. They can be incomplete, outdated, or incorrect, including false positives and missed vulnerabilities. Results reflect the accessible systems and conditions during the scan. A clean report is not proof of security, compliance, certification, or suitability for a particular purpose. Simulated results are labeled and must not be treated as live security findings.
Have a qualified person validate findings and proposed fixes before relying on them or changing production systems. Lugescan does not replace a full penetration test, continuous monitoring, or professional security or legal advice.
6. Your data and workspace
You retain your rights to the information you submit and your reports. You give Lugescan permission to process that information to provide, secure, and support the service, including through infrastructure and AI providers described in our Privacy Notice. You must have the right to submit it.
Where we use AI, we use externally hosted models under zero data retention (ZDR) arrangements for scan inputs and outputs, local models with our stated encryption-at-rest protections, or sovereign models hosted in Guyana. ZDR concerns the external model provider’s retention; Lugescan’s own report and operational-data retention still applies. See the Privacy Notice for processing locations and the limits of these protections.
Workspace information is available to members according to their permissions. Inviting someone or sharing an exported report can expose sensitive findings. Encryption at rest does not make the service end-to-end encrypted or prevent all operator access.
7. Limits, availability, and payment
Access, scan quotas, concurrency, and report retention depend on the plan and service configuration. Review any price, billing period, and cancellation terms presented before making a paid purchase. These terms alone do not authorize a charge.
We may maintain, change, or interrupt the service and may limit or suspend access to address misuse, security risks, legal obligations, or service stability. We cannot guarantee uninterrupted availability or permanent storage. Export reports you need to keep.
8. Closing your account
You may stop using the service or request account deletion through the account settings. Deleting an owner’s account can also delete the workspaces they own and their associated data, affecting other members. Export needed reports and coordinate with your team first. Deletion and retention limits are explained in the Privacy Notice. Suspension or closure does not remove obligations arising from earlier misuse.
9. Warranties and responsibility
To the extent permitted by applicable law, Lugescan is provided as available, without a promise that it will find every vulnerability, prevent an incident, or produce error-free results. To that same extent, Lugescan is not responsible for indirect or consequential losses, lost profits, or losses arising from unauthorized testing, your system configuration, or decisions made without validating findings.
Nothing in these terms excludes rights or liabilities that applicable law does not allow us to exclude, including mandatory consumer protections. Each party remains responsible for its own conduct as required by law.
10. Changes and applicable rights
The effective date identifies this version. We will communicate material changes through the service or account email before they take effect where required. Where renewed agreement is required, we will ask for it. Changes do not retroactively authorize a new use of your data. Applicable law and any mandatory rights you have continue to apply; contact us first so we can try to resolve a concern.
Contact
Contact Lugescan at [email protected] with questions about these policies, your account, or your personal information. For privacy requests, include your account email and the request, but do not email passwords or sensitive scan reports. We may verify your identity before acting.