Terms of Service

These Terms of Service ("Terms") govern your use of the FortifyNet website, security scans, tools, monitoring services and security badges available at fortifynet.com (the "Service"), operated by FortifyNet ("we", "us"), based in Sweden. By using the Service — including running a free scan — you agree to these Terms. If you use the Service on behalf of a company or other organization, you confirm that you are authorized to accept these Terms for that organization, and "you" then refers to that organization. If you do not agree to these Terms, please do not use the Service. Our Privacy Policy (fortifynet.com/PrivacyPolicy) and Cookie Policy (fortifynet.com/CookiePolicy) describe how we handle personal data and cookies, and form part of these Terms.

FortifyNet provides automated website security auditing: a free scan that produces a plain-language security grade (A–F), a detailed 9-point audit (SSL/TLS, DNS and email authentication, performance, HTTP security headers, dark-web exposure, exposed files, compliance indicators, WHOIS and technology detection), optional continuous monitoring and alerts, reports, embeddable security badges, free standalone tools and a WordPress plugin. Some features are free and require no account; others require an account and/or a paid subscription. Current plans, features and limits are described on the Pricing page (fortifynet.com/Pricing). We develop the Service continuously and may add, change or remove features. If a change materially reduces the functionality of a paid plan, Section 14 (Changes) applies.

Some features (saving reports, monitoring, dashboards) require an account. You agree to provide accurate information, keep your login credentials confidential and notify us promptly at support@fortifynet.com if you suspect unauthorized use of your account. You are responsible for activity under your account. You must be at least 18 years old, or the age of legal majority where you live, to create an account.

New accounts may include a 14-day free trial with no payment card required. When the trial ends you are not charged automatically; continued access to paid features requires actively choosing a paid plan. Paid subscriptions are billed in advance, monthly or annually, through our payment provider Stripe. Prices are shown on the Pricing page and, unless stated otherwise, exclude VAT; applicable taxes are added at checkout. Subscriptions renew automatically at the end of each billing period until cancelled. You can cancel at any time in your account settings; cancellation takes effect at the end of the current billing period. Fees already paid are not refunded except as set out in these Terms or where required by law. Nothing in these Terms limits mandatory consumer rights, including any statutory right of withdrawal, under applicable law. We may change prices with at least 30 days' notice; changes apply from your next billing period.

You agree not to: • use the Service for any unlawful purpose or in violation of applicable law; • attempt to probe, disrupt, overload or gain unauthorized access to the Service or its infrastructure; • resell, rent out or pass off the Service as your own, except as expressly allowed by your plan (for example agency or MSP use of reports for clients); • circumvent plan limits, scan quotas or access controls, or use automated means to mass-submit scans; • misrepresent scan results or use them to harass, extort or mislead anyone. We may rate-limit, suspend or block usage that threatens the integrity or availability of the Service.

FortifyNet scans use passive, non-intrusive techniques: they read publicly available information such as HTTP response headers, DNS records, TLS certificate data and publicly reachable files. The Service does not exploit vulnerabilities, does not bypass authentication and does not perform intrusive penetration testing. You agree to run scans only on domains that you own or operate, or for which you have the owner's permission to request a security assessment (for example as their agency, IT provider or consultant). You are responsible for ensuring that your use of scan results complies with applicable law and any agreement with the domain owner.

Websites that achieve a qualifying grade may display a FortifyNet security badge that links to a verification certificate page. The badge is a point-in-time technical indicator, not a certification, warranty or endorsement. You may display the badge only for the domain it was issued for, without altering its appearance or the grade it shows. We may update or revoke a badge if the underlying grade changes, if it is misused, or if it is displayed in a misleading way. FortifyNet is not an accredited certification body, and neither the grade nor the badge is a compliance certificate (for example, it is not an ISO 27001 or PCI DSS certification).

The Service relies on third-party data sources and infrastructure, including SSL Labs (Qualys), Google APIs (PageSpeed Insights, Public DNS), HaveIBeenPwned, Stripe (payments) and Base44 (hosting, EU region). Scan results depend in part on the availability and accuracy of these sources, and a temporary outage at a source can delay or limit specific checks. Your use of third-party services through the Service may also be subject to those parties' own terms.

The Service — including its software, design, brand, scan methodology, texts and graphics — is owned by FortifyNet or its licensors and is protected by intellectual property law. We grant you a limited, non-exclusive, non-transferable right to use the Service in accordance with these Terms and your plan. You may not copy, modify, reverse-engineer or create derivative works of the Service except to the extent permitted by mandatory law.

You retain all rights to the domains you register and the information you submit. Scan reports generated for your domains are yours to use, including sharing them with clients and colleagues. We may use aggregated, de-identified scan statistics — never identifying you or your customers — to improve the Service and to publish research such as the State of Website Security report. How we handle personal data is described in the Privacy Policy.

The Service provides automated, point-in-time technical assessments based on the checks described on the Features page. No security scanner can find every weakness. A high grade does not guarantee that a website is secure, breach-proof or legally compliant, and a low grade does not mean that a site has been breached. The Service and all results are provided "as is" and "as available", without warranties of any kind, express or implied, including fitness for a particular purpose, accuracy or uninterrupted availability. Scan results are not legal advice. For legal or regulatory compliance questions (for example GDPR or NIS2), consult a qualified professional.

To the maximum extent permitted by law, FortifyNet is not liable for indirect or consequential damages — including lost profits, lost data, business interruption or reputational harm — arising from the use of, or inability to use, the Service, or from reliance on scan results. To the maximum extent permitted by law, our total aggregate liability for claims relating to the Service is limited to the amount you paid us for the Service during the 12 months preceding the event giving rise to the claim (or, for free use, EUR 50). Nothing in these Terms excludes or limits liability that cannot be excluded or limited under applicable law (including liability for intent or gross negligence), or affects mandatory consumer rights.

You may stop using the Service and delete your account at any time in your account settings. We may suspend or terminate your access — with reasonable prior notice where practicable — if you materially breach these Terms, if we are required to do so by law, or if the Service is discontinued. If we terminate without cause, we will refund a proportional share of prepaid fees for the remaining subscription period. Sections that by their nature survive termination (including Sections 9, 11, 12 and 14) continue to apply.

We may update these Terms from time to time. For material changes we will give at least 14 days' notice by email or through the Service; if you continue using the Service after a change takes effect, you accept the updated Terms. If you do not accept a material change affecting a paid plan, you may cancel before it takes effect and receive a proportional refund of prepaid fees. These Terms are governed by Swedish law. Disputes shall be resolved by the Swedish courts, unless mandatory consumer protection law in your country of residence provides otherwise. Consumers may also be entitled to use alternative dispute resolution bodies in their country of residence. Questions about these Terms? Contact us at support@fortifynet.com or via fortifynet.com/Contact.