Terms & Conditions

ThreatLens scans websites from the outside and reports what it finds: certificates and TLS, security headers, cookies, DNS and email security, and, for websites you have proved you own, known vulnerabilities and exposed files. It scores each scan, keeps your history, schedules repeat scans and produces reports and PDFs. It reports what is visible from outside. A clean result does not prove a website is secure, and a report is not a penetration test.

You may only scan websites that you own or have written permission to test. When you add a website you confirm that you have that right. Scanning a system without permission can be a crime under the laws of India and other countries, and you alone are responsible for it.

• Basic scans are passive: they do what a browser or a mail server does. Deeper scans send more test requests, and are available only after you prove you control the domain (a DNS record, a file or a meta tag). We may check this again before each deep scan.
• You must not point ThreatLens at private networks, other people's systems, or anything you do not control, and you must not try to get around our checks on this.
• If a website's owner asks us to stop scanning it, we will, and we may remove it from your account.

You must be at least 18 and able to enter a contract under Indian law. If you use ThreatLens for a company, you confirm you may bind that company. You must give true details when you sign up, confirm your email address, and keep them up to date.

• You are responsible for everything done under your account, including by team members you invite.
• Keep your password secret and use a strong one. Tell us at once if you think it has been misused.
• Seats, websites and monthly credits are limited by your plan.

A new account gets a free trial of 3 days with 20 credits, and no card is needed. The trial has smaller limits than a paid plan and does not include white-label reports. When it ends, the account has no active plan: you can still sign in and read your reports, but no new scan can run until you pay for a plan. Your data is kept.

• Paid plans are bought for 1, 3 or 12 months, in Indian rupees. The prices are shown on the Billing page, and the amount you pay is the amount shown there, including any GST that applies.
• You pay by UPI. Choose a plan and a period, pay the exact amount to our UPI ID, and enter the 12-digit transaction number. We check it against our bank account, usually within a few hours, and then switch the plan on. Time you had already paid for is added to, not lost.
• A paid plan includes a number of scan credits each month. A scan costs credits, and a deep scan costs more. Credits do not carry a cash value, and unused credits are not refunded. If a scan fails on our side, its credits are returned to you.
• A plan does not renew by itself. When it ends, scanning stops until you pay again. We email you before this happens.
• If you enter a wrong amount or transaction number, or we cannot find the payment, we may reject it and ask you to try again.
• We may change prices and plan limits. A change will not affect a period you have already paid for.

Payments for plans are not refundable once the plan has been switched on, including if you stop using the service part-way through. If we charged you in error, for example twice for the same thing, tell us within 30 days and we will correct it.

You keep ownership of the websites you add, your notes and your reports. You give us permission to store and process them only to provide the service to you, as described in our Privacy Policy. If you give reports to your own clients, you are responsible for what you tell them, and for making clear that the findings come from an automated external scan.

• Do not use ThreatLens to attack, disrupt or gain unauthorised access to any system.
• Do not try to break, overload or reverse-engineer the service, get around its limits or rate limits, or share a login between people.
• Do not resell ThreatLens, or its reports as a service of your own that hides where they come from, without our written permission. White-label reports on the plan that includes them are allowed.
• Do not use the service to collect personal data or to harm anyone.

• We may suspend or close an account that breaks these terms, scans something it has no right to scan, or puts the service or other customers at risk. When we reasonably can, we will tell you first.
• You can stop using ThreatLens at any time and ask us to delete your account. Paid time already used is not refunded.
• When an account is closed we delete its data as described in the Privacy Policy.

We work to keep the service running and your data safe, but it is provided as is. We do not promise that it will always be available or error free, that it will find every weakness, or that it will not report something that turns out to be harmless. Scans depend on the websites and networks they check, which are outside our control.

To the extent the law allows, we are not liable for indirect or consequential loss, lost profits, lost business or loss of data, including loss that follows from relying on a report or from a weakness that a scan did not find. Our total liability to you for any claim about the service is limited to the amount you paid us in the three months before the event that caused the claim. Nothing in these terms limits liability that cannot be limited by law.

You will cover our reasonable losses and costs if a claim is made against us because you scanned a system you had no right to test, broke the law, or broke these terms.

We may update these terms. For a change that matters, we will tell account owners by email or in the app and update the date above. If you keep using the service after that, you accept the new terms.

These terms are governed by the laws of India. The courts at Faridabad, Haryana, India have exclusive jurisdiction over any dispute about them or the service, after you have first written to us at hi@idmvalley.com and we have had 30 days to try to settle it.

IDM VALLEY Pvt. Ltd., A7/15 Ground Floor, Sec - 85 BPTP, Faridabad, Haryana, India, 121002 (GSTIN 06CURPG3626F1ZL).
Email hi@idmvalley.com.