Terms of use

The service

Scan.now provides free, passive security checks and educational content. It is offered as is, without warranty. A clean result is not a guarantee that a site, browser or file is secure; a finding is not proof of a vulnerability. You are responsible for decisions you make based on a report.

Acceptable use

• Scan websites you own, operate, or have permission to assess, or public sites you are evaluating as a user. The checks are read-only, but you remain responsible for complying with the laws that apply to you.
• Do not use the scanners to harass a site operator, to run automated bulk scanning, or to attempt to circumvent rate limits.
• Do not upload files you do not have the right to share for analysis. Uploaded files are not stored.
• Do not attempt to make the scanner reach private, internal or non-public addresses.

What a scan actually does to the target

This matters for whether you are allowed to run one. A scan requests the page as a browser would, follows redirects, opens TLS connections to test protocol versions, resolves DNS records, and requests a short fixed list of paths that should never be public. It never submits a form, never guesses a credential, never sends an exploit payload and never writes anything. How we scan lists every request each scanner makes. A site owner reading their access log sees traffic indistinguishable from an ordinary visitor plus a handful of 404s.

Rate limits

Limits are applied per address, and they are generous for a person and tight for a loop. A full website scan is limited to 12 an hour and 3 a minute; a deep crawl to 6 an hour; a file scan to 8 an hour. Hitting a limit returns HTTP 429 and costs you nothing. Automating around the limits — rotating addresses, distributing requests — is the one thing in these terms that will get an address blocked rather than throttled.

Scanning a site you do not own

The checks are the ones any visitor’s browser performs, so running them against a public site is not an intrusion. That is a statement about what the tool does, not legal advice about your jurisdiction, and it does not extend to using the results to pressure or embarrass an operator. If you are scanning on a client’s behalf, have their permission in writing, as you would for any assessment.

Reports

Reports are stored for 30 days at a link that is not listed anywhere. Anyone with the link can view it. Do not share a report link if you do not want the results seen.

How report links behave

• They are unguessable, not secret. The token is random; treat the link like a password.
• They are served noindex and excluded in robots.txt, so they do not appear in search results.
• They expire after 30 days and are deleted, not archived.
• They can be deleted sooner on request, with no account and no proof of ownership required — send the link through the contact form.

Paid plans

Scans of up to 25 pages are free, subject to a daily allowance per visitor that we may adjust to keep the service usable for everyone. A paid plan removes that daily allowance entirely. Rate limits still apply on every plan — not to ration what you have paid for, but because these requests land on somebody else's server and no plan is a licence to overload one. Paid plans exist for auditing a whole site rather than a sample, and buy scale only: The same checks run at the same severities whether you have paid or not, and a paid report is stored and deleted on identical terms. Credits are consumed when a full audit completes; an audit that fails or is cancelled costs nothing, and unused credits do not roll over. Checkout is not connected at the time of writing, so nothing can currently be charged.

Content

Guides and reference pages are © Scan.now. You may quote short excerpts with attribution and a link. The browser extension is released under the MIT licence; its source is included in the download.

Availability and changes

We may change, rate-limit or withdraw any tool at any time. We may block addresses that abuse the service.

Liability

To the fullest extent permitted by law, Scan.now is not liable for any loss arising from use of the service or reliance on its output.

Contact

Questions about these terms go to the contact form.