Legal
These Terms of Use govern your access to and use of WebInspect.pro, including our website security inspection tools, reports, paid services, Expert Reviews, and related services. By accessing or using WebInspect, you agree to these Terms. If you do not agree, you should not use the service.
WebInspect provides automated, external and unauthenticated website and domain security inspections. Depending on the service selected, WebInspect may provide automated security findings, technical reports, guided remediation information, compliance-readiness indicators, and professional Expert Reviews.
WebInspect is intended to help website owners, administrators, developers, IT professionals, and other authorized users identify and understand externally observable security and configuration issues.
You are responsible for ensuring that you have the necessary authority to submit a website or domain to WebInspect. By submitting a domain, hostname, website, or other target for inspection, you represent that you are authorized to request the inspection or otherwise have a lawful basis for doing so.
You must not use WebInspect to facilitate unauthorized security testing, exploitation, disruption, harassment, or other unlawful activity. WebInspect reserves the right to restrict or refuse inspections where we reasonably believe the service is being misused.
WebInspect primarily performs external, unauthenticated inspections using information and services accessible from the Internet. An inspection may evaluate areas such as:
The exact checks performed may change as WebInspect develops and improves its services. WebInspect does not normally authenticate to customer systems, access internal infrastructure, exploit identified vulnerabilities, or perform intrusive penetration testing as part of a standard inspection.
Security inspection results represent the information observable at the time an inspection is performed. Automated security testing has inherent limitations.
WebInspect does not guarantee that an inspection will identify every vulnerability, misconfiguration, security weakness, or compliance issue. Results may include false positives, false negatives, incomplete findings, findings that cannot subsequently be reproduced, or findings that become outdated because the inspected website or its infrastructure changes.
A successful result or high security score does not mean that a website is secure or free from vulnerabilities. WebInspect should therefore be used as one component of a broader security programme rather than as a replacement for appropriate professional security testing.
WebInspect may identify findings or provide readiness indicators relevant to security standards, frameworks, or industry guidance, including PCI DSS and OWASP. These references are provided for informational and security-readiness purposes.
Unless explicitly stated otherwise, WebInspect does not provide:
A compliance-readiness score should not be interpreted as confirmation of compliance. Organizations requiring formal certification should engage an appropriately qualified or accredited provider.
WebInspect reports are intended to provide security information and practical recommendations based on the inspection results available at the time of analysis. Recommendations may not be suitable for every website, application, hosting environment, or infrastructure configuration.
You are responsible for evaluating changes before applying them to production systems. Where appropriate, changes should first be tested in a development or staging environment.
WebInspect is not responsible for service interruptions, configuration problems, loss of functionality, data loss, or other consequences resulting from changes implemented based on information contained in a report.
Customers may purchase an Expert Review where available. Expert Reviews supplement automated inspection results with professional review, manual validation where appropriate, prioritization, observations, and recommendations.
Expert Reviews may be performed directly by WebInspect or by an approved independent WebInspect Expert Review Partner. Expert Reviews remain subject to the technical limitations of external and unauthenticated security inspection.
An Expert Review does not constitute penetration testing, certification, PCI ASV scanning, or a formal compliance assessment unless explicitly agreed otherwise in a separate written engagement.
WebInspect may assign an Expert Review to an approved independent security or IT professional participating in the WebInspect Expert Review Partner network. Information reasonably necessary to complete the Expert Review may be shared with the assigned Partner. Partners are expected to handle customer and inspection information confidentially and use it for the purpose of completing the assigned review.
Following an Expert Review, a customer may independently choose to engage the Partner for additional services. Any such additional engagement is separate from the WebInspect Expert Review and is agreed directly between the customer and the Partner. Unless expressly agreed otherwise, WebInspect is not a party to such subsequent engagements.
Prices for paid WebInspect services are displayed before purchase. The features and deliverables included with each product are those described at the time of purchase.
WebInspect may change its prices, products, features, or service structure from time to time. Such changes do not retroactively alter a completed purchase unless otherwise stated. Payment may be processed by third-party payment providers whose respective terms and privacy policies may also apply.
Refund requests for paid services are handled according to the nature and status of the purchased service and any refund terms displayed during checkout.
Because some WebInspect products involve the generation of digital reports or commencement of professional review services, eligibility for cancellation or refund may be affected once delivery or performance of the service has begun, subject to applicable consumer law.
Nothing in these Terms limits any mandatory cancellation, refund, or consumer rights that apply under applicable law.
You must not use WebInspect:
We may restrict, suspend, or terminate access where we reasonably believe these Terms have been violated.
WebInspect's website, branding, methodology, report designs, explanatory content, software, and other original materials are protected by applicable intellectual-property laws.
Customers may use reports purchased or generated for their legitimate internal business, security, remediation, compliance-readiness, and advisory purposes. You may not reproduce, resell, systematically extract, copy, or commercially redistribute WebInspect's service, methodology, report templates, or proprietary content without permission.
WebInspect may obtain or analyze information made available through third-party services, DNS infrastructure, certificate authorities, public Internet services, or other external sources. We do not control these third parties and cannot guarantee the accuracy, availability, or completeness of information they provide.
WebInspect may also contain links to third-party websites or services. Such links do not necessarily constitute endorsement of those services.
We aim to maintain reliable access to WebInspect but do not guarantee uninterrupted or error-free operation. Services may occasionally be unavailable because of maintenance, technical problems, infrastructure failures, third-party dependencies, security incidents, or circumstances outside our reasonable control.
We may modify, suspend, replace, or discontinue features where reasonably necessary.
To the extent permitted by applicable law, WebInspect and its services are provided on an "as available" basis. We do not warrant that:
Nothing in these Terms excludes warranties or rights that cannot legally be excluded.
To the maximum extent permitted by applicable law, WebInspect will not be liable for indirect, incidental, consequential, or special losses arising from the use of, or inability to use, the service, including loss of data, revenue, business opportunities, or profits.
WebInspect's reports and recommendations should not be treated as a substitute for professional advice where a formal security, legal, regulatory, or compliance assessment is required.
Nothing in these Terms limits or excludes liability where doing so would be prohibited by applicable law.
Our collection and processing of personal information is described in our Privacy Policy. By using WebInspect, you acknowledge that information will be processed as necessary to operate and provide the service.
We may update these Terms as WebInspect, our services, or applicable requirements change. The current version will be published on WebInspect.pro together with its effective or last-updated date. Material changes may be communicated through the website or other appropriate means.
These Terms are governed by the laws of the Republic of Cyprus, without prejudice to any mandatory consumer protections or other rights that may apply under the laws of a customer's country of residence.