Terms of Service

These terms are an agreement between you and HyperSec (“we”, “us”) for the HyperSec website, dashboard, API, MCP server and related services (the “Service”). By creating an account or using the Service you accept them, together with our Privacy Policy and Acceptable Use and Testing Authorization policy.

HyperSec is a business tool. You must be at least 18 and, if you use it for an organization, you confirm you have the authority to bind that organization to these terms.

HyperSec sends automated security-testing agents at web applications that you are authorized to test, and reports the findings that an independent reviewing agent confirmed, with the evidence behind each one. It also offers a free passive surface check, retests of earlier findings, scheduled scans, an API, a read-only MCP server and a GitHub pull-request review.

We may change, add or remove features. If we remove a paid feature you are using, we will tell you in advance and give you a fair way to adjust.

• You are responsible for everything done under your account, your organization and your API keys.
• Keep credentials and API keys secret. Tell us promptly at [email protected] if you think they were exposed.
• Organization owners and admins decide who may start scans and manage billing. Make sure those people are authorized.
• Give us accurate information and keep it up to date.

You may only run scans against systems you own or have explicit, current permission to test. By starting a scan you confirm that you hold that authority for every URL, domain and application you submit, including any third-party hosting or service provider whose permission is required.

Domain verification is a safeguard we apply to deeper scans. It does not replace your own authorization, and passing it does not mean we have checked that you may test everything reachable from that domain. The rules are set out in the Acceptable Use and Testing Authorization policy.

• Plans. The features and AI credits of each plan, and its price, are those shown on our pricing page when you subscribe. The free plan has no fee and no card is required.
• Subscriptions are monthly and renew automatically. You are charged when you subscribe and again on the same day of every month until you cancel. Upgrades and downgrades made in the billing portal are prorated as shown there.
• Cancelling. You can cancel at any time in the billing portal. The plan stays active until the end of the period you paid for, and then your organization moves to the free plan. We do not refund the part of a period already started, except where the law requires it or we say otherwise.
• AI credits. Each plan includes a monthly amount of credits that resets on the first day of the month and does not roll over. Scans use credits as they run, and a scan cannot start when your balance is too low. Credits you buy separately in a pack do not expire while your account is open: they are used after your monthly credits.
• Refunds for packs. A pack is refundable only while its credits are unused, and only in proportion to the unused part. Contact [email protected].
• Free-plan fair use. The free scans that use AI are limited per domain: if another free account has already used them on a domain, you will be asked to upgrade to continue. Do not create accounts to get around limits.
• Taxes and payment. Prices exclude taxes unless stated. Payments are handled by Stripe. If a payment fails we retry it for a short period; if it cannot be collected your organization moves to the free plan.
• Price changes. We will tell you at least 30 days before a price change takes effect for your subscription. You can cancel before it applies.

You keep all rights in the content you submit and in the findings and reports generated for you (“Your Data”). You give us a limited licence to host, process and transmit Your Data, including by sending it to the subprocessors listed on our Subprocessors page, solely to provide and secure the Service and as described in the Privacy Policy.

We do not sell Your Data and we do not use it to train third-party models. Scan evidence can contain information about a target application’s users and systems. You are responsible for having the right to test the target and for handling that evidence lawfully.

We and our licensors own the Service, including the software, agents, prompts, models and design. These terms give you a limited, non-exclusive, non-transferable right to use the Service for your own internal security work. You may not copy, resell, reverse engineer or use the Service to build a competing product, and you may not benchmark or scrape it in a way that harms it. If you send us feedback we may use it without obligation to you.

HyperSec’s findings are produced by automated, AI-driven agents. They are a strong signal, not a guarantee:

• A scan may miss vulnerabilities, and a reported finding may be wrong or incomplete. Verify before you rely on it.
• A grade or report is not a penetration-test attestation, an audit, or a compliance certification of any kind.
• Remediation guidance is advice. Test fixes in your own environment before deploying them.

Security testing sends real traffic and real exploit attempts to the systems you point it at. Even careful testing can degrade performance, trigger alerts, lock accounts, create or change data, or cause an outage.

You accept that risk for the systems you authorize. We recommend testing non-production environments or taking backups first, using the rate-limit and credential options available in the dashboard, and telling your hosting provider and security team before you test. Our liability for these effects is limited as set out below.

The Service works with services you may also use directly, such as GitHub, Clerk and Stripe. Your use of them is governed by their own terms. We are not responsible for their availability or conduct.

You can stop using the Service and close your account at any time. When an organization is deleted, its data is scheduled for removal after a 30-day period, as described in the Privacy Policy.

We may suspend or end access immediately if you breach these terms or the Acceptable Use policy, if we are required to by law, or if your use puts the Service or other customers at risk. Where reasonable we will warn you first. Sections that by their nature should survive termination (such as payment obligations, intellectual property, disclaimers, limits of liability and indemnity) will survive.

The Service is provided “as is” and “as available”. To the extent the law allows, we disclaim all warranties, express or implied, including merchantability, fitness for a particular purpose, non-infringement, and any warranty that the Service will be uninterrupted, error-free or that it will find every vulnerability.

To the extent the law allows, neither party is liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, data or goodwill, arising out of these terms or the Service.

Our total liability for all claims relating to the Service in any 12-month period is limited to the amount you paid us for the Service in that period, or 100 US dollars if you have paid nothing. These limits do not apply to liability that cannot be limited by law, such as fraud or intentional misconduct.

You will defend and indemnify us against claims, damages and costs (including reasonable legal fees) arising from your scanning of systems you were not authorized to test, from Your Data, or from your breach of these terms or the Acceptable Use policy.

These terms are governed by the laws of the country in which our operating entity is established, without regard to its conflict-of-law rules. The courts of that place have exclusive jurisdiction, except that either party may seek urgent relief from any competent court. Mandatory consumer or data-protection rights that apply to you where you live are not affected.

Before starting a claim, please contact us and give us 30 days to try to resolve it.

We may update these terms. For material changes we will notify you by email or in the dashboard at least 30 days before they apply, and the “Last updated” date above will change. Continuing to use the Service after that means you accept the new terms; if you do not, you can cancel before they apply.

These terms, with the policies they refer to, are the entire agreement between you and us about the Service. If a provision is unenforceable the rest stays in force. Our failure to enforce a provision is not a waiver. You may not assign these terms without our consent; we may assign them to a successor of the business.

Contact: [email protected].