Terms of Service

Effective Date: January 1, 2025
Last Updated: December 27, 2025

1. Acceptance of Terms

Welcome to Secure My Site, a service provided by Simatrix Ltd, a company registered in England and Wales (Company No. 16290120) ("we," "us," or "our").

By accessing or using Secure My Site ("the Service"), you agree to be bound by these Terms of Service ("Terms"). If you do not agree to these Terms, please do not use the Service. These Terms constitute a legally binding agreement between you and Simatrix Ltd.

You must be at least 18 years old (or the age of majority in your jurisdiction) to use this Service and enter into this agreement. If you are under 18, you may only use the Service with the involvement and consent of a parent or legal guardian who agrees to be bound by these Terms.

2. Service Description

Secure My Site provides automated security scanning of publicly accessible websites. The Service performs passive, non-destructive analysis and provides a report of potential security exposures.

3. Authorization Required

By submitting a URL for scanning, you represent and warrant that:

  • You own the website being scanned, OR
  • You have written authorization from the website owner to perform security testing

Unauthorized scanning of websites you do not own or have permission to test is strictly prohibited and may violate applicable laws.

4. Scope of Scanning

The Service performs ONLY passive, non-destructive checks including:

  • HTTP header analysis
  • SSL/TLS configuration review
  • Publicly accessible endpoint discovery
  • Common security misconfiguration detection

The Service does NOT perform:

  • Login attempts or credential testing
  • Brute force attacks
  • Data modification or injection
  • Active exploitation of vulnerabilities

5. Responsible Use Policy

Secure My Site is designed to help website owners and authorized security professionals identify potential vulnerabilities in their own systems. By using this Service, you commit to responsible security practices:

5.1 Authorized Use

You may use the Service to scan:

  • Websites you own and operate
  • Websites for which you have written authorization from the owner
  • Systems where you are engaged as an authorized security tester or consultant
  • Bug bounty program targets where passive reconnaissance is explicitly permitted

5.2 Prohibited Uses

You may NOT use the Service to scan:

  • Government websites (.gov, .mil domains)
  • Educational institutions (.edu domains)
  • Internal/private networks or localhost
  • Websites you do not own or have authorization to test
  • Critical infrastructure systems (healthcare, utilities, financial core systems)
  • Any system where scanning would violate applicable laws or regulations

5.3 Legal Compliance

You are solely responsible for ensuring your use of the Service complies with all applicable laws, including but not limited to:

  • The Computer Misuse Act 1990 (UK)
  • The Computer Fraud and Abuse Act (US)
  • Equivalent cybersecurity and computer crime laws in your jurisdiction
  • Any contractual obligations or terms of service of the target website

6. Security Research Safe Harbor

Secure My Site supports responsible security research and the security community's efforts to make the internet safer. This section clarifies the nature of our Service:

6.1 Passive Reconnaissance Only

Our Service performs passive, non-destructive analysis only. This means:

  • We only access publicly available information
  • We do not attempt to exploit any vulnerabilities
  • We do not attempt authentication or login
  • We do not modify any data on target systems
  • We do not perform denial-of-service or load testing
  • Our requests are equivalent to what a normal web browser might send

6.2 Good Faith Security Testing

For users conducting authorized security testing (including bug bounty research), Secure My Site is intended to be a tool for initial reconnaissance that helps identify potential areas of concern before deeper manual testing. We encourage:

  • Responsible disclosure of any vulnerabilities discovered
  • Following the target organization's security policy or bug bounty rules
  • Avoiding access to or exfiltration of user data
  • Minimizing any potential disruption to services

6.3 Not Legal Advice

This Safe Harbor section describes our Service's capabilities and intended use. It does not constitute legal advice and does not protect you from liability for unauthorized access to computer systems. You remain solely responsible for ensuring your activities are lawful and authorized.

7. Rate Limits

The Service enforces the following rate limits to prevent abuse:

  • 3 scans per hour per IP address
  • 20 scans per day per IP address

8. Report Accuracy

The Service provides findings based on automated analysis. We make reasonable efforts to ensure accuracy, but:

  • Reports may contain false positives
  • Not all vulnerabilities may be detected
  • Findings should be verified before remediation
  • The Service is not a replacement for comprehensive security testing

9. Payment and Refunds

Full reports are available for a one-time payment at the price displayed on our website at the time of purchase. All sales are final. Refunds may be issued at our sole discretion for technical failures or service unavailability.

EU/EEA Customers: By purchasing a report, you expressly request that we begin providing the digital content immediately upon payment. You acknowledge that once the report has been generated and delivered, you will lose your right of withdrawal under the Consumer Rights Directive (2011/83/EU), as the performance of the service will have been fully completed.

10. Disclaimer of Warranties

THE SERVICE IS PROVIDED "AS IS" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED. WE DO NOT WARRANT THAT:

  • The Service will be uninterrupted or error-free
  • Reports will be complete or accurate
  • Your use of the Service will make your website secure

11. Limitation of Liability

11.1 Exclusion of Certain Damages

TO THE MAXIMUM EXTENT PERMITTED BY LAW, SIMATRIX LTD SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUES, WHETHER INCURRED DIRECTLY OR INDIRECTLY, OR ANY LOSS OF DATA, USE, GOODWILL, OR OTHER INTANGIBLE LOSSES.

11.2 Liability Cap

TO THE MAXIMUM EXTENT PERMITTED BY LAW, OUR TOTAL LIABILITY TO YOU FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICE SHALL NOT EXCEED THE AMOUNT YOU PAID FOR THE SERVICE.

11.3 UK Consumer Rights

Nothing in these Terms excludes or limits our liability for: (a) death or personal injury caused by our negligence; (b) fraud or fraudulent misrepresentation; or (c) any other liability that cannot be excluded or limited under applicable UK law.

If you are a consumer in the UK, your statutory rights under the Consumer Rights Act 2015 are not affected by these Terms.

12. Indemnification

You agree to indemnify, defend, and hold harmless Simatrix Ltd and its officers, directors, employees, agents, and affiliates from and against any and all claims, damages, losses, liabilities, costs, and expenses (including reasonable legal fees and costs) arising out of or relating to:

  • Your use of the Service
  • Your violation of these Terms
  • Your scanning of any website without proper authorization
  • Any claim by a third party that your use of the Service infringed their rights or caused them harm
  • Your violation of any applicable law, regulation, or third-party rights

This indemnification obligation shall survive the termination of these Terms and your use of the Service.

13. Governing Law and Dispute Resolution

13.1 Governing Law

These Terms shall be governed by and construed in accordance with the laws of England and Wales, without regard to its conflict of law provisions.

13.2 Jurisdiction

Any disputes arising out of or relating to these Terms or the Service shall be subject to the exclusive jurisdiction of the courts of England and Wales. However, if you are a consumer residing in the UK or EU, you may bring proceedings in your local courts if consumer protection laws allow.

13.3 Dispute Resolution

Before filing any legal claim, we encourage you to contact us at legal@securemysite.io to attempt to resolve the dispute informally. We are committed to working with you to reach a fair resolution.

14. Termination

We may suspend or terminate your access to the Service at any time, with or without notice, for violation of these Terms or for any other reason. Upon termination, your right to use the Service will cease immediately.

15. Changes to Terms

We may update these Terms from time to time to reflect changes in our Service, legal requirements, or business practices. When we make material changes, we will notify you by posting the updated Terms on this page with a new "Last Updated" date.

Material changes will take effect 30 days after notification. Your continued use of the Service after changes become effective constitutes acceptance of the modified Terms. If you do not agree to the changes, you must stop using the Service.

16. Severability

If any provision of these Terms is found to be unenforceable or invalid, that provision shall be limited or eliminated to the minimum extent necessary, and the remaining provisions shall remain in full force and effect.

17. Entire Agreement

These Terms, together with our Privacy Policy, constitute the entire agreement between you and Simatrix Ltd regarding your use of the Service, and supersede all prior agreements and understandings.

18. Contact Information

If you have any questions about these Terms of Service, please contact us:

Registered office address available upon request or via Companies House public register.