Terms of Service

Exposd is a free, publicly accessible tool that performs surface-level security checks against web URLs you submit. The Service inspects HTTP response headers, publicly served JavaScript bundles, and common public paths to identify potential misconfigurations. Checks are performed without authentication and without executing JavaScript from the scanned site.

The Service generates a shareable report with a letter grade and plain-English findings. Reports are stored permanently and accessible to anyone with the report link.

You must be at least 13 years old to use the Service. By using the Service you represent that you meet this requirement. If you are using the Service on behalf of an organization, you represent that you have authority to bind that organization to these Terms.

You may use the Service to:

• Scan websites and web applications that you own or operate
• Scan websites belonging to organizations you work for or clients who have given you explicit written permission to perform security testing
• Review and share scan reports for educational or informational purposes
• Integrate scan results into internal security workflows and processes

You must not use the Service to:

• Scan websites or systems you do not own and for which you do not have explicit written authorization to perform security testing
• Attempt to circumvent, overload, or disrupt our infrastructure or rate limits
• Submit URLs designed to exploit server-side request forgery (SSRF) vulnerabilities in our scanner, probe internal networks, or reach non-public endpoints
• Use the Service to facilitate harassment, stalking, or any unlawful surveillance of individuals or organizations
• Automate submissions in a manner that degrades service quality for other users
• Resell or commercialize the Service or its output without our prior written consent
• Use the Service in any way that violates applicable laws, regulations, or third-party rights

Unauthorized security testing of third-party systems may be illegal under the Computer Fraud and Abuse Act (CFAA), the UK Computer Misuse Act, and similar laws in other jurisdictions. You are solely responsible for ensuring that your use of the Service is lawful.

The Service is free and we intend to keep it that way. To protect availability for all users, we enforce a limit of 5 scans per IP address per hour. We reserve the right to adjust these limits, block IP addresses, or restrict access to users or organizations that abuse the Service, without notice.

Exposd performs a surface-level, point-in-time scan. It is not a substitute for a comprehensive security audit conducted by qualified security professionals. The Service:

• Does not authenticate to your application or test protected routes
• Does not execute JavaScript or simulate browser behavior
• Does not crawl your full site — it checks the root URL and a fixed set of common paths
• May produce false positives or miss issues depending on your site's configuration
• Reflects the state of your site at the exact moment the scan was run; infrastructure changes after the scan are not reflected

A high score or grade does not mean your site is secure. Security is a continuous process. We encourage regular rescanning and engagement with qualified security professionals for comprehensive coverage.

All content, design, code, and branding comprising the Exposd website and Service are owned by us or our licensors and protected by intellectual property laws. You may not copy, reproduce, modify, or distribute any part of the Service without our prior written consent, except as permitted by applicable law.

Scan reports generated by the Service may be shared freely for non-commercial purposes, provided that the Exposd attribution and report URL are preserved.

The service is provided “as is” and “as available” without warranty of any kind.

To the fullest extent permitted by law, we disclaim all warranties, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, accuracy, completeness, and non-infringement. We do not warrant that:

• The Service will be uninterrupted, error-free, or secure
• Scan results will be accurate, complete, or free of false positives or negatives
• Implementing fixes suggested by the Service will make your site fully secure or compliant with any particular standard
• The Service will identify all security issues present in a scanned site

Our liability to you is strictly limited.

To the fullest extent permitted by applicable law, in no event shall Exposd, its operators, affiliates, agents, or licensors be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, data, business, or goodwill, arising out of or in connection with:

• Your use of or inability to use the Service
• Reliance on scan results, grades, or recommendations produced by the Service
• Unauthorized access to or alteration of your data
• Any other matter relating to the Service

Our total liability to you for any claims arising out of or related to these Terms or the Service shall not exceed USD $100. Some jurisdictions do not allow the exclusion of certain warranties or limitation of liability, so some of the above may not apply to you.

You agree to indemnify, defend, and hold harmless Exposd and its operators from and against any claims, damages, losses, costs, and expenses (including reasonable attorneys’ fees) arising out of or relating to: (a) your use of the Service; (b) your violation of these Terms; (c) your violation of any third-party right, including any intellectual property right or privacy right; or (d) any claim that your submitted URL or use of scan results caused damage to a third party.

The Service is built on third-party infrastructure including Vercel (hosting) and Supabase (database). Use of the Service is also subject to those providers’ terms. We are not responsible for the availability or conduct of any third-party service.

The Service may contain links to external websites. We do not endorse, control, or assume responsibility for the content or practices of any linked sites.

We reserve the right to modify, suspend, or discontinue the Service (or any part of it) at any time without notice. We may also update these Terms at any time. Changes take effect when posted to this page. The “Last updated” date at the top of this page will reflect the most recent revision. Continued use of the Service after changes are posted constitutes your acceptance of the revised Terms.

These Terms are governed by and construed in accordance with the laws of the United States, without regard to conflict of law principles. Any disputes arising out of or relating to these Terms or the Service shall be resolved through binding individual arbitration rather than in court, except that either party may seek injunctive or other equitable relief in court to prevent irreparable harm. You waive any right to bring claims as a class or representative action.

We reserve the right to suspend or terminate your access to the Service at any time, for any reason, including violation of these Terms. You may stop using the Service at any time. Sections 6 through 13 of these Terms survive termination.

These Terms, together with our Privacy Policy, constitute the entire agreement between you and Exposd regarding the Service and supersede all prior agreements and understandings.

Questions about these Terms should be directed to:

psbkkp777@gmail.com