Terms of service

Lockvane reads what an application already serves to the public and reports what it finds. A free reading names and ranks each finding; the full report attaches the evidence behind it. If you prove you control an asset, it will also query that asset directly and report what an unauthenticated request can reach.

Using the service means you accept these terms. If you are agreeing on behalf of a company, you are confirming you may bind it.

You may only submit an address, or connect an asset, that you own or have permission to assess. This is the most important clause on this page. Scanning systems you do not control can be unlawful where you are, where the system is, or both, and that exposure is yours, not ours.

A public scan is passive: it requests what any visitor would receive, sends no payloads, writes nothing, and authenticates as nobody. That reduces the risk. It does not transfer responsibility to us.

Anything deeper is gated behind proof of control, either a DNS record you publish or an account you connect. Attempting to defeat that gate, including verifying a domain you do not control, ends your account.

Keep your credentials to yourself and tell us at support@lockvane.com if you think someone else has them. You are responsible for what happens under your account. You must be at least 16.

• Use Lockvane to attack, overload, or map an application you are not authorised to assess.
• Use findings about someone else’s system to extort, embarrass, or exploit them.
• Resell or republish reports as your own product without a written agreement with us.
• Automate the service beyond the limits we publish, or work around rate limiting, credit metering, or the ownership gate.
• Interfere with the service itself. If you want to test Lockvane, read the disclosure policy first: there is a way to do that which we welcome.

A scan that finds nothing has found nothing in what it could reach. That is a much smaller claim than “this application is secure”, and Lockvane is written never to make the larger one. No automated tool sees everything, and a report is accurate as of the moment it ran.

• We do not warrant that findings are complete, that severity is right for your circumstances, or that the service is uninterrupted.
• A finding marked OBSERVED was not reproduced and may not hold. Only CONFIRMED means we saw it live.
• Remediation is a suggestion about your system, which we do not fully know. Read a change before you run it, and keep the rollback we ship next to it.
• Nothing here is legal or compliance advice, and a Lockvane report is not a certification.

The service is provided as it is, without warranties of any kind to the fullest extent the law allows.

When you ask Lockvane to apply a change, you are authorising us to make that specific change to the asset you connected. We run it in a transaction, rescan to confirm it held, and ship the statement that undoes it. You remain responsible for changes made to your own systems, including ones you asked us to make. If you are not certain, copy the change and run it yourself.

Public scans are free. Connecting assets, reading findings, and receiving the fix and its rollback are free. What is metered is the deep scan, because each one queries your database.

• Subscriptions renew until you cancel, and cancelling stops the next renewal rather than refunding the current period.
• Credit packs are one-off and expire 12 months after purchase.
• Prices can change. We will tell existing subscribers before a change affects them.
• If something went wrong on our side and you were charged for work you did not get, write to support@lockvane.com and we will make it right.

You keep everything you own. Findings about your systems are yours, and you can export or delete them. We use them to operate the service for you, and in aggregated form that cannot identify you or your application to improve detection.

What we hold and for how long is set out in the privacy policy, which is part of these terms.

You can close your account whenever you want. We may suspend or close an account that breaks clause 2 or clause 4, or that we are required to act on by law, and where the circumstances allow it we will tell you why.

To the fullest extent the law allows, Lockvane is not liable for indirect or consequential loss, lost profits, or lost data arising from use of the service. Where liability cannot be excluded, it is limited to what you paid us in the twelve months before the claim.

Nothing here limits liability for fraud, or for anything else that cannot lawfully be limited.

We update these terms as the product changes and move the effective date at the top. If a change materially affects you and you have an account, we will email you before it takes effect. Continuing to use Lockvane after that means you accept the new version.

Anything unclear: support@lockvane.com.