Skip to main content

Terms and Conditions

Effective Date: 2026-05-28 Last Updated: 2026-05-28

These Terms and Conditions (the “Terms”) govern your access to and use of the SurfaceAudit website, application, dashboards, reports, alerts, APIs, scans, and related services (collectively, the “Services”). SurfaceAudit is operated by Ignite Solutions, LLC (“SurfaceAudit,” “we,” “us,” or “our”).

By accessing or using the Services, creating an account, submitting a website or domain for scanning, or clicking to accept these Terms, you agree to be bound by them. If you are accepting these Terms on behalf of a company or other legal entity, you represent that you have authority to bind that entity.

1. Eligibility and Accounts

You must be at least 18 years old or the age of majority in your jurisdiction to use the Services. You agree to provide accurate, current, and complete information when creating or maintaining an account and to keep that information updated.

You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account. You must promptly notify us if you believe your account has been compromised or used without authorization.

You may not create an account using false, misleading, or unauthorized information, and you may not transfer your account to another person without our prior written consent.

2. The Services

SurfaceAudit provides outside-in security scanning and reporting for public-facing websites and related infrastructure. The Services may include security scans, grades, findings, remediation guidance, change alerts, dashboards, exports, and billing features.

We may add, remove, or modify features from time to time. Some features may be limited to certain plans, usage thresholds, or account types.

The Services are provided for informational and operational purposes only. They are not a substitute for your own security review, legal review, compliance review, or internal control process.

3. Customer Responsibilities

You are responsible for your use of the Services and for the websites, domains, systems, content, and data you submit or connect to the Services.

  • You must have all rights, permissions, and authority needed to submit a website, domain, or system for scanning.
  • You are responsible for confirming that scanning the target is lawful and authorized.
  • You are responsible for ensuring that your use of the Services complies with applicable law, contract, policy, and internal authorization requirements.
  • You are responsible for reviewing scan results before relying on them or sharing them with third parties.

You acknowledge that scan results may reflect public information, system responses, and technical behavior of the target site. We are not responsible for consequences arising from unauthorized, mistaken, or inappropriate scan submissions.

4. Acceptable Use

You may use the Services only for lawful, authorized, and legitimate security or operational purposes. You agree not to:

  • Use the Services to access, probe, scan, test, or attack any system without authorization.
  • Attempt to bypass rate limits, account controls, access controls, or usage limits.
  • Interfere with, disrupt, or degrade the Services or any third-party systems.
  • Attempt to reverse engineer, decompile, or extract source code, models, methods, or non-public logic from the Services, except to the extent such restrictions are prohibited by law.
  • Upload malware, malicious code, unlawful content, or data you do not have the right to use with the Services.
  • Use the Services to violate privacy, intellectual property, computer misuse, consumer protection, export control, or other applicable laws.
  • Misrepresent your identity, affiliation, or authority when using the Services.

We may investigate suspected violations of these Terms and may suspend or terminate access if we believe a violation has occurred, if required by law, or if necessary to protect the Services, our users, or others.

5. Scan Authorization and Submitted Content

By submitting a website, domain, URL, header, configuration, or other input to the Services, you represent and warrant that you are authorized to do so and that your submission does not violate any law or agreement.

You grant us a limited, non-exclusive, worldwide, royalty-free license to host, process, transmit, display, analyze, store, and otherwise use the information you submit solely to provide, maintain, secure, support, and improve the Services, to generate reports and alerts, and to comply with legal obligations.

You remain responsible for your submitted content and for any permissions required to submit or process it. We do not guarantee that scan results will be complete, current, or error-free, and you should not treat them as definitive legal, security, or compliance advice.

6. Plans, Billing, Renewals, Cancellation, and Refunds

Some Services are available on a free plan, and some features require a paid subscription. Free plan availability may change only if we clearly state otherwise. We do not currently offer a trial unless we expressly say so in writing.

Paid subscriptions are billed in advance on a recurring monthly or annual basis, depending on the plan you select. By starting a paid subscription, you authorize us and our payment processor, Authorize.Net, to charge your chosen payment method for recurring fees, taxes, and any other amounts you authorize or owe under these Terms.

Unless we say otherwise in writing, subscription renewals occur automatically until canceled. You may cancel through the billing area of your account or by contacting us. Cancellation stops future renewal charges, but the Services generally remain available through the end of the current billing period.

Except where required by law or expressly stated by us in writing, fees are non-refundable, and we do not provide prorated refunds or credits for unused time, partial billing periods, downgrades, or unused features.

If a payment fails or becomes past due, we may retry the charge, request an updated payment method, suspend paid features, or reduce access until the account is brought current.

You are responsible for all applicable taxes, duties, and similar governmental charges, excluding taxes based on our net income.

7. Third-Party Services

The Services may integrate with or rely on third-party services, providers, and platforms, including payment processors, email providers, analytics providers, infrastructure providers, and identity providers.

Authorize.Net processes payment-card transactions for paid subscriptions. Your use of third-party services may also be subject to those third parties’ own terms and privacy policies. We are not responsible for third-party services, their availability, or their acts and omissions.

8. Intellectual Property

We and our licensors own the Services, including our software, designs, text, graphics, logos, trademarks, trade dress, documentation, and related intellectual property rights. Except for the limited rights expressly granted to you in these Terms, we reserve all rights in and to the Services.

Subject to your compliance with these Terms and payment of applicable fees, we grant you a limited, revocable, non-exclusive, non-transferable license to access and use the Services for your internal business or personal security-review purposes, as applicable.

You may not copy, reproduce, distribute, sell, lease, sublicense, publicly display, or create derivative works from the Services except as expressly permitted by us in writing or as allowed by law.

9. Feedback

If you send us suggestions, ideas, feature requests, bug reports, or other feedback, you grant us a perpetual, irrevocable, worldwide, royalty-free license to use, copy, modify, distribute, and otherwise exploit that feedback without restriction or compensation to you.

10. Privacy

Our collection and use of personal information is described in our Privacy Policy. By using the Services, you acknowledge that policy and consent to our processing of information as described there.

11. Security and Availability

We use reasonable administrative, technical, and organizational measures designed to protect the Services and the information we process. However, no system is perfectly secure, and we cannot guarantee that the Services will be uninterrupted, error-free, or completely secure.

We may suspend, limit, or modify access to the Services for maintenance, security, operational changes, legal compliance, or to address suspected misuse or abuse.

12. Disclaimer of Warranties

To the maximum extent permitted by law, the Services are provided “as is” and “as available,” without warranties of any kind, whether express, implied, statutory, or otherwise.

We disclaim all implied warranties, including warranties of merchantability, fitness for a particular purpose, title, and non-infringement. We do not warrant that the Services will identify every issue, that findings will be complete or accurate for every environment, or that using the Services will improve your security posture or ensure compliance.

Any grades, scores, findings, recommendations, or remediation guidance are informational only and are not legal, compliance, accounting, or professional advice.

13. Limitation of Liability

To the maximum extent permitted by law, neither we nor our affiliates, licensors, or service providers will be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for any lost profits, lost revenue, lost data, business interruption, or procurement of substitute services, even if we have been advised of the possibility of such damages.

To the maximum extent permitted by law, our total liability for any claim arising out of or relating to the Services or these Terms will not exceed the greater of: (a) the amount you paid to us for the Services during the twelve months before the event giving rise to the claim, or (b) one hundred U.S. dollars ($100).

Nothing in these Terms limits liability to the extent it cannot be limited under applicable law.

14. Indemnification

You agree to indemnify, defend, and hold harmless SurfaceAudit, Ignite Solutions, LLC, and our affiliates, directors, officers, employees, contractors, and agents from and against any claims, damages, liabilities, losses, costs, and expenses, including reasonable attorneys’ fees, arising out of or related to: (a) your use of the Services; (b) your submitted content or scanning targets; (c) your breach of these Terms; or (d) your violation of any law or third-party right.

15. Termination

You may stop using the Services at any time. If you have a paid subscription, you may cancel it through your account billing settings or by contacting us. We may suspend or terminate your access to the Services at any time, with or without notice, if we believe you have violated these Terms, failed to pay amounts due, created risk or potential liability for us or others, or if we are required to do so by law.

Upon termination, your right to use the Services will cease, but the following sections will continue to apply as appropriate: scan authorization and submitted content, plans and billing, intellectual property, feedback, disclaimer of warranties, limitation of liability, indemnification, dispute resolution, governing law, and any other provision that by its nature should survive.

16. Dispute Resolution; Arbitration; Class Action Waiver

PLEASE READ THIS SECTION CAREFULLY. IT AFFECTS YOUR RIGHTS, INCLUDING YOUR RIGHT TO BRING A CLAIM IN COURT.

To the fullest extent permitted by law, any dispute, claim, or controversy arising out of or relating to these Terms or the Services will be resolved by binding individual arbitration administered by the American Arbitration Association (“AAA”) under its applicable rules, rather than in court, except for the limited exceptions stated below.

The arbitration will be conducted by a single arbitrator in Illinois, or remotely if permitted by the applicable AAA rules and the arbitrator. The Federal Arbitration Act governs the interpretation and enforcement of this arbitration agreement, and Illinois law applies to the extent not preempted by federal law.

You and SurfaceAudit agree that each may bring claims only in an individual capacity and not as a plaintiff or class member in any purported class, consolidated, representative, or private attorney general proceeding. The arbitrator may award the same individual remedies that a court could award, subject to this section.

Either party may seek temporary or preliminary injunctive relief in court to protect intellectual property, confidentiality, security, or access-control rights, or to prevent unauthorized access or misuse of the Services, pending arbitration. Either party may also bring an individual claim in small claims court if the claim qualifies and remains in that court.

If a court determines that any part of this arbitration agreement is unenforceable, that part will be severed to the minimum extent necessary and the remainder will stay in effect, except where severance would materially defeat the purpose of the arbitration agreement.

17. Governing Law

These Terms and any dispute not subject to arbitration or otherwise brought in a court of competent jurisdiction will be governed by and construed in accordance with the laws of the State of Illinois, without regard to conflict-of-law principles.

18. Changes to the Services or Terms

We may update these Terms from time to time. If we make material changes, we will post the revised Terms on this page and update the “Last Updated” date above. Your continued use of the Services after the revised Terms become effective means you accept the updated Terms.

19. Contact Us

If you have questions about these Terms, contact us at:

Email: privacy@surfaceaudit.com