Terms
Terms of Service
Last updated: 17 October 2026
These terms govern the purchase and use of Scanner through https://secureplan.net.
1. Who We Are
SecurePlan (secureplan.net) and the Scanner console are operated by ACL Aurora Core Labs LTD. For questions about these terms, use the contact form on this website.
2. Acceptance of Terms
By accessing this website, registering for, purchasing, or using Scanner, you acknowledge that you have read, understood, and agree to these Terms & Conditions. Scanner provides cybersecurity assessment tools intended exclusively for lawful, authorized security testing and vulnerability identification. If you do not agree, do not purchase or use Scanner.
3. The Scanner Service
Scanner is a continuous vulnerability-assessment console: you register scan nodes, add IP targets, run assessment tasks, and generate reports. Scanner performs vulnerability assessment only — it does not perform exploitation and is not a penetration test, an ISO certificate, or a substitute for your auditor, DPO, or compliance officer.
4. No Emergency Response or Professional Certification
Scanner is an automated vulnerability-assessment tool and does not constitute a managed security service, incident response service, professional penetration test, regulatory audit, or certification. You remain responsible for evaluating findings, implementing remediation, and maintaining appropriate security controls.
5. Authorized Infrastructure Only
You represent and warrant that all infrastructure submitted for scanning is owned or legally controlled by you, or that you hold explicit, valid, written authorization from its rightful owner covering the specific targets, testing methods, and scope of the intended assessment. You are solely responsible for verifying authorization before initiating any scan and for retaining evidence of that authorization on request. Scanning, probing, assessing, or attempting to access third-party infrastructure without proper authorization is strictly prohibited.
6. Third-Party Infrastructure and Cloud Environments
Ownership of a domain name, website, application, or virtual server does not automatically grant permission to assess the underlying hosting infrastructure, cloud provider networks, or other third-party systems. You are responsible for ensuring that all assessments comply with applicable hosting agreements, cloud provider policies, and third-party authorization requirements, and you shall not scan shared infrastructure, adjacent IP addresses, cloud provider management systems, or other resources outside the explicitly authorized assessment scope.
7. Prohibited Activities
Scanner must not be used for unauthorized vulnerability scanning or penetration testing; scanning third-party networks, servers, websites, applications, or IP addresses without authorization; denial-of-service or distributed denial-of-service activity; exploiting vulnerabilities for unauthorized access; data theft, malicious interference, or disruption of third-party services; or any activity that violates applicable cybersecurity, privacy, or criminal law. We may suspend or terminate access where a violation is suspected or identified.
8. Acceptable Resource Usage
We may enforce reasonable technical limits concerning scan frequency, concurrency, duration, network traffic, and resource consumption. You must not bypass rate limits, manipulate scanner nodes to circumvent restrictions, or deliberately generate excessive traffic that could compromise service availability or third-party infrastructure.
9. Scan Authorization and Emergency Termination
We reserve the right to immediately restrict, interrupt, suspend, or terminate any scanning activity reasonably suspected of being unauthorized, unlawful, abusive, or potentially harmful, and may impose operational restrictions to protect our systems, third parties, and network infrastructure. You shall promptly discontinue any scanning activity upon discovering unintended effects, unauthorized targets, or material service disruption.
10. Acknowledgment of Scanning Risks
You expressly acknowledge that vulnerability assessments may cause unexpected technical consequences, including temporary or permanent service interruptions, application crashes or system instability, network congestion or degraded performance, server, database, or application downtime, data corruption, modification, or loss, unexpected activation of security controls, and business interruption with associated financial loss. These consequences may occur even when a scan is run as intended.
11. Assumption of Risk and Responsibility
By initiating a scan, you accept the operational risks of vulnerability assessment activity and are responsible for selecting and verifying scanning targets, obtaining all required authorizations, scheduling assessments appropriately, maintaining adequate backups and recovery procedures, assessing potential operational consequences, informing affected stakeholders where necessary, and managing and responding to incidents arising from your scanning activity. To the maximum extent permitted by applicable law, you assume responsibility for damages, interruptions, or losses arising from your choice of targets, scanning configuration, unauthorized activity, or failure to take appropriate precautions.
12. Payment and Billing
Purchases of Scanner are processed by Paddle, our reseller and merchant of record (the relevant Paddle contracting entity is determined by the location you purchase from, as set out in the Paddle Buyer Terms), which handles payment collection, invoicing, and sales tax/VAT for the transaction. Plan pricing is shown at checkout and in the operator console.
13. Subscription Renewal and Cancellation
Scanner subscriptions automatically renew according to the billing period selected at checkout unless cancelled before renewal. You may cancel from within the Scanner console, which requests cancellation from Paddle on your behalf, or directly through Paddle as described in the Paddle Buyer Terms. Either way, cancellation takes effect at the end of your current billing period and you will not be charged again after that date. Refunds and statutory withdrawal rights are governed by the Paddle Buyer Terms, Paddle’s Refund Policy, our Refund Policy below, and any mandatory consumer protection law that applies to you.
14. Accounts and Access
You are responsible for keeping your Scanner console credentials confidential and for all activity under your account. We may suspend or terminate access for breach of these terms or for use that is unlawful or unauthorized under Sections 5 and 7.
15. No Resale or Redistribution
Your subscription to Scanner is for your own internal use or, if you are a managed service provider or consultancy, for assessing infrastructure you are authorized to scan on behalf of your own clients under Section 5. You may not resell, sublicense, rent, lease, or otherwise redistribute Scanner, access to the Scanner console, or any account, seat, or API credential for it, as a standalone product or service to a third party, without our prior written consent. This does not prevent you from sharing the resulting vulnerability-assessment reports with your own clients as part of services you provide to them.
16. Customer Data and Security Reports
You retain ownership of the data, scanning targets, and assessment reports submitted to or generated through Scanner, subject to our intellectual property rights in the underlying software and reporting technology. You are responsible for ensuring the lawful collection, submission, and processing of target information, and you acknowledge that vulnerability reports may contain sensitive security information and agree to protect such information from unauthorized disclosure. We process Customer Data in accordance with our Privacy Policy and any applicable Data Processing Agreement.
17. Intellectual Property
ACL Aurora Core Labs LTD and its licensors retain all rights, title, and interest in Scanner, its console, and its documentation. These terms do not transfer any ownership rights to you.
18. Disclaimers and Limitation of Liability
Scanner is provided "as is" without warranties of any kind, to the extent permitted by law. We do not guarantee that scans will be error-free, uninterrupted, or without operational impact, and vulnerability-assessment reports reflect the state of in-scope targets at the time of the scan without guaranteeing the absence of vulnerabilities. To the maximum extent permitted by applicable law, we are not liable for indirect, incidental, consequential, special, or punitive damages arising from use of Scanner, including lost profits, business interruption, or loss of data. Nothing in these terms excludes or limits liability that cannot lawfully be excluded or limited.
19. Aggregate Limitation of Liability
To the maximum extent permitted by applicable law, the total aggregate liability of ACL Aurora Core Labs LTD arising out of or relating to Scanner shall not exceed the total amounts you paid for Scanner services during the twelve (12) months immediately preceding the event giving rise to the claim. This limitation does not apply to liability that cannot lawfully be limited or excluded.
20. Indemnification
To the extent permitted by applicable law, you agree to indemnify and hold harmless ACL Aurora Core Labs LTD, its operators, employees, and affiliates against third-party claims, damages, liabilities, and reasonable legal expenses arising from unauthorized scanning activity, violations of these terms, infringement of third-party rights, unlawful use of Scanner, or false representations concerning infrastructure ownership or testing authorization. This provision does not apply to the extent a claim results from our own unlawful conduct or liability that cannot legally be excluded.
21. Third-Party Complaints and Claims
You are responsible for responding to complaints, incidents, and claims arising from scanning activity initiated through your account. To the extent permitted by applicable law, you agree to indemnify SecurePlan and ACL Aurora Core Labs LTD against third-party claims resulting from unauthorized scanning, inaccurate authorization declarations, or violations of applicable laws or third-party infrastructure policies. This obligation does not extend to losses attributable to our own unlawful conduct or liability that cannot legally be excluded.
22. Compliance with Applicable Laws
You agree to comply with all applicable laws and regulations concerning cybersecurity, computer systems, and data protection, including Directive 2013/40/EU on attacks against information systems, Regulation (EU) 2016/679 (GDPR), and applicable national laws on unauthorized access, system interference, computer misuse, and cybercrime. Unauthorized security testing may result in civil or criminal liability under applicable law.
23. Monitoring and Enforcement
Subject to applicable law, we may apply technical restrictions and scanning limits, verify ownership or authorization of submitted targets, suspend or terminate accounts associated with suspected misuse, preserve relevant operational records in accordance with our Privacy Policy and applicable law, and cooperate with competent authorities when legally required.
24. No Guarantee of Security
Scanner provides vulnerability assessment capabilities but does not guarantee the identification of every vulnerability, weakness, or security threat. A completed assessment does not certify that any infrastructure is secure, compliant, or free from vulnerabilities.
25. Changes to These Terms
We may update these terms from time to time. Material changes will be communicated as required by applicable law, and continued use of Scanner after a validly notified change constitutes acceptance of the updated terms where permitted by law.
26. Governing Law
These terms are governed by the laws of the Republic of Cyprus, without regard to conflict-of-law principles and without prejudice to any mandatory legal protections that may apply.
27. Contact Us
For questions about these terms, use the contact form on this website.