Terms of Service

Safe-say provides automated application security (AppSec) scanning services. You agree to use the platform solely to scan assets that you own, or for which you have obtained explicit, documented authorization to test from the asset owner.

You are solely responsible for ensuring you have the legal authority to scan every target you add. Unauthorized scanning may violate local, national, or international law and third-party agreements. Safe-say bears no liability for scans initiated without proper authorization.

Scanning infrastructure or services owned by third parties without permission, engaging in denial-of-service behavior, or attempting to evade rate limits or security controls is prohibited and may result in termination of your account.

Targets must be verified through the ownership validation flow before they can be scanned. For domains and URLs this is performed via a DNS TXT record (safesay-verify=...); for IPs, CIDR ranges, and API specifications by confirmation of authorized access.

You represent that you own, or are an authorized agent of the owner of, all assets you register. We may suspend or delete any target, or terminate your account, if we reasonably believe the target is not authorized.

You retain full ownership of your assets and scan results. This Agreement does not transfer any ownership of your intellectual property to Safe-say.

Paid features are billed in advance through our payment processor (Stripe) on a recurring basis, according to the plan selected (Free, Starter, Pro). Enterprise plans are provided under separate agreement.

Scan credits are consumed when a scan is launched. Credits are non-refundable and, unless noted otherwise, reset with your monthly billing cycle. Unused included credits do not roll over.

By subscribing you authorize recurring charges. You may cancel at any time; cancellation takes effect at the end of the current billing period. Late or failed payments may result in suspension of service. All fees are exclusive of applicable taxes, for which you are responsible.

We may change plan pricing by providing notice; changes take effect at the start of the next billing period.

You agree not to misuse the service, including: reselling or sublicensing it without permission; attempting to access another user's account, organizations, or data; using automated means to scrape or disrupt the service; or storing or transmitting unlawful material.

You will not circumvent the ownership validation or rate-limiting controls, or use the platform to attack Safe-say's own infrastructure.

Safe-say, its branding, and the 'Powered by Strix Engine' mark are provided under our licensing terms. Scan findings and reports are provided 'as is' for informational purposes and do not guarantee that your systems are free of vulnerabilities.

Except as expressly stated, the service is provided on an 'as is' and 'as available' basis without warranties of any kind. In no event shall Safe-say, its affiliates, or licensors be liable for indirect, incidental, special, consequential, or punitive damages, or lost profits or data, arising from your use of the service.

You agree to indemnify and hold Safe-say harmless from any claims or losses arising from your unauthorized scanning activities.

We may suspend or terminate your access to the service for violation of these Terms, fraud, or abuse. On termination, your right to use the service ceases; you may export your scan results before termination where this is technically feasible.

These Terms are governed by the laws of the jurisdiction in which Safe-say is established, without regard to conflict-of-law principles. Any disputes shall be resolved in the competent courts of that jurisdiction.

We may update these Terms from time to time. Material changes will be communicated to you before they take effect. Continued use of the service after changes constitutes acceptance of the revised Terms.