Terms of Service

1. Agreement

By creating an account or using the BreakMesh platform ("Service"), you ("Customer") agree to these Terms of Service ("Terms") with BreakMesh ("we", "us"). If you are accepting on behalf of a company, you represent you have authority to bind that company.

2. Authorized use only

The Service is designed exclusively for authorized security testing. You may only scan targets you own, control, or have explicit written authorization to test. Use of the Service against targets without authorization is strictly prohibited and may be illegal under applicable computer crime laws.

All targets must be verified via DNS TXT token before scanning can begin. By completing verification you confirm you have the right to scan that target.

3. Acceptable use

You must not:

• Use the Service to attack, disrupt, or interfere with systems you do not own or have permission to test.
• Attempt to exceed the authorized scope defined in your scan configuration or pentest engagement.
• Use the Service to develop, train, or improve competing security products without our prior written consent.
• Share your account credentials or API keys with unauthorised persons.
• Circumvent, disable, or otherwise interfere with security features of the Service.
• Resell, sublicense, or white-label the Service without an Agency plan and written agreement.

4. Penetration testing engagements

Penetration testing features require execution of a digital Rules of Engagement (RoE) and Statement of Work (SoW) before any elevated testing begins. The RoE defines authorized scope, time window (maximum 72 hours), and acceptable probe types. You must not activate or modify scope outside the agreed engagement window.

5. Account and billing

You are responsible for all activity under your account. Plan features and scan limits are defined on the Pricing page and may change with 30 days' notice. Payments are non-refundable except as required by law. We may suspend accounts with unpaid invoices after 14 days' notice.

6. Intellectual property

We retain all rights to the Service, including source code, algorithms, UI, and brand assets. You retain ownership of data you input (targets, scan configurations). Scan results and reports generated by the Service may be used for your internal security purposes.

7. Confidentiality

Scan findings, evidence, and reports may contain sensitive security information. You are responsible for treating this information with appropriate confidentiality and restricting access to authorized personnel.

8. Data processing

Our collection and use of personal data is governed by our Privacy Policy. By using the Service you acknowledge the processing described therein.

9. Disclaimers and limitation of liability

The Service is provided "as is" without warranty of any kind. We do not warrant that scans will detect every vulnerability. Security scanning is inherently imperfect and results should be treated as informational, not exhaustive.

To the maximum extent permitted by law, our aggregate liability to you for any claims arising from these Terms or the Service is limited to the fees you paid in the 12 months preceding the claim. We are not liable for indirect, incidental, consequential, or punitive damages.

10. Indemnification

You agree to indemnify and hold harmless BreakMesh and its officers, employees, and contractors from any claims, losses, or damages arising from: (a) your violation of these Terms; (b) your use of the Service against unauthorized targets; or (c) your violation of any applicable law.

11. Termination

Either party may terminate at any time. We may suspend or terminate your account immediately for material breach of these Terms, in particular unauthorized scanning. On termination, your access ends and data is deleted per our Privacy Policy retention schedule.

12. Governing law

These Terms are governed by the laws of England and Wales. Disputes shall be resolved in the courts of England and Wales, except where mandatory consumer protection laws require otherwise.

13. Changes

We may update these Terms with 14 days' notice for material changes. Continued use after the effective date constitutes acceptance.

14. Contact

For legal queries: legal@breakmesh.io