Terms of Service

These terms are an agreement between Vulnsy ("we", "us"), the business that provides the service, and the organisation you represent ("you") when you request a trial, subscribe to or use the Vulnsy hosted service. By requesting a trial or using the service you accept them. If you accept on behalf of an organisation, you confirm you are authorised to do so.

The self-hosted edition is licensed under its own agreement, and a signed enterprise agreement takes priority over these terms where the two differ.

Vulnsy is a platform for managing penetration test engagements and producing reports: clients, projects, findings, evidence, report generation, a client portal and related tools. We develop it continuously, so features may be added, changed or retired. We will not remove a feature you are paying for without reasonable notice.

• Trials last 14 days, need no payment card and are approved by us. We may decline a request, for example when it does not come from a business email address.
• A trial ends automatically. You are never charged unless you choose to subscribe.
• You are responsible for the people you invite, for keeping credentials and API keys secret, and for everything done under your workspace.
• Tell us promptly if you believe an account has been compromised.

• Plans are billed monthly or annually in advance through our payment provider, in the currency shown when you subscribe. Prices exclude taxes unless stated.
• A subscription renews automatically until you cancel. You can cancel at any time from the billing page, and cancellation takes effect at the end of the period you have paid for.
• If a payment fails we will tell you and retry. If it stays unpaid we may suspend the workspace until it is settled.
• We may change prices for future billing periods and will give you at least 30 days’ notice before a change applies to you.
• Optional add-ons, such as managed AI allowances, are billed alongside your plan.

You keep all rights to the content you put into Vulnsy. You give us permission to host, process and display it only as needed to provide the service to you, as described in our Privacy Policy.

You are responsible for having the right to store that content, including any personal data or client information within it, and for the accuracy of the reports you produce. You can export your data at any time while your workspace is active.

You agree not to:

• Use the service for testing you are not authorised to perform, or to store material obtained unlawfully.
• Attempt to access another customer’s data, probe or disrupt the service, or work around its limits.
• Resell or provide the service to third parties as your own product, except to deliver your own engagements to your clients through the features built for that.
• Upload malware intended to harm the service or other people, beyond the evidence and samples an assessment legitimately requires.
• Use the API or automation in a way that degrades the service for others.

If you find a vulnerability in Vulnsy, please tell us at the address below and give us a reasonable time to fix it before disclosing it.

AI-generated text is a draft. You are responsible for reviewing it before it goes into a deliverable. Managed AI is subject to a monthly allowance and to the usage limits described in the documentation.

We own the Vulnsy software, the curated findings library and the documentation. These terms give you a right to use them while you have an active trial or subscription, and nothing more. Feedback you give us may be used to improve the product without obligation to you.

We work to keep the service available and to announce planned maintenance in advance, but we do not promise uninterrupted availability unless we have agreed a service level with you in writing. Support is provided by email, with priority support on the plans that include it.

We treat your workspace content as confidential. We access it only to provide support at your request, to maintain the service or where the law requires, and we do not disclose it to anyone other than the providers listed in our Privacy Policy.

• You may stop using the service at any time by cancelling your subscription.
• We may suspend or end your access if you seriously or repeatedly break these terms, or if required by law. Where we reasonably can, we will warn you first and give you the chance to put things right.
• When a subscription or trial ends, your workspace is retained for a short period so you can export your data or resubscribe, and is then deleted.

We will provide the service with reasonable skill and care. Beyond that, and to the extent the law allows, the service is provided as it is, without other warranties.

Nothing in these terms limits liability that cannot be limited by law, such as liability for fraud or for death or personal injury caused by negligence. Otherwise, neither of us is liable to the other for indirect or consequential loss or for lost profits, and our total liability to you in any twelve-month period is limited to the fees you paid us in that period.

We may update these terms as the service evolves. We will update the date at the top and, for changes that materially affect you, email workspace administrators at least 30 days before they take effect. Continuing to use the service after that means you accept the updated terms.

These terms are governed by the laws of England and Wales, and the courts of England and Wales have jurisdiction over any dispute, without affecting any mandatory rights you have under the law of your own country.

Questions about these terms can be sent to luke@vulnsy.com.