1. Acceptance of Terms

By accessing and using SecRecon ("the Platform"), you agree to be bound by these Terms of Service and our Privacy Policy. If you do not agree, do not use the Platform.

2. Authorized Use Only

SecRecon is designed for authorized security testing only. You must have explicit written permission or verified ownership of any target you scan. Unauthorized scanning of systems you do not own or have permission to test is strictly prohibited and may violate applicable laws.

3. Safe Harbor Compliance

All scans are subject to Safe Harbor compliance checks. The Platform blocks scanning of private IP ranges, cloud metadata endpoints, government domains (.gov, .mil), and other restricted targets. Attempting to circumvent these protections is a violation of these Terms.

4. User Accounts

You are responsible for maintaining the confidentiality of your account credentials. You agree to notify us immediately of any unauthorized use of your account.

5. Subscription Plans

SecRecon offers Professional, Business, and Enterprise subscription plans. Each plan provides a set number of scan credits per billing period. We reserve the right to modify pricing and features with reasonable notice.

6. Scan Results & Reports

Scan results and PDF reports are provided "as is" without warranty. Reports are automatically deleted after 24 hours. You are responsible for downloading and securing any reports you wish to retain.

7. Prohibited Conduct

You agree not to: (a) use the Platform for any illegal purpose; (b) attempt to scan targets without authorization; (c) share exploit code generated from scan results; (d) abuse the community forum with spam, harassment, or malicious content; (e) reverse engineer or attempt to extract the Platform's source code.

8. AI-Generated Content

AI-powered features provide automated responses. These are for informational purposes only and should not be considered professional security advice. Always verify findings with official documentation.

9. Regulated Data & Compliance

If the systems you scan, or your organization generally, are subject to a regulatory framework such as GDPR, HIPAA, or FERPA, you remain responsible for your own compliance obligations under that framework — using SecRecon does not by itself satisfy them. We do not represent that any plan or feature is certified compliant with a specific regulatory framework unless confirmed in a signed written agreement (for example, a Business Associate Agreement or Data Processing Agreement). If you need such an agreement in place before scanning regulated systems, contact us via the Contact page first.

10. Limitation of Liability

SecRecon and its operators shall not be liable for any damages arising from the use of scan results, reports, or AI-generated content. Use of the Platform is at your own risk.

11. Termination

You may stop using the Platform and request account deletion at any time by contacting us. We may suspend or terminate access to the Platform for violation of these Terms, including unauthorized scanning or abuse of the Prohibited Conduct provisions above.

12. Changes to These Terms

We may update these Terms from time to time. Material changes will be reflected by updating the "Last updated" date above; continued use of the Platform after changes take effect constitutes acceptance of the revised Terms.

13. Governing Law

These Terms are governed by the laws of the State of Texas, USA, without regard to its conflict of law principles.

14. Contact

For questions about these Terms, please contact us via the Contact page.