Published and effective: July 12, 2026
This is a courtesy translation. The legally binding version of this document is the Russian one, available at undersec.tech/legal/terms. In case of any discrepancy, the Russian version prevails.
1. General provisions and definitions
These Terms of Service (the “Terms”) govern the relationship between the owner and administrator of the undersec.tech website and the app.undersec.tech service (the “Operator”) and any natural or legal person (the “User”) regarding the use of the undersec.tech website (the “Website”) and the app.undersec.tech online security-analysis service (the “Service”).
The Terms constitute a contract of adhesion (Art. 428 of the Civil Code of the Russian Federation). Registering an account or actually using the Website or the Service constitutes acceptance of the Terms. If you do not agree with the Terms, you must refrain from using the Service.
2. Subject matter
The Operator provides the User with access to a platform for analysing the security of web resources and infrastructure: running scans, viewing results, generating reports and related features — to the extent defined by the selected plan and the current functionality of the Service.
3. Registration and account
- The User undertakes to provide accurate registration data and keep it up to date.
- The User must keep account credentials confidential and is responsible for all actions performed under the account.
- The Service is intended for persons aged 18 or over.
- The User must promptly notify the Operator of any unauthorised access to the account at hello@undersec.tech.
4. Acceptable use
The Service is intended exclusively for lawful security analysis. The User may run scans only against resources that:
- belong to the User (the User is their owner); or
- the User has the owner’s explicit prior permission to test (written form is recommended); and
- subject to the Service’s resource-ownership verification mechanisms (including domain verification) where they apply.
The User must not:
- use the Service for unlawful access to computer information, distribution of malicious software, disruption of information storage, processing or transmission facilities, or any other actions punishable under Arts. 272, 273, 274 and 274.1 of the Criminal Code of the Russian Federation;
- scan third-party resources without their permission, regardless of the purpose;
- violate the rights and lawful interests of third parties, including intellectual property rights;
- interfere with the operation of the Service or circumvent its technical restrictions and protections;
- share access to the Service with third parties or resell it without the Operator’s consent.
The User bears sole and full responsibility for the lawfulness of target selection and for the consequences of scans. The Operator may suspend or restrict access to the Service where there are signs of a breach of this section, and may report violations to competent authorities where required by law.
5. Scan results and reports
Scan results, reports and recommendations are informational. They are not a legal opinion, an audit opinion or a guarantee of the absence of vulnerabilities, and do not replace professional assessment. Regulatory-compliance features (including those related to 152-FZ) marked as “beta” are a preparation aid and do not replace an assessment by a lawyer or a data-protection officer.
6. Plans and payment
- The Service may be provided free of charge and/or on a paid basis according to the plans published on the Website or in the Service.
- Payments are processed by external payment providers. The moment of payment is determined by the rules of the relevant provider.
- The Operator may change plan pricing; changes do not affect an already paid period. Refunds are made in the cases and in the manner provided by the laws of the Russian Federation.
7. Intellectual property
Exclusive rights to the Service, its code, design, trademarks and Website materials belong to the Operator. The User is granted a limited, non-exclusive, non-transferable licence to use the Service for its intended purpose for the duration of the Terms. Rights to the data uploaded by the User and to the reports generated for the User remain with the User.
8. Limitation of liability
The Service is provided “as is” and “as available”. To the extent permitted by the mandatory rules of the laws of the Russian Federation:
- the Operator does not warrant uninterrupted, error-free operation of the Service or the detection of all vulnerabilities of the scanned resources;
- the Operator is not liable for the User’s indirect losses or lost profit;
- the Operator’s aggregate liability is limited to the amount actually paid by the User for the Service in the three calendar months preceding the event giving rise to liability.
Nothing in this section limits consumer rights provided by the laws of the Russian Federation.
9. Personal data
The User’s personal data is processed in accordance with the Privacy Policy (Personal Data Processing Policy), which forms an integral part of these Terms.
10. Term, changes and termination
- The Terms are effective from acceptance until terminated.
- The Operator may amend the Terms; a new version takes effect upon publication on the Website. Continued use of the Service after publication constitutes acceptance of the new version.
- The User may stop using the Service and delete the account at any time. The Operator may terminate the Terms and block the account in case of a material breach, including a breach of Section 4.
11. Governing law and disputes
The Terms are governed by the law of the Russian Federation. Before going to court, a mandatory pre-trial claim procedure applies: claims are sent to hello@undersec.tech with a 30-calendar-day response period. Unresolved disputes are referred to a court in accordance with the laws of the Russian Federation.
12. Contact
Questions about the Terms: hello@undersec.tech. The current version is permanently available at undersec.tech/legal/terms.