LEGAL

Terms of Service

Version 2026-10-12.5 · Effective: 12 October 2026

Provider
The Service
Accounts
Authorised testing only
Acceptable use
Plans, fees and billing
Results and confidentiality
Intellectual property
No warranty
Limitation of liability
Indemnity
Suspension, cancellation and termination
Data protection
Changes
Governing law and disputes
Contact

1. Provider

The ScanHawk services (the "Service") at scanhawk.net and app.scanhawk.net are provided by:

Swarmhawk s.r.o., Company ID (IČO) 29644861, registered office Příčná 1892/4, Nové Město, 110 00 Praha 1, Czech Republic, entered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 449938. Contact: admin@swarmhawk.com.

The Service is intended for businesses and professionals acting in the course of their trade or profession. By creating an account you confirm you are acting for such purposes and are authorised to bind the organisation you represent.

2. The Service

The Service provides automated external security assessments of internet-facing assets: external perimeter and port scanning, automated (AI-assisted) penetration testing, and research into leaked data related to your domains (for example on paste sites and dark-web sources), together with a report and a score. Features, test depth and limits depend on your plan and may change as the Service evolves.

Automated tests are non-exhaustive. They do not replace a manual penetration test, a security audit or certification, and may not find all vulnerabilities.

3. Accounts

You must provide accurate information, keep your password confidential and tell us promptly at admin@swarmhawk.com about any unauthorised use of your account.
You are responsible for all activity under your account, including tests started from it.
Accounts are personal to the registered user; do not share login credentials.

4. Authorised testing only

Security testing of systems without the owner's permission may be unlawful (including under Sections 230–232 of the Czech Criminal Code and equivalent laws elsewhere). Therefore:

You may only add and test domains and systems that you own or that you are expressly authorised in writing by their owner to test.
Before any test can start you must prove control of the domain by publishing a DNS TXT record we provide. Verification is re-checked periodically; tests are blocked if it lapses.
DNS verification does not by itself prove authorisation. Where infrastructure is operated by third parties (hosting, cloud, CDN, SaaS providers), you are responsible for complying with their testing policies and for obtaining any permission they require.
Each time you start a test you confirm that the above is true. Tests may generate traffic, load or alerts on the target systems; you accept this and should inform relevant parties (e.g. your hosting provider or SOC) where appropriate.
We may refuse, pause or stop any test, and may report clearly abusive use to the affected party or authorities.

5. Acceptable use

You must not, and must not allow anyone else to:

test, or attempt to test, any system you are not authorised to test, or circumvent domain verification;
use the Service or its results to attack, exploit, extort or harm anyone, or for any unlawful purpose;
attempt to access other customers' data, reports or accounts, or probe, scan or attack the Service itself (report vulnerabilities in the Service to admin@swarmhawk.com instead — we welcome responsible disclosure);
overload the Service, evade rate limits or quotas, or use automated means to create accounts;
resell or provide the Service to third parties without our written consent;
use leaked-data findings to access accounts or systems; such findings are provided only so you can remediate exposure.

6. Plans, fees and billing

PRO: USD 299 per month, with the test types and limits described on our pricing page at the time of purchase.
Enterprise: custom scope, limits and pricing agreed in an order form or separate agreement, which prevails over these Terms where they conflict.
Payment and invoicing are arranged individually with us by writing to admin@swarmhawk.com; there is currently no automatic online billing and no automatic renewal. Each further period is arranged with us.
Swarmhawk s.r.o. is not registered as a VAT payer; our prices therefore do not include VAT.
Automated penetration tests use credits. Credits are granted to your account by us according to your plan or a separate agreement, and are shown in the client area.
If the testing platform clearly rejects a test you started, the credit used for it is returned to your account automatically. If the outcome of a start is unclear, we check it with the testing platform and return the credit if the test did not run; you can also ask us for a refund of that credit.
Apart from the automatic credit return described above, or where required by law or agreed otherwise, fees already paid are not refunded, including for unused credits.
We may change prices with at least 30 days' notice before your next period; you may cancel before the change takes effect.
We may suspend the Service if payment is overdue after a reminder.

7. Results and confidentiality

Reports and findings for your domains are confidential to you. We do not share them with other customers.
Reports may contain sensitive information about your systems. Store and share them carefully. We redact credentials and similar secrets from reports where we detect them, but cannot guarantee complete redaction.
We may use aggregated and anonymised data (which does not identify you or your domains) to operate, secure and improve the Service.

8. Intellectual property

We (and our licensors) own the Service, its software and content. Subject to these Terms and payment of fees, we grant you a non-exclusive, non-transferable right to use the Service and to use reports internally for securing your own systems. You own your data and the systems you test.

9. No warranty

The Service is provided "as is" and "as available". To the extent permitted by law we exclude all implied warranties, including fitness for a particular purpose. We do not guarantee that the Service will be uninterrupted, error-free, or that it will detect every vulnerability or leak, nor that findings are free of false positives.

10. Limitation of liability

To the extent permitted by law, we are not liable for indirect or consequential loss, loss of profit, revenue, data or goodwill, or for any outage, slowdown or other effect of tests on target systems that you authorised.
Our total liability arising out of or in connection with the Service in any 12-month period is limited to the fees you paid us for the Service in that period (or, for free use, EUR 100).
Nothing in these Terms limits liability that cannot be limited by law, including for damage caused intentionally or by gross negligence, or for harm to life or health.

11. Indemnity

You will indemnify us against third-party claims, fines and reasonable costs arising from tests you start without proper authorisation or from your breach of sections 4 or 5.

12. Suspension, cancellation and termination

You may cancel your subscription or close your account at any time by writing to admin@swarmhawk.com; we handle such requests within 30 days. Cancellation takes effect at the end of the current billing period.
We may suspend or terminate your account immediately if you breach sections 4 or 5, if required by law, or to protect the Service or third parties; otherwise with 30 days' notice.
After closure we delete or anonymise your data as described in the Privacy Policy. On request to admin@swarmhawk.com before closure, we will provide a copy of your reports within 30 days.
Sections 4, 5, 7 and 9–15 survive termination.

13. Data protection

Our processing of personal data is described in the Privacy Policy. Where we process personal data on your behalf within the tested systems or leaked-data findings, we do so as your processor under a data processing agreement, which customers can request by writing to admin@swarmhawk.com.

14. Changes

We may update these Terms. Material changes will be announced by email or in the client area at least 30 days in advance; you will be asked to accept the new version in the client area before you continue using it. If you disagree, you may cancel before the change takes effect.

15. Governing law and disputes

These Terms are governed by the laws of the Czech Republic, excluding its conflict-of-law rules and the UN Convention on Contracts for the International Sale of Goods. The courts of Prague, Czech Republic, have exclusive jurisdiction, unless mandatory law provides otherwise.