Terms of Service

MyDomainRisk is an external-intelligence platform operated by Huro Data Technologies Ltd. It answers two questions about an internet domain from publicly available information:

1. Security posture — how well-configured is the domain against routine external risks (TLS, DNS, email authentication, security headers, exposed services, known vulnerabilities, breach and threat-intelligence cross-reference)?
2. Authenticity — given a link or address you have received, is the domain likely to be genuine or is it consistent with phishing, typosquatting, or impersonation infrastructure?

Every scan — whichever app initiates it — performs the same set of non-intrusive external checks: third-party intelligence lookups (WHOIS, DNS, certificate transparency, breach and reputation feeds) plus a small number of direct connections to the target's public-facing services that do not go beyond what a normal browser or DNS resolver would send (TLS handshake on port 443, a single HTTP request to the homepage, SMTP STARTTLS probe on the mail server, and TCP port availability checks on a short list of well-known service ports).

The Service does notconduct active penetration testing, exploit attempts, authenticated probing, brute-force attempts, vulnerability triggering, or any activity that requires the target's authorisation under the UK Computer Misuse Act 1990, the US Computer Fraud and Abuse Act, or equivalent legislation. Non-intrusive external intelligence of this kind is lawful to perform against any domain on the public internet.

You must be at least 18 years old and have the legal capacity to enter into a binding contract to use the Service. By registering, you confirm that the information you provide is accurate and that you will keep it up to date.

Each account is personal and non-transferable. You are responsible for all activity that occurs under your account. Notify us immediately at support@mydomainrisk.com if you suspect unauthorised access.

You agree to use the Service in good faith and within the law of your jurisdiction. Specifically, you agree not to:

• Use the Service to facilitate attacks, intrusion attempts, harassment, stalking, defamation, or any other unlawful activity against the owner or operator of any domain.
• Present Service output to a third party as evidence that their domain has been breached, compromised, or is unsafe. Our findings describe external configuration and public intelligence signals, not confirmed compromise.
• Attempt to circumvent rate limits, quotas, authentication, or the distinction between Free and Pro entitlements.
• Resell, sublicense, white-label, or commercially redistribute scan results, reports, or data derived from the Service without prior written consent from Huro Data Technologies Ltd.
• Scrape, reverse-engineer, or otherwise extract the Service's check logic, scoring rules, or threat-intelligence integrations for the purpose of building a competing product.
• Interfere with, overload, or disrupt the infrastructure underpinning the Service, including but not limited to submitting large volumes of scans through automation intended to exhaust quotas for other users.

We reserve the right to suspend or terminate accounts that breach these rules without prior notice. We cooperate with law enforcement where required.

The set of security checks performed by the Service (including but not limited to TLS, DNS, exposure, threat intelligence, and third-party data source integrations) may be added, modified, removed, or replaced at any time and at our sole discretion, without prior notice.

Third-party data sources used by the Service (such as Shodan, Have I Been Pwned, Google Safe Browsing, and URLScan.io) are operated independently. Their availability, accuracy, and coverage may change without notice, and we make no guarantees regarding the completeness or currency of data obtained from them. If a third-party data source becomes unavailable, ceases to operate, or is technically unable to provide data, the corresponding scan check or feature may be suspended or removed without notice and without affecting any obligation to pay for the Service.

Scores and findings produced by the Service reflect conditions at the time of each scan and should not be relied upon as a comprehensive or definitive security audit.

The Service is offered on a Free tier (no charge) and a Pro tier (currently £19 per month, billed monthly). Plan features, pricing, and limits may change at any time. We will provide reasonable notice of material pricing changes to existing subscribers.

Pro subscriptions are billed through Stripe. By upgrading, you authorise recurring monthly charges to your payment method. You may cancel at any time via the Stripe Billing Portal; cancellation takes effect at the end of the current billing period. No refunds are issued for partial periods.

All software, design, and content forming part of the Service is owned by Huro Data Technologies Ltd. or its licensors. These Terms do not grant you any rights in our intellectual property beyond the limited right to use the Service as described herein.

Scan results you generate using the Service are yours. We may retain anonymised, aggregated scan data for service improvement purposes.

Our collection and use of personal data is governed by our Privacy Policy. By using the Service you consent to the processing of your personal data as described therein. We do not sell personal data to third parties.

The Service is provided “as is” and “as available” without warranties of any kind, express or implied, including but not limited to merchantability, fitness for a particular purpose, or non-infringement. We do not warrant that the Service will be uninterrupted, error-free, or that any particular security vulnerability will be detected.

To the fullest extent permitted by applicable law, Huro Data Technologies Ltd. shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of the Service, including loss of data, revenue, or goodwill. Our total aggregate liability to you shall not exceed the amounts paid by you in the twelve months preceding the claim.

We may update these Terms from time to time. Continued use of the Service after changes take effect constitutes acceptance of the revised Terms. We will notify registered users of material changes by email or via an in-app notice.

These Terms are governed by the laws of England and Wales. Any disputes shall be subject to the exclusive jurisdiction of the courts of England and Wales.

Questions about these Terms? Contact us at support@mydomainrisk.com.