Legal

Terms of Service

Last updated: February 22, 2026 Â - Effective immediately upon account creation.

1. Acceptance of Terms

By creating an account, accessing, or using the DomainRisk.io platform (the "Service"), you agree to be bound by these Terms of Service ("Terms"). If you do not agree to these Terms, you must not access or use the Service. These Terms constitute a legally binding agreement between you ("User", "you") and DomainRisk.io ("we", "us", "our"). If you are accepting on behalf of a company or other legal entity, you represent that you have the authority to bind that entity.

2. Description of the Service

DomainRisk.io is a cloud-based domain security monitoring platform. The Service continuously analyzes publicly available WHOIS records, DNS configurations, SSL/TLS certificates, email-authentication records (SPF, DKIM, DMARC), and subdomain inventories for domains you register within the platform. Results are scored on a 0–100 weighted security model and made available through a web dashboard, email alerts, webhook notifications, and downloadable PDF reports.

The Service relies on public data sources and third-party DNS/WHOIS infrastructure. We do not guarantee completeness or real-time accuracy of all third-party data. Scan results are provided for informational and security-planning purposes only and do not constitute legal, regulatory, or compliance advice.

3. Account Registration & Security

You must provide accurate, current, and complete registration information and keep it up to date. You are solely responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account. You must notify us immediately of any unauthorized use of your account or any security breach at the address listed in Section 14.

You may not share your account credentials with third parties, create accounts on behalf of others without authorization, or use automated means to create accounts. We reserve the right to suspend or terminate accounts that we reasonably suspect are compromised, fraudulent, or used in violation of these Terms.

4. Authorized Use & Restrictions

The Service is intended for legitimate security monitoring of domains you own, are authorized to monitor, or are monitoring on behalf of a client pursuant to a valid professional mandate. You represent and warrant that:

  • You are authorized to monitor all domains you add to the platform.
  • You will not use the Service to engage in unauthorized data harvesting or reconnaissance against domains you do not own or have written permission to analyze.
  • You will not attempt to circumvent access controls, rate limits, or security mechanisms of the platform.
  • You will not use the Service to generate or transmit spam, malware, or any unlawful content.
  • You will not reverse-engineer, decompile, or attempt to extract the source code of the platform.
  • You will not resell, sublicense, or white-label the Service without our prior written consent.
  • You will comply with all applicable laws and regulations, including export control and data protection laws.

We reserve the right to remove any domain from your account and suspend the Service immediately if we have reasonable grounds to believe that your use violates these restrictions or applicable law.

5. Subscription Plans, Pricing & Billing

The Service is offered under a Free plan and several paid plans as described on our pricing page. Paid plans are available on a monthly subscription basis or as a one-time payment for a defined access period, as specified at checkout.

  • All prices are stated in United States Dollars (USD) and exclusive of applicable taxes.
  • Billing is processed securely through Stripe, Inc. By subscribing, you authorize us to charge your designated payment method on a recurring basis (for subscriptions) or once (for one-time payments).
  • Subscription fees are charged at the start of each billing period. One-time payments grant access for the specified period and do not auto-renew unless explicitly stated.
  • We may update pricing with at least 30 days' advance notice communicated via email or in-platform notice. Existing subscriptions are unaffected until the next renewal date.
  • All fees are non-refundable except as expressly stated in Section 6.
  • Failure to pay any amount due may result in immediate suspension of paid features and, if uncured, termination of your account.

6. Cancellation & Refund Policy

You may cancel your subscription at any time via the Plan & Billing page in your account settings. Upon cancellation, your paid features will remain active until the end of the current billing period, after which your account will revert to the Free plan.

We do not provide prorated refunds for unused portions of a billing period. Exceptions may be granted at our sole discretion in cases of documented technical failure attributable solely to us, sustained service unavailability exceeding 72 consecutive hours, or billing errors on our part. To request a refund under these exceptions, contact us within 14 days of the charge at the address in Section 14.

One-time payments are non-refundable once the access period has commenced, except in the case of a billing error.

7. Free Plan

The Free plan is provided without charge, subject to the feature and usage limits described on the pricing page. We reserve the right to modify, restrict, or discontinue the Free plan at any time with reasonable notice. Continued use of the Service after such modifications constitutes acceptance of the updated terms.

8. Intellectual Property

All rights, title, and interest in and to the Service, including its software, design, algorithms, documentation, trademarks, and security-scoring methodology, are and remain the exclusive property of DomainRisk.io. These Terms grant you a limited, non-exclusive, non-transferable, revocable license to access and use the Service solely for your internal security monitoring purposes.

You retain all rights in the domain names and data you submit to the platform. By submitting data, you grant us a limited license to process it solely for the purpose of delivering the Service to you. We do not claim any ownership over your monitoring data.

You may not copy, modify, distribute, sell, or create derivative works from any part of the Service without our prior written consent.

9. Third-Party Services

The Service integrates with and relies on third-party services including but not limited to Stripe (payment processing), third-party WHOIS and DNS data providers, and SSL certificate transparency logs. Your use of third-party payment services is subject to those providers' own terms and privacy policies. We are not responsible for the actions, content, or availability of third-party services.

10. Service Availability & Disclaimers

We aim to provide a reliable service but do not guarantee uninterrupted or error-free availability. The Service is provided "as is" and "as available" without warranties of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, accuracy of results, or non-infringement.

Scan results depend on the availability and accuracy of public third-party data sources (WHOIS registrars, DNS resolvers, certificate authorities). We do not warrant that the Service will detect all security issues, vulnerabilities, or domain risks. Security monitoring is one layer of a defense-in-depth strategy and should not be relied upon as the sole security control for any system.

11. Limitation of Liability

To the maximum extent permitted by applicable law, DomainRisk.io and its affiliates, directors, employees, and licensors shall not be liable for any indirect, incidental, special, consequential, or punitive damages — including loss of data, revenue, profits, reputation, or business — arising out of or related to your use of or inability to use the Service, even if advised of the possibility of such damages.

Our total cumulative liability to you for any claim arising out of or relating to these Terms or the Service shall not exceed the greater of (a) the total amount paid by you to us in the 12 months preceding the claim, or (b) €100. Nothing in these Terms limits liability for fraud, gross negligence, or death or personal injury caused by our negligence.

12. Indemnification

You agree to indemnify, defend, and hold harmless DomainRisk.io and its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or related to your violation of these Terms, your misuse of the Service, your infringement of any third-party rights, or any domain monitoring activity you conduct that exceeds your authorization.

13. Modifications to Terms & Service

We may modify these Terms at any time. Material changes will be notified via email or prominent in-platform notice at least 14 days before taking effect. Your continued use of the Service after the effective date of the updated Terms constitutes your acceptance. If you do not agree to the modified Terms, you must stop using the Service and cancel any active subscription before the effective date.

We may also modify, suspend, or discontinue any part of the Service at any time. We will endeavor to provide reasonable advance notice of significant changes.

14. Governing Law & Dispute Resolution

These Terms are governed by applicable law. In the event of any dispute arising under these Terms, the parties agree to first attempt resolution through good-faith negotiation. If negotiation fails, disputes may be submitted to the courts of competent jurisdiction as determined by applicable law, subject to any mandatory consumer protection provisions in your jurisdiction of residence.

15. General Provisions

  • Entire Agreement. These Terms, together with the Privacy Policy and Cookie Policy, constitute the entire agreement between you and DomainRisk.io regarding the Service.
  • Severability. If any provision of these Terms is found to be unenforceable, the remaining provisions will continue in full force and effect.
  • Waiver. Our failure to enforce any right or provision of these Terms will not constitute a waiver of that right or provision.
  • Assignment. You may not assign or transfer your rights or obligations under these Terms without our prior written consent. We may assign our rights and obligations to a successor entity in connection with a merger, acquisition, or sale of assets.
  • Force Majeure. We are not liable for delays or failures arising from circumstances beyond our reasonable control, including internet outages, third-party infrastructure failures, or acts of nature.

16. Contact

For legal inquiries, billing disputes, or questions about these Terms, please contact us via /contact. We will endeavor to respond within 5 business days.