Terms of Service

These Terms of Service ("Terms") govern your access to and use of Aion Security (aionsecurity.io), including our free domain scanner and our subscription-based continuous monitoring dashboard (together, the "Service"), operated by Aion Security ("we," "us," or "our"). By accessing or using the Service, you agree to be bound by these Terms. If you do not agree, please do not use the Service.

1. Description of the Service

Aion Security provides automated security scanning for domains you submit, including checks of SSL/TLS certificates and configuration, HTTP security headers, publicly exposed configuration or backup files, cookie security flags, DNS and email authentication records (SPF/DMARC/DKIM), blacklist status, disclosure/hardening signals (security.txt, CAA, DNSSEC), and content management system exposure. We also offer a separate free scanner that checks uploaded dependency lockfiles against public vulnerability databases. The free scanners run on-demand checks and generate a downloadable report. Paid accounts can add domains to a dashboard for ongoing security re-scanning on a chosen interval (daily, weekly, or monthly), email alerts when a domain's security posture changes, and an automatic monthly PDF report emailed for each monitored domain. Paid accounts also receive uptime monitoring, which checks whether each monitored domain is reachable on a frequent fixed interval (currently roughly every five minutes) and alerts you when a domain appears to go down and again when it recovers; uptime checking can be turned off per domain from your dashboard. Pro accounts may additionally connect a Slack Incoming Webhook to receive the same alerts in Slack. We also publish a curated feed of third-party security news headlines, which links out to the original publishers and is provided for general information only.

2. Authorized Use Only

You may only submit domains that you own, operate, or otherwise have explicit authorization to assess. Using the Service to scan, probe, or monitor domains belonging to third parties without permission is strictly prohibited and may violate applicable computer misuse or unauthorized access laws. We reserve the right to suspend or terminate access for any use we reasonably believe is unauthorized or abusive.

3. Accounts

Creating an account and using the monitoring dashboard requires authenticating through our identity provider. You are responsible for maintaining the security of your account and for all activity that occurs under it. Notify us promptly if you become aware of any unauthorized use of your account.

4. Subscriptions & Fees

Certain features of the Service, such as unlimited domain monitoring, are offered on a paid subscription basis as described on our Pricing page. Pricing, billing terms, and cancellation details will be presented to you at the time of purchase. We reserve the right to change our pricing or subscription tiers with reasonable notice.

5. No Warranty; Informational Use

The Service is provided on an "as is" and "as available" basis. Scan results, security grades, and alerts are intended to help you identify potential issues and do not constitute a guarantee that a domain is secure, free of vulnerabilities, or immune from compromise. Our checks are automated, may produce false positives or false negatives, and are not a substitute for a professional security audit or penetration test. We disclaim all warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, and non-infringement.

Dependency scanning compares the packages you upload against third-party public vulnerability data (OSV.dev). That data is not exhaustive and may be incomplete or out of date, so a result showing no known vulnerabilities does not mean your dependencies are free of them.

6. Monitoring and Alerts Are Best-Effort

Scheduled scans and uptime checks run on fixed intervals. A change in a domain's security posture, or an outage, that occurs between two checks may not be detected until the following check, and brief outages may not be detected at all. Uptime checks may report a domain as unreachable when it is in fact functioning normally — for example where a host's own bot-protection or rate limiting blocks our automated request — or report a domain as reachable when some part of it is not working.

Alert delivery depends on systems outside our control, including your email provider and, where you have configured one, Slack. An alert may be delayed, filtered, rejected, or fail to send, and we do not guarantee that any particular alert will be generated, delivered, or received.

Accordingly, you should not rely on the Service as your sole or primary means of detecting downtime, security regressions, or any other condition affecting a domain. The Service is not an emergency notification, on-call, or incident-response system, and is not suitable for use as one.

7. Limitation of Liability

To the fullest extent permitted by law, Aion Security shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits, data, or business, arising out of or related to your use of, or inability to use, the Service — including reliance on any scan result, grade, or alert we provide.

8. Intellectual Property

The Service, including its design, code, and branding, is owned by Aion Security and protected by applicable intellectual property laws. You retain ownership of any data you submit to the Service, such as the domain names you choose to scan or monitor.

9. Termination

You may stop using the Service and remove monitored domains from your dashboard at any time. We may suspend or terminate your access to the Service if you violate these Terms, including the Authorized Use section above.

10. Changes to These Terms

We may update these Terms from time to time. If we make material changes, we will update the "Last updated" date above. Continued use of the Service after changes take effect constitutes acceptance of the revised Terms.

11. Contact

Questions about these Terms can be sent to us via our Contact page.