Terms of use

These terms govern access to the AxiSecurity website and platform. Where applicable, they supplement the quote, purchase order, testing mandate, commercial terms and data-processing agreement applicable to a service.

1. Acceptance and authority

By using the website or service, the user confirms that they have the necessary capacity and accept these terms. When acting for an organisation, they confirm that they are authorised to bind it within their mandate.

2. Nature of the services

AxiSecurity provides external passive diagnostics, automated analyses, reports, monitoring, audits and penetration-testing engagements. Depth, engines, frequency, deliverables, rate limits and exclusions depend on the subscribed offer and authorised scope.

3. Target authorisation

The user may submit only domains, applications, addresses or environments that they own, administer or have express and sufficient authority to test. They must obtain required approvals from their customer, host, operator, data owner and any other concerned party before analysis.

4. Passive tests and penetration tests

The free Flash Score is a bounded external passive observation. It includes no exploitation, bypass, brute-force, denial-of-service or authentication testing. Active, authenticated or intrusive tests begin only after target verification, a written scope, emergency contacts and, where required, a separate signed mandate.

5. User obligations

• provide accurate information and keep contact details current;
• protect credentials and promptly report any compromise;
• not use the service to monitor, degrade, collect from or attack a third party without authority;
• comply with applicable laws, hosting contracts, security rules and rate limits;
• review results with competent people before any production change.

6. Results, remediation and limitations

A result reflects what was observable at the time and under the conditions of the analysis. The absence of a signal does not prove the absence of a vulnerability. Recommendations, configuration snippets and validation commands must be adapted, tested and approved in the user’s environment before deployment. AxiSecurity does not replace code review, formal accreditation or comprehensive security monitoring.

7. Availability, suspension and security

The service may be limited, delayed, interrupted or suspended where necessary to protect a target, the platform, a third party, data or compliance with the authorised scope. The publisher may refuse or stop analysis if a risk of abuse, damage, illegality or non-compliance is identified.

8. Accounts, access and data ownership

Each organisation remains responsible for assets and information it declares. Access rights are allocated by role. Technical data and reports remain accessible according to the offer, retention period and applicable security rules. The publisher retains rights in the software, methods, know-how and generic elements not specific to the customer.

9. Liability

To the extent permitted by law, the publisher is subject to an obligation of means. It is not liable for consequences of insufficient authorisation, inaccurate information, changes to an environment after analysis, failure to remediate or third-party unavailability. Liability provisions for paid services, where applicable, appear in the relevant contractual documents.

10. Personal data, duration and evidence

Personal-data processing is described in the privacy policy. Logs and evidence necessary for security, support or compliance with scope may be retained for the proportionate period provided by the service and law.

11. Changes to these terms

These terms may change. The applicable version is the one published on the date the service is used, unless a written contractual commitment provides otherwise. For an ongoing service, material change is communicated by an appropriate means where law or contract requires it.

12. Applicable law and contact

These terms are governed by French law. For any question, use the contact form. In case of dispute, the parties will seek an amicable solution before proceedings.