Terms of Service & Acceptable Use Policy

1. What ClearCitadel does

ClearCitadel provides automated security assessments of websites. A Quick Scan performs passive checks that any normal visitor's browser could make: it loads public pages, inspects HTTP headers, cookies and TLS configuration, looks up public DNS records and requests a short, fixed list of well-known file paths. A Deep Scan performs active testing and is only started by ClearCitadel staff after a request from the website owner.

2. Acceptable use

• You may only request a Deep Scan for websites you own or for which you hold written permission from the owner to perform security testing.
• You must not use ClearCitadel to attack, disrupt or gain unauthorised access to any system.
• You must not attempt to scan government, military or critical-infrastructure systems, or internal/private networks.
• You must not attempt to bypass rate limits, verification steps or other safeguards.

Unauthorised security testing may be a criminal offence. We record who requests each scan, when, and from which IP address, and we cooperate with lawful requests from site owners and authorities.

3. Results

Results are provided "as is" and reflect the website at the time of the scan. Automated scanning cannot find every vulnerability and is not a substitute for a manual penetration test. Scan results are visible only to members of your organisation and to ClearCitadel administrators.

4. Site owners

If you believe ClearCitadel has scanned your website without permission, or you want your domain excluded from scanning, contact [email protected].

5. Accounts

Organisation owners and admins are responsible for the people they invite. We may suspend organisations or users that breach these terms.