Terms of service

What Securealy is

Securealy runs a published checklist of checks against a URL and reports the result as a grade. The checklist is public at /checks. The grader runs it on demand; the monitor runs it on a schedule and on deploy. The Fix Kit is a set of documents, templates and scripts delivered as downloads. The Launch Review is a written review by Kenny Hyder. By using any of these you agree to these terms.

No warranty that a site is secure

A grade is the outcome of a fixed list of checks at one moment in time, run from outside the site unless you verify ownership or run local checks yourself. A passing check means the condition we test for was met when we tested it. It does not mean the site is secure, compliant, or free of problems we do not test for, and we never warrant that it is. A good grade is not a penetration test, a security audit or a guarantee. You are responsible for what you deploy, what you charge, and what you store.

Grading sites

You may grade any publicly reachable URL. The passive grade makes only the requests listed on the security page. You may not use the grader to attack, overload or probe a site, and you may not circumvent the daily limit. A site owner may opt out as described on that page and we honor it. If you verify ownership of a domain you do not control, we remove the verification and may close the project.

The Fix Kit

You receive a personal, non-transferable licence to use the kit for products you own or build for others. You may not resell, redistribute or publish the kit or substantial parts of it. The kit describes practices that worked in specific situations; your situation differs. Nothing in it is legal, tax or compliance advice.

The monitor

Monitor subscriptions, once open, bill monthly or annually in advance and can be cancelled from the customer portal at any time; cancellation stops the next charge and the monitor runs to the end of the paid period. Alerts are sent on a best-effort basis; do not rely on the monitor as your only notice of an outage.

Purchases and refunds

Payments are processed by Stripe. Prices are in US dollars. Your receipt comes from Stripe. The thirty-day refund policy for the kit, and the terms for the Launch Review, are on the refunds page.

Updates

The Complete kit includes twelve months of updates from the purchase date, available by re-download from your library. Other tiers are a snapshot at the time of purchase. The check catalogue and the scoring rules may change; a grade records the catalogue version it ran.

Accounts

There is no password. You sign in to the library with a code sent to the email you bought with. Keep that inbox secure; anyone who can read it can download your files.

Liability

To the extent the law allows, our total liability for anything arising from these services is limited to the amount you paid us in the twelve months before the claim. We are not liable for indirect or consequential loss, including loss arising from a grade, an alert that did not arrive, or a fix you applied.

Contact

Securealy is operated by Kenny Hyder, Hyder Media, Kauai, Hawaii. General questions: kenny@hyder.me. Security reports: security@securealy.com.