Terms of Service

ShipSafe runs a limited set of automated checks against publicly reachable surfaces of web applications and reports what those checks detect. Where you have proved ownership of an application, some checks additionally send requests to that application’s own backend.

“We”, “us” and “ShipSafe” mean the operator of shipsafe.world. “You” means the person or organisation using the service.

You represent and warrant that, for each application you submit to ShipSafe, you either own that application or hold written authorisation from its owner to have it tested. You are solely responsible for the accuracy of that representation.

You must not use ShipSafe to identify targets, to test an application you do not control, or to gather information about a third party’s systems.

You will indemnify and hold ShipSafe harmless against any claim, demand, proceeding, loss, or cost (including reasonable legal fees) arising from your submission of an application that you were not authorised to have tested.

ShipSafe does not constitute a penetration test, a security audit, a code review, or a certification of any kind. No result should be read as a statement that an application is secure.

An absence of findings means only that the specific checks we ran did not detect the specific issues they look for, at the time they ran. It does not mean an application has no vulnerabilities, and it does not mean our checks are complete or correct.

The service is provided “as is” and “as available”, without warranties of any kind, whether express or implied, including any implied warranty of merchantability, fitness for a particular purpose, or non-infringement.

To the maximum extent permitted by law, our total aggregate liability arising out of or relating to these Terms or the service is limited to the greater of (a) the total fees you paid us in the twelve months before the event giving rise to the claim, or (b) US$50.

We are not liable for indirect, incidental, special, consequential, or exemplary damages, nor for lost profits, lost revenue, lost data, or business interruption, however caused.

Findings, explanations, and suggested fixes are provided for information. You are responsible for deciding whether and how to act on them, for testing any change before applying it to a production system, and for the consequences of applying it.

Suggested fixes are generated to fit common patterns and may not fit yours. Read them before you run them.

You must not:

• submit an application you do not own or have written authorisation to test;
• use ShipSafe to find, survey, or profile third-party systems;
• attempt to reverse-engineer, replicate, or resell our checks or raw output;
• circumvent rate limits, plan limits, or the ownership verification requirement;
• use the service to break any applicable law, in your jurisdiction or the target’s.

We may refuse, suspend, or terminate any scan, account, or target at our discretion and without notice. We maintain a permanent do-not-scan list, and a domain on that list will not be scanned even if you are a paying customer and even if you own it. You can add any domain to it at /scanner.

Paid plans are sold through Lemon Squeezy, which acts as merchant of record and is the seller for your purchase. Their terms govern the transaction, and they handle applicable taxes.

Plans renew automatically until cancelled. You can cancel at any time and keep access until the end of the paid period. If ShipSafe has not worked for you, email us within 30 days of a charge and we will refund it — there is no form and no argument.

We may update these Terms. The version in force is shown at the top of this page and recorded with every scan. Material changes will be emailed to account holders at least 14 days before they take effect.

These Terms are governed by the laws of India, and the courts of Bengaluru, Karnataka have exclusive jurisdiction over any dispute arising from them.

hello@shipsafe.world for anything about these Terms. scanner@shipsafe.world if you have found our scanner in your logs.