Terms of Service

Last updated: April 2026

1. Service Description

sniffed (“the Service”) is a software-as-a-service platform that provides automated, AI-driven penetration testing and security analysis for web applications and domains. The Service is operated by sniffed (“we”, “us”, or “our”).

2. Eligibility and Account Registration

You must be at least 18 years old and have the legal authority to enter into these terms. When you create an account, you agree to provide accurate and complete information. You are responsible for maintaining the security of your account credentials and for all activity that occurs under your account.

3. Nature of Security Testing

The Service performs active security testing against your targets. This includes sending HTTP requests, probing endpoints, scanning ports, and analysing responses. This activity will generate network traffic and may place additional load on your systems.

You acknowledge that you are responsible for ensuring your infrastructure can handle this activity, and that you have informed any relevant hosting providers or network administrators that authorised security testing will be conducted. We take care to avoid destructive actions, but the nature of penetration testing means that unexpected behaviour is possible.

4. Acceptable Use

You may only use the Service to scan domains and applications that you own or have explicit, written authorisation to test. By initiating a scan, you represent and warrant that:

  • You own the target domain or have obtained written permission from the owner.
  • The scanning activity does not violate any applicable laws or regulations.
  • You have completed our domain verification process for each target.

You may not use the Service to attack, disrupt, or gain unauthorised access to any system you do not own or have permission to test. Violation of this policy will result in immediate account termination and may be reported to relevant authorities.

5. Subscriptions, Credits, and Billing

Access to the Service requires a paid subscription. Subscriptions are billed monthly via Stripe. Each plan includes a fixed number of credits that refill each billing period. Unused credits roll over up to a cap of 2x your plan's monthly allowance. Credits have no cash value and are non-transferable. Surface checks are free and do not consume credits.

6. Intellectual Property

The Service, including its software, design, and documentation, is owned by sniffed and protected by intellectual property laws. Scan results and findings generated for your targets belong to you. We do not claim ownership over your data or scan results.

7. Data Handling and Security

We take the security of your data seriously. Credentials you provide for authenticated testing are encrypted at rest and only decrypted within isolated sandbox containers during scan execution. Please refer to our Privacy Policy for details on how we collect, store, and process your data.

8. AI-Generated Output

The Service uses artificial intelligence to conduct security analysis and generate findings. While we design our systems to be thorough and accurate, AI-generated output is inherently probabilistic and may contain inaccuracies, false positives, or miss certain vulnerabilities entirely.

You should treat all findings as recommendations that require professional review before acting upon them. sniffed is not liable for any decisions, actions, or consequences resulting from reliance on AI-generated output without independent verification.

9. Disclaimer of Warranties

The Service is provided on an “as is” and “as available” basis. We do not guarantee that the Service will identify all vulnerabilities in your systems. Automated security testing is a complement to, not a replacement for, a comprehensive security programme. We make no warranties, express or implied, regarding the completeness, accuracy, or reliability of scan results.

10. Limitation of Liability

To the maximum extent permitted by law, sniffed shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from or related to your use of the Service. Our total liability for any claim arising from these terms shall not exceed the amount you paid to us in the twelve months preceding the claim.

11. Indemnification

You agree to indemnify and hold harmless sniffed, its officers, employees, and agents from any claims, damages, losses, or expenses (including reasonable legal fees) arising from your use of the Service, your breach of these terms, or any unauthorised testing you conduct through the platform. This includes any claims brought by third parties whose systems you scan without proper authorisation.

12. Termination

You may cancel your subscription at any time through the billing portal. We reserve the right to suspend or terminate your account if you violate these terms, including the acceptable use policy. Upon termination, your access to the Service will cease and your data will be retained for 30 days before deletion, unless otherwise required by law.

13. Governing Law

These terms are governed by and construed in accordance with the laws of England and Wales. Any disputes arising from or relating to these terms or your use of the Service shall be subject to the exclusive jurisdiction of the courts of England and Wales.

14. Changes to These Terms

We may update these terms from time to time. Material changes will be communicated via email or a prominent notice on the platform. Your continued use of the Service after changes take effect constitutes acceptance of the revised terms.

15. Contact

If you have questions about these terms, contact us at hello@sniffed.ai.