TERMS
Terms of the Free Preliminary Analysis
These terms govern the free preliminary analysis requested through the website form of CSURFACE. By requesting the analysis, you declare your agreement with what is described below.
1. What is the Preliminary Analysis
The preliminary analysis is a free and summarized evaluation of the external attack surface associated with the provided domain. It serves as an introduction and does not replace a full security assessment, a pentest, or continuous use of the CSURFACE platform.
2. Authorization for the Analysis
By requesting the analysis, you expressly authorize CSURFACE to collect and analyze publicly accessible information about the associated digital assets, with the aim of identifying security exposures.
3. Property Declaration
By requesting the analysis, you declare to be the owner of the domain(s) and asset(s) provided, or have express authorization from the owner to request this analysis. You are solely responsible for this declaration. CSURFACE does not conduct analyses on third-party assets without such authorization.
4. Passive and Non-Intrusive Nature
The preliminary analysis is passive and non-intrusive. It relies on external observation and public information sources. During this preliminary analysis, CSURFACE does not perform destructive tests, does not attempt to bypass authentication mechanisms, does not carry out denial-of-service attacks, and does not seek to cause any unavailability of your assets.
5. Result Delivery
The preliminary report is sent to the corporate email address provided in the form within 48 business hours from the request. The timeframe may vary depending on the number of identified assets.
6. Free and No Obligation
The preliminary analysis is free. Requesting it does not generate any obligation to contract, pay, or participate in commercial meetings.
7. Data Handling
The data provided in the form and generated by the analysis are handled according to our Privacy Policy. Any corporate credentials identified during the analysis — exposed in public leaks — are presented solely for the purpose of allowing their correction.
8. Contact
Questions about these terms or about the handling of your data can be sent to [email protected].
These terms may be updated. The current version is always published on this page.