Terms of Service

These terms cover your use of bleek.dev — the free scanner at /scan, any paid Deep Scan or Human Audit, and the marketing pages. Plain language, no clauses designed to surprise you later.

Who can use the scanner

• You must own or have permissionto scan the URL you submit. Free scan is read-only and gentle, but it still hits your target. Don't use it on apps you don't own.
• Deep Scan sends synthetic test payloads (one unbalanced quote, one XSS canary string, one path-traversal attempt). You must explicitly opt in with the consent checkbox. Same rule: only on your own apps.
• Don't use bleek to enumerate vulnerabilities in apps you don't own — that's us being clear about Computer Fraud and Abuse Act / equivalents.

What we promise

• The free scanner is provided as-is. No uptime SLA. We work hard to keep it running but make no guarantees on the free tier.
• Paid scans (Deep Scan, Human Audit) come with a written deliverable and our actual time. If we can't deliver, we refund — see below.

Refunds

• Deep Scan: full refund if the scan fails to run or returns an error, within 7 days of purchase.
• Human Audit:if we determine your app doesn't need an audit during the scoping call, we refund 100% before any work starts. After work starts, refunds are case-by-case.

Liability

bleek is not liable for indirect or consequential damages from using our scanner or reports. Total liability is capped at what you paid us in the past 12 months. If you didn't pay us anything, that's the cap.

Findings are starting points for your own engineering review — we flag what we see from the outside. We can't guarantee a perfect finding rate (no scanner can). Treat findings as inputs to your security process, not the final word.

Termination

We can stop serving you (free or paid) if you abuse the scanner — excessive traffic, scanning targets you don't own, attempting to bypass the consent gate. We'll refund unused paid balance.

Governing law

Kuwait law governs these terms. Disputes go to Kuwait courts unless we agree otherwise in writing.

Changes to these terms

We update this page when something changes. The “Last updated” date at the top reflects the most recent change. Continued use after an update means you accept the new version. If you don't, stop using the site and email hello@bleek.dev.