Terms of use

1. What the service is

A free tool that checks the security of a website you control, and a free check of any domain’s public SPF and DMARC records. It runs nine read-only checks (security headers, the TLS certificate, cookies, SPF and DMARC, open redirects, and safe probes for reflected XSS, SQL injection errors, access control and secrets exposed in scripts) and reports only what it could prove, with what to change. It is free: there is no paid plan, no card and no trial. We may change, pause or stop the service at any time.

2. You may only scan what you control

• You may scan a website only if you own it or have the owner’s permission to test it. Before any scan we ask for proof: a file on the site or a DNS record. Proving it once lets you scan that site again.
• You confirm your authorization each time you start a scan. Scanning a site you are not authorized to test may be illegal where you or the site are.
• You must not use the service to attack, overload or probe systems, to get around our checks, or to scan on someone else’s behalf without their permission.
• We may suspend or delete an account that breaks these rules, and we may refuse or stop any scan.
• The SPF/DMARC check reads records that are public by design; it sends nothing to the website and needs no proof.

3. What a scan does to your site

A scan sends a limited number of read-only requests (GET, HEAD, OPTIONS) from our server, identified by the user agent iloveprotection/1.0 (+https://iloveprotection.com; owner-authorized scan). Requests that change data are refused in our code. A scan stops after three minutes at most. Your security tools or your hosting provider may still notice it and raise an alert; if your provider requires notice before a security test, it is your responsibility to give it.

4. What a report is, and is not

A report lists what these checks could prove at the time of the scan. A report with no findings means these checks found nothing; it does not mean your site has no weaknesses. Reports are information, not a security audit, certification or guarantee. What you change on your site is your decision and your responsibility.

5. Your account and your data

You sign in with a one-time link sent to your email; keep access to that inbox. You can download or delete your data at any time from your account page. How we handle personal data is described in the privacy policy.

6. Liability

The service is provided free of charge and “as is”. To the extent the law allows, we exclude liability for damage arising from its use, from reports, or from an interruption of the service. Liability for intent and gross negligence remains as provided by law.

7. Changes to these terms

We may change these terms. We update the date above and tell signed-in users about meaningful changes; if you keep using the service afterwards, the new terms apply.

8. Law and courts

Swiss law applies. The courts of the canton of Vaud have jurisdiction, subject to mandatory rules that protect consumers where they live.

9. Contact

hello@iloveprotection.com