Terms of Service

These Terms of Service (the "Terms") govern your access to and use of the Warden platform and related services (the "Service"). Please read them carefully. By creating an account or using the Service, you agree to these Terms.

1.1 The Service is operated by Dab of Oppo Ltd ("we", "us", "our"), a company registered in England & Wales under company number 07730436. Warden, Warden by Veritai and Veritai are trading names of Dab of Oppo Ltd.

1.2 Our registered office is at 2 Brentford Business Centre, Commerce Road, Brentford, TW8 8LG, United Kingdom. Our VAT registration number is 387499619.

1.3 You can contact us about these Terms through the contact page at warden.veritai.ch/contact.

2.1 By creating an account or using the Service, you confirm that you accept these Terms and have the legal capacity to enter into them.

2.2 If you use the Service on behalf of an organisation, you confirm that you are authorised to accept these Terms on that organisation’s behalf, and references to "you" mean that organisation.

2.3 The Service is intended for business and professional use. It is not directed at consumers acting outside their trade, business, craft or profession, although we recognise some customers may purchase as individuals (see clause 6 on cancellation rights).

2.4 You must be at least 18 years old to use the Service.

3.1 Warden performs automated security testing against web domains you own or are authorised to test, and reports its findings together with remediation guidance and an overall security grade.

3.2 The Service includes two types of scanning:

• Standard scanning — read-only, non-destructive checks that assess your site’s configuration, headers, certificates, DNS, and similar characteristics without attempting to exploit any weakness.
• Deep Scan (active testing) — active security testing that may include techniques such as injection testing. Deep Scan is opt-in, runs only against domains you have explicitly authorised, and is described further in clause 5.

3.3 Warden does not guarantee that it will identify every vulnerability or security issue. A clean report, a high grade, or the absence of findings is not a guarantee that a site is secure, and must not be relied upon as such.

3.4 The Service is a tool to assist you. It does not constitute professional security, legal, or compliance advice, and is not a substitute for a professional security audit, penetration test, or certification assessment carried out by a qualified assessor.

3.5 Some features use artificial intelligence to generate suggested fixes, library assessments, or summaries. AI-generated output may contain errors or omissions, may not reflect your specific circumstances, and should be independently verified before you act on it. It does not constitute professional advice.

3.6 Where the Service maps findings to frameworks such as ISO 27001, OWASP, PCI DSS or SOC 2, those mappings are provided for guidance only. They do not certify compliance with any standard and do not replace assessment by an accredited auditor or certification body.

4.1 You are responsible for keeping your login credentials secure and for all activity that occurs under your account. You must notify us promptly if you believe your account has been accessed without authorisation.

4.2 You must provide accurate account and billing information and keep it up to date.

4.3 You are responsible for ensuring that everyone you permit to access your account complies with these Terms.

5.1 You may only scan a domain that you own or that you are explicitly authorised by the domain owner to test. Before running any scan, and in particular any Deep Scan, you warrant that you have all necessary rights, permissions and authority to authorise that testing.

5.2 You acknowledge that active security testing (Deep Scan) interacts with the target system and, although designed to be safe, carries inherent risk. You authorise us to perform such testing against the domains you submit and confirm you accept that risk in respect of systems you control.

5.3 You must not use the Service to:

• attack, overload, disrupt, or attempt to gain unauthorised access to any system you do not own or are not authorised to test;
• test any domain in breach of any law, regulation, or third-party right;
• circumvent or attempt to circumvent domain verification or any other security control of the Service;
• resell, sublicense, or provide the Service to third parties except as expressly permitted by your plan (for example, agency use across authorised client domains);
• reverse engineer, copy, or create derivative works from the Service except to the extent permitted by law; or
• use the Service in any way that could damage, disable, or impair it, or interfere with any other user’s use of it.

5.4 You agree to indemnify us against any losses, damages, claims, and reasonable costs we incur arising from your breach of clauses 5.1 to 5.3, including any scan you run against a domain you were not authorised to test.

5.5 We may suspend or terminate access immediately, without refund, where we reasonably believe you have breached this clause 5.

6.1 Paid plans are billed in advance on a recurring basis (monthly or as otherwise stated at checkout) through our payment processor. Your subscription renews automatically for successive billing periods until cancelled.

6.2 Prices, included domains, and scan limits are shown on the pricing page. All prices are stated exclusive or inclusive of VAT as indicated at checkout; VAT is charged where applicable.

6.3 You may cancel at any time. On cancellation, your subscription will remain active until the end of your current billing period, after which it will not renew. We do not provide refunds for the current or any previous billing period, except where required by law.

6.4 On cancellation your account is closed and you will lose access to the Service and your data. We retain your scan data for 60 days after cancellation. If you re-subscribe within that period on the same or a higher plan, we will restore your previous data. After 60 days your scan data, domain data, and reports are permanently and irreversibly deleted and cannot be recovered. We retain only the financial and transaction records we are legally required to keep (see the Privacy Policy).

6.5 We may change our prices. We will give you at least 30 days’ notice of any price increase affecting your plan, and the new price will take effect from your next billing period after that notice. If you do not accept the change, you may cancel before it takes effect.

6.6 If a payment fails, we may retry it and may suspend or downgrade your account if payment remains outstanding. You remain responsible for charges incurred before cancellation takes effect.

6.7 Consumer cancellation rights. If you are purchasing as a consumer, you have a legal right to cancel within 14 days of subscribing under the Consumer Contracts Regulations 2013. However, by subscribing and starting to use the Service within that period, you request that the Service begins immediately and acknowledge that you lose the right to cancel once the Service has been fully performed, and that you may be charged for Service supplied up to the point you cancel.

7.1 We work to keep the Service available and reliable, but we do not promise that it will be uninterrupted, error-free, or available at any particular time. Access may be affected by maintenance, updates, or factors outside our control.

7.2 We may add, change, remove, or deprecate features over time. Where a change materially reduces the core functionality of your plan, we will give you reasonable notice.

7.3 We may suspend the Service, in whole or in part, where reasonably necessary to protect the security, integrity, or lawful operation of the Service.

8.1 The Service, including its software, scan engine, reports format, branding, and content, is owned by us or our licensors and is protected by intellectual property laws. We grant you a limited, non-exclusive, non-transferable right to use the Service in accordance with these Terms.

8.2 You retain all rights in the domains, data, and materials you submit. You grant us the right to process that data to provide the Service, including running scans, generating reports, and improving the security and reliability of the Service.

8.3 Reports and scan output generated for you are yours to use for your own business purposes, including sharing with your clients or auditors. Where your plan includes white-label features, you may present reports under your own branding in accordance with those plan terms.

8.4 Our processing of personal data is described in our Privacy Policy, which forms part of these Terms.

9.1 Except as expressly stated in these Terms, and to the fullest extent permitted by law, the Service is provided "as is" and "as available", and we exclude all implied warranties, conditions, and terms.

9.2 To the fullest extent permitted by law, we are not liable for:

• any indirect, special, or consequential loss;
• loss of profit, revenue, business, goodwill, or anticipated savings;
• loss or corruption of data, except to the extent caused by our failure to take reasonable care; or
• any security incident, breach, or loss that the Service did not detect or prevent, given that no security tool can identify every issue.

9.3 Our total aggregate liability to you arising out of or in connection with these Terms in any 12-month period is limited to the total fees you paid us for the Service in that period.

9.4 Nothing in these Terms excludes or limits our liability for death or personal injury caused by our negligence, for fraud or fraudulent misrepresentation, or for any other liability that cannot be excluded or limited under English law.

10.1 You may stop using the Service and cancel at any time as set out in clause 6.

10.2 We may suspend or terminate your access with immediate effect if you materially breach these Terms (including clause 5), if required by law, or to protect the Service or other users.

10.3 On termination, your right to use the Service ends. Clauses that by their nature should survive termination (including clauses 5.4, 8, 9, and 11) continue to apply.

11.1 Changes to these Terms. We may update these Terms from time to time. Where changes are material, we will give reasonable notice (for example by email or through the Service). Continued use after the changes take effect constitutes acceptance.

11.2 Force majeure. We are not liable for any failure or delay caused by events beyond our reasonable control.

11.3 Assignment. You may not transfer your rights or obligations under these Terms without our consent. We may transfer ours to a successor to our business.

11.4 Entire agreement. These Terms, together with the Privacy Policy and the details shown at checkout, form the entire agreement between us regarding the Service.

11.5 Severability. If any provision is found to be unenforceable, the remaining provisions continue in effect.

11.6 No waiver. A failure to enforce any provision is not a waiver of our right to do so later.

11.7 Governing law and jurisdiction. These Terms and any dispute arising from them are governed by the laws of England & Wales, and the courts of England & Wales have exclusive jurisdiction, save that we may bring proceedings to protect our rights in any competent jurisdiction.