Terms of Service
These Terms of Service ("Terms") constitute a legally binding agreement between you ("User," "you," or "your") and AI QA Monkey ("Company," "we," "us," or "our"). By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by these Terms.
Last Updated: February 19, 2026
1. ACCEPTANCE OF TERMS
IMPORTANT: BY USING THIS SERVICE, YOU EXPRESSLY ACKNOWLEDGE AND AGREE THAT YOU HAVE READ, UNDERSTOOD, AND ACCEPT ALL TERMS AND CONDITIONS CONTAINED HEREIN. IF YOU DO NOT AGREE, DO NOT USE THIS SERVICE.
These Terms apply to all visitors, users, and others who access or use the Service, including but not limited to:
- Security scanning and analysis services
- Industry Security Index rankings and leaderboards
- Security reports and assessments
- Remediation services and verification badges
- All related websites, applications, and platforms
2. DEFINITIONS
- "Service" means all products, features, applications, services, technologies, and software offered by AI QA Monkey.
- "Content" means all information, data, text, software, graphics, or other materials.
- "User Content" means Content that users submit, post, or transmit to the Service.
- "Security Score" means the numerical rating (0-100) assigned based on our proprietary analysis methodology.
- "Industry Index" means the public leaderboard displaying security rankings of companies within specific industries.
- "Publicly Available Information" means information that is lawfully obtainable from public sources without circumventing security measures.
3. NATURE OF SERVICES & METHODOLOGY
3.1 Passive Analysis
Our Service performs passive, non-intrusive analysis of publicly available information. We do NOT:
- Attempt to bypass, circumvent, or penetrate any security measures
- Access any systems, networks, or data without authorization
- Exploit any vulnerabilities discovered during analysis
- Perform any active intrusion testing or penetration testing
- Access non-public areas, login-protected pages, or private systems
3.2 Public Information Analysis
All analysis is based exclusively on publicly available information, including but not limited to:
- SSL/TLS certificate information (publicly visible)
- HTTP response headers, including CORS, Permissions-Policy, COOP, and CORP (publicly transmitted)
- DNS records, including SPF, DMARC, and CNAME records for subdomain takeover detection (publicly queryable)
- WHOIS data (publicly accessible)
- robots.txt and security.txt files (publicly published)
- Standard port availability (publicly detectable)
- API endpoint availability such as Swagger, OpenAPI, and GraphQL (publicly accessible URLs)
- Cloud storage references in page source code (AWS S3, Azure Blob, Google Cloud Storage)
- HTTP/2 protocol support (publicly negotiable)
3.3 Opinion & Analysis Disclaimer
IMPORTANT: Security Scores, grades, rankings, and all assessments constitute our OPINION based on our proprietary methodology. They are expressions of subjective analysis and professional judgment, NOT statements of absolute fact. Different methodologies may yield different results.
4. INDUSTRY SECURITY INDEX
4.1 Public Rankings
The Industry Security Index publishes public rankings of companies' security postures. By using the Service or by being included in an Index, you acknowledge and agree that:
- Rankings are based on analysis of publicly available information only
- Rankings represent our opinion and professional assessment
- Rankings may change at any time based on updated analysis
- Publication of rankings serves a legitimate public interest in cybersecurity awareness
4.2 Fair Comment & Public Interest Defense
All security assessments, scores, and rankings constitute fair comment on matters of public interest. Cybersecurity posture of businesses handling customer data is a matter of legitimate public concern. Our assessments are:
- Based on true, publicly available facts
- Presented as opinion and professional analysis
- Made in good faith for public benefit
- Protected expression under applicable free speech laws
4.3 Dispute & Correction Process
Companies may dispute their ranking or request corrections by contacting us at disputes@aiqamonkey.com. We will review disputes in good faith within 10 business days. However, we reserve sole discretion over:
- Our methodology and scoring algorithms
- Final determination of scores and rankings
- Publication decisions
5. AUTHORIZATION & USER RESPONSIBILITIES
5.1 Individual Scans
When submitting a domain for individual scanning, you represent and warrant that:
- You own or have explicit written authorization to analyze the target domain
- Your use complies with all applicable laws and regulations
- You will not use results for malicious purposes
5.2 Industry Index Entries
For companies included in Industry Index rankings, no authorization is required because:
- Analysis is limited to publicly available information
- Publication serves legitimate public interest
- Rankings constitute protected opinion and commentary
5.3 Prohibited Uses
You agree NOT to use the Service to:
- Violate any applicable law, regulation, or third-party rights
- Plan, facilitate, or execute any unauthorized access
- Harass, defame, or harm any person or entity
- Interfere with or disrupt the Service or servers
- Attempt to reverse-engineer our methodology or algorithms
- Resell or redistribute reports without authorization
6. COMPREHENSIVE DISCLAIMER OF WARRANTIES
THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT ANY WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED.
To the fullest extent permitted by applicable law, we expressly disclaim all warranties, including but not limited to:
- Accuracy: We do not warrant that scores, rankings, or assessments are accurate, complete, or error-free
- Completeness: Our analysis may not identify all vulnerabilities or security issues
- Reliability: Results are a snapshot in time and may include false positives or false negatives
- Fitness: We disclaim any warranty of fitness for a particular purpose
- Non-Infringement: We do not warrant that the Service does not infringe third-party rights
- Availability: We do not guarantee uninterrupted or error-free service
- Security: While we implement reasonable security measures, no system is completely secure
YOU EXPRESSLY ACKNOWLEDGE AND AGREE THAT USE OF THE SERVICE IS AT YOUR SOLE RISK.
7. LIMITATION OF LIABILITY
CRITICAL: READ THIS SECTION CAREFULLY AS IT LIMITS OUR LIABILITY TO YOU.
7.1 Exclusion of Damages
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL AI QA MONKEY, ITS OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, PARTNERS, SUPPLIERS, OR LICENSORS BE LIABLE FOR:
- Any indirect, incidental, special, consequential, or punitive damages
- Any loss of profits, revenue, data, goodwill, or business opportunities
- Any damages arising from reliance on scores, rankings, or assessments
- Any damages resulting from unauthorized access to or alteration of your transmissions or data
- Any damages arising from third-party claims against you
- Any reputational harm allegedly resulting from published rankings
- Any business losses allegedly resulting from security assessments
7.2 Cap on Liability
OUR TOTAL CUMULATIVE LIABILITY FOR ANY AND ALL CLAIMS ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICE SHALL NOT EXCEED THE GREATER OF: (A) THE AMOUNT YOU PAID US IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM, OR (B) ONE HUNDRED US DOLLARS ($100).
7.3 Acknowledgment
YOU ACKNOWLEDGE THAT THIS LIMITATION OF LIABILITY IS AN ESSENTIAL ELEMENT OF THE BARGAIN BETWEEN THE PARTIES AND THAT THE SERVICE WOULD NOT BE PROVIDED WITHOUT SUCH LIMITATIONS.
8. INDEMNIFICATION
You agree to defend, indemnify, and hold harmless AI QA Monkey and its officers, directors, employees, contractors, agents, licensors, suppliers, successors, and assigns from and against any and all claims, damages, obligations, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from or relating to:
- Your access to or use of the Service
- Your violation of these Terms
- Your violation of any third-party rights, including intellectual property rights
- Your violation of any applicable law or regulation
- Any claim that your use of the Service caused damage to a third party
- Any unauthorized scanning or analysis you conduct using our Service
- Any dispute between you and a third party regarding rankings or assessments
This indemnification obligation will survive termination of these Terms and your use of the Service.
9. INTELLECTUAL PROPERTY
9.1 Our Property
The Service, including all content, features, functionality, software, methodologies, algorithms, trade secrets, and technology, is owned by AI QA Monkey and protected by copyright, trademark, patent, trade secret, and other intellectual property laws.
9.2 Limited License
We grant you a limited, non-exclusive, non-transferable, revocable license to access and use the Service for your personal or internal business purposes, subject to these Terms.
9.3 Restrictions
You may NOT:
- Copy, modify, or create derivative works of any part of the Service
- Reverse engineer, decompile, or disassemble any software
- Remove any copyright, trademark, or proprietary notices
- Use our trademarks without written permission
- Scrape, harvest, or collect data from the Service
10. PAYMENT, REFUNDS & DIGITAL GOODS
10.1 Digital Nature of Service
Our services constitute digital goods and services that provide immediate access to information and analysis. You acknowledge that:
- Reports and assessments are delivered electronically
- Value is received immediately upon delivery
- Digital goods cannot be "returned" in any meaningful sense
10.2 30-Day Score Improvement Guarantee
REFUND POLICY: If you purchased a premium security report and followed the remediation steps provided, but your Security Score did not improve within 30 days of the original purchase date, you are entitled to a full refund. To request a refund, contact us at support@aiqamonkey.com with your purchase receipt and a follow-up scan showing no score improvement.
This guarantee is subject to the following conditions:
- The refund applies only if the remediation steps outlined in the purchased report were correctly implemented.
- The guarantee does not cover score decreases or stagnation caused by new vulnerabilities or issues introduced after the original scan date (e.g., new plugins, configuration changes, or third-party updates).
- The guarantee does not cover score impacts resulting from incorrect or partial implementation of the recommended fixes.
- A follow-up scan must be performed on the same domain using our Service to verify the score comparison.
- Refund requests must be submitted within 30 calendar days of the original purchase date.
10.3 All Other Sales
Outside of the 30-Day Score Improvement Guarantee described above, all sales of digital goods are final. Refunds are not provided for change of mind, duplicate purchases, or failure to use the Service.
10.4 Chargeback Policy
Fraudulent chargebacks are a form of theft. We reserve the right to pursue all legal remedies against users who initiate fraudulent chargebacks, including reporting to credit bureaus, collection agencies, and law enforcement.
11. DISPUTE RESOLUTION & ARBITRATION
PLEASE READ THIS SECTION CAREFULLY – IT AFFECTS YOUR LEGAL RIGHTS.
11.1 Informal Resolution
Before initiating any formal dispute resolution, you agree to first contact us at legal@aiqamonkey.com and attempt to resolve any dispute informally for at least 30 days.
11.2 Binding Arbitration
Any dispute, controversy, or claim arising out of or relating to these Terms or the Service shall be resolved by binding arbitration administered by a recognized arbitration institution under its applicable rules. The arbitration shall be conducted in English.
11.3 Class Action Waiver
YOU AGREE THAT ANY ARBITRATION OR PROCEEDING SHALL BE LIMITED TO THE DISPUTE BETWEEN US INDIVIDUALLY. YOU WAIVE ANY RIGHT TO:
- Participate in a class action lawsuit or class-wide arbitration
- Participate in claims brought in a representative capacity
- Consolidate claims with those of other individuals
11.4 Exceptions
Either party may seek injunctive or equitable relief in a court of competent jurisdiction for intellectual property infringement or violations of confidentiality obligations.
12. GOVERNING LAW & JURISDICTION
These Terms shall be governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to its conflict of law provisions. Any permitted legal action shall be brought exclusively in the federal or state courts located in Delaware, and you consent to personal jurisdiction in such courts.
13. DMCA & TAKEDOWN PROCEDURES
If you believe that content on our Service infringes your copyright, please submit a DMCA notice to our designated agent at dmca@aiqamonkey.com with:
- Identification of the copyrighted work
- Identification of the allegedly infringing material
- Your contact information
- A statement of good faith belief
- A statement of accuracy under penalty of perjury
- Your physical or electronic signature
Note: Security scores and rankings based on publicly available information are NOT subject to DMCA takedown as they constitute our original analysis and commentary.
14. COMMUNICATIONS & NOTIFICATIONS
14.1 Service Communications
We may send informational communications regarding security assessments to publicly available contact information. Such communications are:
- Informational in nature, not commercial solicitation
- Related to matters of public interest (cybersecurity)
- Sent in good faith to promote security awareness
14.2 Opt-Out
Recipients may opt out of future communications by contacting optout@aiqamonkey.com. Opting out of communications does not affect inclusion in public rankings.
15. MODIFICATION OF TERMS
We reserve the right to modify these Terms at any time. Changes are effective immediately upon posting. Your continued use of the Service after any modifications constitutes acceptance of the updated Terms. We encourage you to review these Terms periodically.
16. TERMINATION
We may terminate or suspend your access to the Service immediately, without prior notice or liability, for any reason, including breach of these Terms. Upon termination:
- Your right to use the Service ceases immediately
- All provisions that should survive termination shall survive
- We may delete your account and associated data
17. SEVERABILITY
If any provision of these Terms is held to be invalid, illegal, or unenforceable, such provision shall be modified to the minimum extent necessary to make it valid, legal, and enforceable while preserving its intent. If modification is not possible, the provision shall be severed, and the remaining provisions shall continue in full force and effect.
18. ENTIRE AGREEMENT
These Terms, together with our Privacy Policy and any other legal notices published on the Service, constitute the entire agreement between you and AI QA Monkey regarding the Service and supersede all prior agreements and understandings, whether written or oral.
19. WAIVER
No waiver of any term or condition shall be deemed a further or continuing waiver of such term or any other term. Our failure to assert any right or provision under these Terms shall not constitute a waiver of such right or provision.
20. CONTACT INFORMATION
For questions about these Terms, please contact us at:
- General Inquiries: support@aiqamonkey.com
- Legal Matters: legal@aiqamonkey.com
- Ranking Disputes: disputes@aiqamonkey.com
- DMCA Notices: dmca@aiqamonkey.com