Terms of use

These terms apply to the free scan on websecureaudit.de and to the customer portal on app.websecureaudit.de.

1. Provider

2. What the service does

The service scans a website automatically for technical characteristics in the areas of security, data protection, findability, availability and statutory mandatory disclosures, and produces a report from them.

The report is not legal advice. It names technical observations and classifies them. Whether a finding is legally relevant in an individual case is a matter for legal advice – we provide none.

Nor is the report a guarantee of security. An automated scan from outside finds what it looks for. A report without findings does not mean a site is secure. The effort and cost figures given are ranges for budgeting and not an offer.

3. Who may commission a scan

You may only have websites scanned that belong to you or for which you have the owner's authorisation. That is not a formality: a scan puts load on someone else's system.

Technically, therefore:

• For the free scan your email address must belong to the domain being scanned – otherwise no report is sent.
• In the portal, proof of domain ownership is mandatory before a domain may be scanned repeatedly.

Scanning third-party sites without authorisation is prohibited and may be a criminal offence.

4. Account

• An account is not needed for the free single scan.
• The details given at registration must be accurate; the email address must be yours.
• You keep your password secret and tell us if you suspect misuse. We recommend a password you use nowhere else.
• An account is personal. Passing sign-in details to third parties is not permitted.
• You can delete your account yourself at any time. We may block an account that breaches these terms; for minor breaches we point this out beforehand.

5. Stored access credentials

If you store access to your content or shop system in the portal, the data processing agreement applies in addition. You warrant that you are entitled to grant this access.

We expressly recommend an application password instead of the administrator password: it can be revoked on its own and opens only the programming interface. How we protect the access is described in section 5 of the privacy policy.

6. Fair use

The service is designed for normal use. Volume limits apply – one free scan per domain per 24 hours, plus a cap per hour and sender against bursts of requests. Not permitted are automated bulk queries, attempts to circumvent the limits, and any use that impairs operation or third-party systems.

7. Availability

The service is provided without guaranteed availability. Maintenance, faults and further development may cause interruptions. The free scan is a voluntary service; there is no entitlement to it.

8. Prices and allowance

One scan per domain per 24 hours is free. That is set deliberately: every scan puts load on someone else's site and costs us compute, and scanning the same domain five times a day yields almost the same result five times.

If that is not enough, you can buy 5 further scans for 4,90 €. One-off, no subscription, no sign-up. They apply to the domain you bought them for and do not expire. You can repeat the purchase as often as you like.

The price is a final price. Under § 19 UStG no value added tax is shown.

Payment is made through PayPal. The contract comes into being when PayPal confirms the payment; the scans are available immediately afterwards. On withdrawal see the notice of withdrawal.

If a paid scan fails for a reason on our side, it is credited back – automatically, without you having to get in touch.

Paid services beyond this – the system audit with access, for instance – come into being only through a separate agreement in text form stating scope and price beforehand. Using the portal alone incurs no costs.

9. Rights in the reports

The report on your domain belongs to you. You may use it freely, pass it on and present it to third parties, your agency or service provider for example. The underlying software and the finding texts remain with the provider.

10. Liability

We are liable without limitation for intent and gross negligence and for damage arising from injury to life, body or health. In the case of simple negligence we are liable only for breach of an obligation whose fulfilment makes proper performance possible in the first place and on whose observance you may regularly rely, and limited in amount to the foreseeable damage typical of the contract. Liability under the German Product Liability Act remains unaffected.

We are not liable for decisions you take on the basis of a report – see section 2.

11. Changes

We may change these terms if the service or the legal situation changes. We inform account holders of material changes by email at least 14 days in advance. If you object, you can delete your account before the changes take effect.

12. Final provisions

German law applies. If you are a consumer, the mandatory consumer protection provisions of your country of residence remain unaffected. We are neither obliged nor willing to take part in dispute resolution proceedings before a consumer arbitration board.

As of: 22. August 2026. Related pages: Privacy policy · Data processing · Legal notice