← Back to home

Terms of Service

Last updated: 2 September 2026

These Terms of Service (the “Terms”) form a binding agreement between you and ArrankaGo Consulting, a division of ArrankaGo LLC, a limited liability company organised in the State of Delaware, USA (“ArrankaGo Consulting”, “we”, “us”, or “our”). They govern your access to and use of the ArrankaGo Consulting website, its online security tools, its subscription plans, and any fixed-scope investigation we perform for you (together, the “Service”). Please read them carefully. If you are entering into these Terms on behalf of a company or other legal entity, you represent that you have authority to bind that entity, and “you” refers to that entity.

1. Definitions and acceptance

In these Terms: “User”, “you”, or “your” means the person or entity that accesses or uses the Service. “Content” means reports, scores, findings, labels, and other output the Service generates. “Target” means any domain, host, IP address, account, or system you submit to, or ask us to assess through, the Service. “Free Tier” means Service features offered at no charge. “Paid Plan” means a subscription or one-time purchase billed through our payment processor. “Investigation” means a fixed-scope, written-authorised security assessment engagement.

By accessing or using the Service, clicking to accept, or purchasing a Paid Plan, you agree to these Terms and to our Privacy Policy, which is incorporated by reference. If you do not agree, do not access or use the Service.

2. The Service

The Service reads publicly available signals about a Target you submit (for example DNS records, TLS certificate metadata, HTTP response headers, and public Certificate Transparency logs) and combines them with responses from third-party intelligence sources (for example Have I Been Pwned, XposedOrNot, Shodan, VirusTotal, AlienVault OTX, urlscan.io, the National Vulnerability Database, and abuse.ch resources) where those integrations are configured. This is a passive, external posture assessment based on public and third-party signals. It also runs demonstrations of our tools on bundled, inert sample data.

Except for an Investigation that you have authorised in writing and that we have agreed to in writing, we do not perform exploitation, penetration testing, brute-forcing, credential attacks, port scanning beyond publicly exposed service banners, or any intrusive testing, and we do not use non-public data feeds. An Investigation is performed only within a scope, target list, timeframe, and rules of engagement agreed in writing by both parties before work begins, and only against systems you have represented in writing that you are authorised to test.

3. Acceptable use and prohibitions

• You may submit as a Target only a domain, host, address, or account that you own or are otherwise authorised to assess. You are solely responsible for obtaining and maintaining that authorisation, and you represent and warrant that you have it for every Target you submit.
• You may not use the Service to attack, disrupt, overload, degrade, or gain unauthorised access to any system, network, or account, or to facilitate any unlawful activity.
• You may not use output of the Service to target, harass, or harm any third party, or to make representations about a third party's security that the output does not support.
• You may not attempt to defeat, circumvent, or probe rate limits, access controls, or the Service's own infrastructure, or attempt to reverse engineer, scrape, or copy the Service except as permitted by applicable law.
• You may not resell, sublicense, white-label, or otherwise commercially redistribute the Free Tier as your own product or service.
• You may not use the Service in violation of any applicable law, including export control, sanctions, computer fraud, and unauthorised access laws in your jurisdiction and in the jurisdiction of the Target.

We may suspend or terminate access, without liability, if we reasonably believe you have breached this section or created risk for us, for a Target, or for a third party.

4. Disclaimer of warranties

The Service and all Content are provided “as is” and “as available”, without warranties of any kind, whether express, implied, or statutory. To the maximum extent permitted by applicable law, we disclaim all implied warranties, including merchantability, fitness for a particular purpose, title, and non-infringement.

Security posture is a moving target and public signals are incomplete by nature. We do not warrant that Content is accurate, complete, current, or error-free, that the Service will be uninterrupted or secure, or that any issue will be detected. A “clean”, passing, or high score is not a certification that a system is secure, and the absence of a finding is not a guarantee that no vulnerability exists. We are not a certification body and issue no security certification (such as SOC 2 or ISO 27001) through the Service. Where we cannot verify a signal, we label it as “not evaluable” rather than implying that it passed. You remain solely responsible for your own security decisions and for validating any Content before relying on it.

Content that originates with third-party intelligence providers is supplied by those providers and is subject to their accuracy, coverage, and availability. When a provider is unavailable or not configured, we say so plainly and show no data rather than fabricating any.

5. Limitation of liability

To the maximum extent permitted by applicable law, in no event will ArrankaGo Consulting, ArrankaGo LLC, or their officers, members, employees, or agents be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of profits, revenue, data, goodwill, or business, arising out of or related to the Service, whether based in contract, tort (including negligence), strict liability, or any other theory, even if advised of the possibility of such damages.

To the maximum extent permitted by applicable law, our total aggregate liability arising out of or related to the Service will not exceed the greater of the total amounts you paid us for the Service in the three (3) months immediately preceding the event giving rise to the claim, or, for the Free Tier where you paid nothing, USD 0. Some jurisdictions do not allow the exclusion or limitation of certain damages, so parts of this section may not apply to you, and nothing in these Terms limits liability that cannot be limited under applicable law.

6. Indemnification

You agree to indemnify, defend, and hold harmless ArrankaGo Consulting, ArrankaGo LLC, and their officers, members, employees, and agents from and against any claim, demand, action, loss, liability, damage, cost, or expense (including reasonable legal fees) arising out of or related to: (a) your use of the Service or any Content; (b) any Target you submit or ask us to assess, including any claim that you lacked authorisation to assess it; (c) your breach of these Terms or of any applicable law; or (d) your infringement of any third-party right. We may, at our option, assume the exclusive defence and control of any matter subject to indemnification, and you agree to cooperate. This obligation survives termination of these Terms and your use of the Service.

7. Intellectual property

The Service, including its software, scoring logic, methodology, text, design, and trademarks, is owned by ArrankaGo LLC or its licensors and is protected by intellectual property laws. We grant you a limited, non-exclusive, non-transferable, revocable licence to use the Service for your internal business purposes in accordance with these Terms. No other rights are granted.

Certain tools we operate or demonstrate incorporate open-source components (for example under the MIT licence). Those components remain governed by their own licences, and nothing in these Terms restricts your rights under an applicable open-source licence. Content we generate about your own Target may be used by you for your internal security purposes; you may not present our methodology or scoring as your own product.

8. Payments, subscriptions, trial, refunds, and cancellation

Paid Plans and Investigations are billed through Stripe, our third-party payment processor. Prices are shown on our Pricing page and are in US dollars unless stated otherwise. You authorise us and Stripe to charge the payment method you provide for the applicable fees, including recurring subscription fees, and any applicable taxes. Card details are entered on Stripe's hosted checkout and are never received or stored by us.

Subscriptions include a 7-day trial where offered. Unless you cancel before the trial ends, the subscription converts to a paid term and your payment method is charged the then-current fee. Subscriptions renew automatically for successive terms until cancelled. You may cancel at any time from your account or by contacting us; cancellation stops the next renewal and takes effect at the end of the current paid term, and you retain access until then. Except where required by applicable law or expressly stated, fees already paid are non-refundable and cancelling does not entitle you to a refund of the current term. Investigation deliverables, scope, fees, and timelines are agreed in writing before work begins, and Investigation fees are non-refundable once work has started except as that written agreement provides. We may change prices prospectively; a price change applies to your next renewal after we notify you.

9. Dispute resolution and arbitration

Please read this section carefully. It affects how disputes are resolved and, where enforceable, requires individual arbitration instead of a court or jury trial.

The parties will first try in good faith to resolve any dispute informally by contacting earbona@arrankago.com. If a dispute is not resolved within thirty (30) days, then, to the maximum extent permitted by applicable law, any dispute arising out of or relating to these Terms or the Service will be resolved by final and binding individual arbitration, administered by a recognised arbitration provider under its commercial rules, and not by a court or jury. Each party waives any right to a jury trial and to participate in a class, collective, or representative action, and disputes will be arbitrated only on an individual basis.

The enforceability of arbitration agreements and class-action waivers varies by jurisdiction, and some of these provisions may not apply to you or may be limited by mandatory law that grants you non-waivable rights. Where individual arbitration or the class-action waiver is held unenforceable for a given claim, that claim will proceed in the courts identified in Section 10, and the remainder of this section stays in effect. Nothing here prevents either party from seeking injunctive relief in a court of competent jurisdiction to protect its intellectual property or confidential information.

10. Governing law and venue

These Terms and any dispute arising out of them or the Service are governed by the laws of the State of Delaware, USA, without regard to its conflict-of-law rules, and, where applicable to arbitration, by the US Federal Arbitration Act. Subject to Section 9, the state and federal courts located in Delaware will have jurisdiction, and you consent to that venue, except where mandatory law in your jurisdiction requires otherwise.

11. International users and data transfer

The Service is operated from the United States. If you access it from outside the United States, you understand and consent that data you submit is transferred to, processed, and stored in the United States and other countries where we or our providers operate, which may have data-protection laws different from those in your country. Our Privacy Policy describes what we process and explains rights that may apply to you under laws such as the EU and UK GDPR and the California Consumer Privacy Act (CCPA). Where such laws grant you non-waivable rights, nothing in these Terms limits them.

12. General

Force majeure. We are not liable for any delay or failure to perform caused by events beyond our reasonable control, including outages of third-party providers, network or infrastructure failures, acts of government, or natural events.

Severability. If any provision of these Terms is held invalid or unenforceable, that provision will be limited or removed to the minimum extent necessary, and the remaining provisions will stay in full force.

Assignment. You may not assign or transfer these Terms without our prior written consent. We may assign them to an affiliate or in connection with a merger, acquisition, or sale of assets.

Changes to these Terms. We may update these Terms. Material changes will be reflected by the “last updated” date above and, where required, by additional notice. Your continued use of the Service after a change takes effect means you accept the updated Terms.

Notices and entire agreement. We may provide notices to you by posting on the Service or by email. These Terms, together with the Privacy Policy and any written Investigation agreement, are the entire agreement between you and us regarding the Service and supersede prior understandings. Our failure to enforce a provision is not a waiver.

Contact. Questions about these Terms: earbona@arrankago.com.