Terms of Service

Welcome to Calmcomet.

These Terms of Service explain the rules for using calmcomet.co and the website security scanning services provided by Calmcomet.

By submitting a website for scanning or using our services, you agree to these Terms. If you do not agree, please do not use our services.

1. About Calmcomet

Calmcomet helps SaaS founders, developers, and website owners find security holes in their websites.

Our services include free website security scans, identification of publicly exposed information, security reports, and recommendations for fixing identified issues.

Our goal is to help website owners understand what their applications may be exposing and how to improve their security.

Calmcomet does not guarantee that any website is completely secure or free from vulnerabilities.

2. Who Can Use Calmcomet

You must be at least 18 years old to use our services.

If you use Calmcomet on behalf of a business or organization, you confirm that you have permission to act on its behalf.

You agree to provide accurate information when submitting a website or requesting a security report.

3. Website Ownership and Authorization

You may request a security scan only for websites you own, manage, or have explicit permission to assess.

By submitting a website, you confirm that you have the necessary authorization.

We may request additional information to verify website ownership before performing certain security checks or sharing sensitive findings.

Providing a website URL or business email address does not automatically prove ownership.

We reserve the right to reject scan requests if we cannot verify authorization or believe a request may violate these Terms.

4. How Our Security Scans Work

Calmcomet checks publicly accessible parts of submitted websites to identify potential security issues.

Our free scans may include checks for:

• Exposed API keys and sensitive information.
• Missing or weak security configurations.
• Outdated software with known vulnerabilities.
• Publicly accessible files and resources.
• Exposed website endpoints.
• Other security issues visible from outside the website.

Free scans are limited to low-impact checks of publicly accessible information.

We do not attempt to bypass authentication, access private accounts, exploit vulnerabilities, or perform intrusive security testing as part of the free scan.

Deeper security testing requires additional authorization, verification, and an agreed testing scope.

We may limit, stop, or refuse scans to protect the security and availability of websites and our services.

5. Free Security Reports

Calmcomet provides an initial website security scan and report at no cost.

To request a report, you must provide your website URL and business email address.

We aim to deliver reports within a few hours, although delivery times may vary.

Your report may include:

• Security issues identified during the scan.
• The severity of each finding.
• An explanation of why each issue matters.
• Recommended steps to investigate or fix the issue.

Some findings may require additional verification before we can confirm whether they represent actual vulnerabilities.

If sensitive information is discovered, we may redact details or require ownership verification before sharing the findings.

6. Accuracy of Security Reports

Our security scans are designed to identify potential risks, but they cannot detect every vulnerability.

Some issues may remain undetected, and some reported findings may turn out not to be security vulnerabilities.

Scan results reflect the information available when the assessment takes place.

Receiving a report from Calmcomet does not mean your website is fully secure, protected against future attacks, or compliant with any particular security standard.

You are responsible for reviewing the findings and deciding which security measures or fixes to implement.

7. Acceptable Use

You agree to use Calmcomet responsibly and only for lawful purposes.

You must not:

• Submit websites for which you do not have the required authorization.
• Use our reports to attack or gain unauthorized access to websites.
• Provide false information about website ownership.
• Attempt to disrupt or overload our services.
• Use automated methods to abuse our website or scanning system.
• Share another organization’s confidential security findings without permission.
• Use Calmcomet for fraudulent or illegal activities.

We may restrict access or reject requests if we reasonably believe these rules have been violated.

8. Security Reports and Confidentiality

Security reports may contain sensitive technical information about a website.

We take reasonable measures to protect scan results and prevent unauthorized disclosure.

We may restrict access to reports, redact sensitive details, or request ownership verification before delivering them.

You may share your own security reports with authorized developers, employees, contractors, or security professionals who need the information to improve your website’s security.

You agree not to misuse security findings or disclose another organization’s sensitive information without permission.

9. Privacy and Data Protection

When you use Calmcomet, we collect certain information needed to provide our services, including website URLs, business email addresses, and technical scan results.

We use this information to process scan requests, prepare reports, communicate with users, and operate our services.

For more information about how we handle personal information, please read our Privacy Policy.

10. Intellectual Property

The Calmcomet name, logo, website design, software, and original content belong to Calmcomet or their respective owners.

You may not copy, distribute, modify, or commercially exploit our proprietary materials without permission.

You retain ownership of your website and its content.

By submitting a website, you give Calmcomet limited permission to access and process publicly available information necessary to perform the requested security scan.

You may use security reports provided for your website for internal security reviews, development, and remediation.

11. Third-Party Services

Calmcomet may use third-party services for hosting, email delivery, technical processing, and other operational functions.

These services may have their own terms and privacy policies.

We are not responsible for third-party websites or services that operate independently of Calmcomet.

12. Service Availability and Changes

We work to keep Calmcomet available and functioning properly, but we cannot guarantee uninterrupted access.

We may update, modify, temporarily suspend, or discontinue features when necessary.

Our initial website security scan is free. Additional services, including deeper testing or remediation assistance, may be offered separately.

Any charges for additional services will be communicated before you agree to purchase them.

13. Disclaimer and Limitation of Liability

Calmcomet provides security scans, reports, and recommendations for informational and security improvement purposes.

Our services are provided on an “as is” and “as available” basis, to the extent permitted by applicable law.

We do not guarantee that:

• Every security vulnerability will be discovered.
• Every finding will be accurate.
• Every recommended fix will resolve the reported issue.
• Your website will remain secure after receiving a report.
• Our services will prevent hacking attempts, data breaches, or other security incidents.

You should independently review findings and recommended fixes before making changes to your production website.

To the extent permitted by applicable law, Calmcomet is not responsible for indirect or consequential losses arising from reliance on our reports or use of our services, including lost revenue, business interruption, or lost data.

Nothing in these Terms excludes liability that cannot legally be excluded.

14. Your Responsibilities

You are responsible for:

• Maintaining the security of your website and systems.
• Ensuring you have permission to request a security assessment.
• Reviewing security findings before taking action.
• Testing recommended fixes before deploying them.
• Maintaining appropriate backups and security controls.
• Complying with applicable laws and regulations.

Calmcomet provides information and recommendations to support your security efforts but does not replace your responsibility for maintaining your website.

15. Suspension and Termination

You may stop using Calmcomet at any time.

We may suspend or restrict access to our services if you violate these Terms, misuse security findings, or engage in activities that could harm Calmcomet or others.

We may also decline or discontinue security scans when necessary for legal, operational, or security reasons.

16. Changes to These Terms

We may update these Terms as our services develop or legal requirements change.

Any updates will be published on this page with a revised “Last Updated” date.

Where required by law, we will provide additional notice of material changes.

Your continued use of our services after updated Terms become effective indicates acceptance of those changes where permitted by law.

17. Contact Us

If you have questions about these Terms of Service or our security scanning services, please contact us.

Calmcomet

Website: https://www.calmcomet.co/

Email: contact@calmcomet.co