Terms of service

DomainGrade inspects publicly available information about a domain — its DNS records, the TLS certificate its servers present, and the HTTP headers its homepage returns — and produces a graded report. Nothing we do requires access to your systems, and nothing we do changes them.

Everything DomainGrade reads is information the domain publishes to anyone who asks, so scanning a domain you do not control is permitted and is how much of the product is used — an agency showing a prospective client where they stand, for instance.

You may not use DomainGrade to attack, overload, or gain unauthorised access to anything. We rate-limit scans, identify our scanner in every request, and honour requests from domain owners to be excluded.

A report describes what we observed at one moment from one vantage point on the internet. It is not a guarantee, an audit, or a certification, and passing every check does not mean a domain is secure — only that these specific checks passed.

Act on a finding you disagree with only after verifying it yourself. We would also like to hear about it.

You are responsible for what happens under your account. Delete it whenever you like from your settings; doing so removes your organisation, your domains, your monitors and your alerts.

Paid plans are billed monthly or annually in advance through Stripe. You can cancel at any time from the billing page and keep access until the end of the period you have paid for.

DomainGrade is provided as it is. We are not liable for decisions taken on the basis of a report, for a scan we failed to run, or for an alert that did not arrive. If the service fails you materially, the remedy is a refund of what you paid for the period concerned.

We will update these terms from time to time. Material changes will be announced to account holders by email before they take effect.