Legal

Terms of use

These terms cover the Gradefort website, the free grade, accounts, monitoring, and fixes. By using Gradefort you agree to them. If you do not agree, do not use the service.

Scan authorization

You may run a passive check on a domain without proving you control it. A passive check looks at public DNS, one page request, a TLS handshake, certificate logs, and public exposure data. It does not log in, send exploits, or change anything.

You must verify that you control a domain, and confirm that you are authorized to test it, before Gradefort monitors that domain, applies a fix, retrieves breach data, checks blocklists, or looks for lookalike names. That confirmation is logged with your account, the time, the network address, and the scope of the request. You will not point Gradefort at a domain you are not authorized to test. If you are acting for a client, you represent that the client has authorized the check and any change.

What a grade is

A grade is a reading of public signals at one moment. It is not a promise that a business is secure, insured, or compliant. Gradefort does not guarantee that it will find every issue, that an alert will arrive in time, or that a fix will have the effect you expect.

Reports, checklists, and paperwork Gradefort may offer later are evidence and paperwork. They are not a compliance certification, an audit, or a legal opinion.

Fixes

A one-click fix is applied only after you preview the exact change and confirm that you want it. You can undo a change Gradefort made. You are responsible for the Cloudflare token you connect, for keeping a copy of settings you care about, and for the effect of a DNS change on mail and the website. Gradefort will not move a DMARC policy to quarantine or reject in one click.

Accounts and plans

Sign-in links expire quickly and work once. You are responsible for the mailbox you use. Paid plans are billed by Stripe in test or live mode as configured for the deployment. Fees already paid are not a security warranty. You may stop a plan from the billing portal. Deleting the account removes the domains, scans, and tokens stored for it.

Acceptable use

Do not use Gradefort to attack, scan, or disrupt a system you are not allowed to test. Do not try to break the service, bypass a limit, or store unlawful material in an account field. Gradefort may refuse a check or close an account that breaks these terms.

Liability

To the fullest extent the law allows, Gradefort is not liable for lost mail, lost profit, lost data, or an indirect or consequential loss arising from a grade, an alert, a missed alert, or a change you asked us to make. If Gradefort is liable for a claim relating to the service, the total liability is limited to the fees you paid for the service in the 12 months before the claim, or one hundred U.S. dollars if you paid nothing.

Changes

These terms can be updated by publishing a new version on this page. Continuing to use Gradefort after the new version is published means you accept it.