Terms of Service

Draft. This is a plain-language starting point, not yet reviewed by a lawyer. The bracketed items must be filled in before public launch.

1. What Umbermark does

Umbermark scans a Linux server, runs a catalog of hardening checks, and returns a 0–100 score with an evidenced, remediable report. You can scan from the outside (hostname only), by running a read-only script and uploading its output, or by granting a read-only SSH key so we connect from our servers.

2. Authorization — you may only scan servers you control

You represent that you are authorized to scan every target you submit. Scanning systems you do not own or have explicit written permission to test may violate computer-misuse laws. You are solely responsible for your targets. We may rate-limit, block, or refuse scans we believe are unauthorized or abusive.

3. No warranty; findings are advisory

The service and every report are provided “as is,” without warranties of any kind. A high score is not a guarantee of security, and a finding is not a guarantee of a vulnerability. Umbermark is one input to your own judgment — not a certification, audit, or compliance attestation.

4. Accounts and billing

Sign-in is by email magic link. Paid plans are billed through Polar.sh, our merchant of record; their terms govern the payment itself. You can cancel any time from your dashboard; access continues to the end of the paid period.

5. Acceptable use

Do not use Umbermark to attack, overload, or gain unauthorized access to any system, to evade our rate limits, or to resell the service without agreement.

6. Limitation of liability

To the maximum extent permitted by law, Umbermark is not liable for indirect, incidental, or consequential damages, or for any loss arising from your use of a scan or report. [[ REVIEW: liability cap — e.g. fees paid in the prior 12 months. ]]

7. Changes

We may update these terms; material changes will be reflected by the date below. Continued use after a change means you accept it.

8. Contact and governing law

[[ REVIEW: legal entity name, jurisdiction / governing law, and a contact address for legal notices. Pending outbound-email setup for a support address. ]]

Last updated: [[ REVIEW: set on publish ]].