baessa Security Scanner Terms of Service & Disclaimer
Effective Date: October 3, 2026These Terms of Service (hereinafter referred to as "Terms") set forth the conditions for using the web application security assessment service provided by baessa Security Scanner (hereinafter referred to as the "Service"). Users (hereinafter referred to as "User" or "Users") must agree to these Terms before using the Service.
Article 1 (Description of Service)
1. The Service performs automated vulnerability assessments against the user-designated web application (hereinafter referred to as "Target") using autonomous security AI agents and specialized inspection scripts in accordance with IPA "How to Secure Your Website" guidelines and the OWASP Top 10, delivering a structured findings report.
2. The primary service comprises automated AI scanning and initial technical report generation. Additional consulting, specialized engineering debriefs, or customized remediation support may be offered separately upon request.
Article 2 (Warranty of Ownership & Legal Authority)
1. The User expressly represents and warrants that they are the legitimate owner, operator, or duly authorized administrative agent of the target servers, domain names, and applications, and hold full legal entitlement to authorize this security assessment.
2. In strict compliance with unauthorized computer access laws and cybercrime legislation, the Service mandates pre-scan domain ownership verification (via security-verify.txt placement, meta tag insertion, or DNS TXT records). The User agrees to fulfill verification prior to scanning.
3. The User shall bear all legal and financial responsibility for any claims, disputes, or liabilities arising from unauthorized testing on third-party systems, and shall fully indemnify and hold harmless the Service operator.
Article 3 (Operational Risks & Disclaimer of Liability)
1. Security assessments inherently involve automated attack payloads, stress payloads, and anomalous HTTP requests. The Service operator assumes no liability for system load, temporary response latency, service downtime, log volume surges, or unexpected data modifications occurring on target systems.
2. To avoid operational downtime and scan interruptions caused by Web Application Firewalls (WAFs) or rate limiting, conducting scans against staging or testing environments is strongly advised.
3. If scanner traffic is throttled, blocked, or banned by target WAFs, CDN defenses, or Bot protection, AI agents will terminate or degrade testing safely. Service delivery is deemed fulfilled upon delivery of findings captured up to that point, and is exempt from refunds or free re-scans.
4. The User agrees to perform full database and system backups prior to initiating assessments.
5. The Service does not guarantee detection or remediation of all existing vulnerabilities.
Article 4 (Limitation of Liability)
In the event that the Service operator is found liable for damages in connection with this Service, except in cases of willful misconduct or gross negligence, maximum cumulative liability shall be strictly limited to the actual amount paid by the User for the specific assessment session.
Article 5 (Fees & Refund Policy)
1. Service fees are specified on the order page and statutory disclosures.
2. Digital Service Non-Refundable Clause: Due to the immediate provisioning of compute infrastructure and digital delivery, cancellations, returns, and refunds are not accepted once payment is processed and assessment execution has started.
3. Notwithstanding the above, if an assessment fails to complete due to a verified failure of our internal infrastructure, a full refund or complimentary re-scan will be provided promptly.
Article 6 (Governing Law & Jurisdiction)
These Terms shall be governed by and construed in accordance with the laws of Japan. Any disputes arising out of or in connection with the Service shall be subject to the exclusive jurisdiction of the court having jurisdiction over the location of the operator.