Terms of use

The service

SpectrAI tests one exact HTTPS URL with autonomous agents, within the budget and turn limits you set, then publishes the flaws it demonstrated with their evidence. The service is under development: its features may change, be suspended or be discontinued.

Creating a new workspace is subject to approval. No billing is in place today.

Authorized targets only

You may only test applications you own or are expressly authorized to test. Before any Assessment, you prove control of the URL’s parent domain with a DNS TXT record. This technical proof does not replace authorization: if the application, its hosting or its data belong to a third party, obtain their written consent first.

Testing a system without authorization is a criminal offence (in France, Articles 323-1 et seq. of the Criminal Code).

Acceptable use

By using SpectrAI, you agree to:

• not circumvent the service’s limits (DNS verification, budget, scope);
• not use it to harm a third party, disrupt a production service or access data without permission;
• use dedicated test accounts, never the credentials of real people;
• not try to access another organization’s data or attack SpectrAI’s infrastructure;
• keep your sign-in credentials confidential.

An account or an Assessment may be suspended if these rules are breached or if third parties are at risk.

Effects of testing

A pentest sends real requests to the target application. Despite the service’s limits, it can generate load, logs, alerts or side effects. Prefer testing a staging environment, and warn your host if needed.

No warranty

The service is provided “as is”, without any guarantee of availability or completeness. An Assessment that publishes no flaw does not prove the absence of vulnerabilities. Reports are neither a certification nor a compliance attestation, for NIS2 or anything else.

Liability

To the extent permitted by law, the publisher is not liable for indirect damage arising from the use of the service, nor for the consequences of a test run against an unauthorized target. You are responsible for the targets you declare and the authorizations you obtain. Nothing in these terms excludes liability that cannot legally be excluded.

Personal data

The processing of personal data is described in the privacy policy.

Changes and ending use

These terms may change with the service; the version in force is the one published on this page. You can stop using the service and delete your account at any time.

Governing law

These terms are governed by French law. In case of dispute, an amicable solution is sought first; failing that, the French courts have jurisdiction, subject to the protective rules that consumers benefit from.

Contact

For any question about these terms: contact@spectr-ai.eu.