Get the scan $1 $5

Terms of Service.

Last updated: October 17, 2026

These Terms of Service ("Terms") are a binding agreement between you and ClearanceHQ ("ClearanceHQ", "we", "us"), and govern your use of the ClearanceHQ website, free check and paid scans (the "Service"). By submitting a Target, starting a free check or buying a scan, you agree to these Terms.

1. The service

ClearanceHQ runs automated, read-only security checks of a website URL and/or a GitHub repository (public or private) you submit (the "Targets") and produces a point-in-time written report (the "Report"). The free check looks only at the public response, security headers and commonly exposed files of a URL; it does not scan repositories or databases.

2. Authorization and ownership verification (required)

You may only submit Targets that you own or are explicitly authorized in writing to test. By submitting a Target, you represent and warrant that:

  • you own the Target, or have full legal authority (including any authority needed from your employer or client) to authorize ClearanceHQ to scan it; and
  • that authority covers automated requests to, and read-only access to repository contents on, the infrastructure and platforms associated with the Target (for example GitHub, Supabase or your web host), to the extent their own terms allow.

Before a full paid scan runs, we require technical proof of control: for URLs, a DNS TXT record or a token file at a designated /.well-known/ path; for repositories, installing the ClearanceHQ GitHub App on the repository and signing in with a GitHub account that has push or admin access to it. Verification is a safeguard, not a substitute for your authorization. We may refuse, stop or report any use we reasonably believe is unauthorized.

3. What the scan does (scope of consent)

By starting a scan, you give us temporary, limited permission to interact with your Targets as follows:

  • Websites: rate-limited HTTP GET and HEAD requests to inspect public responses, headers and client-side files. We do not try to bypass login, submit forms, write or change data, run denial-of-service tests or send exploit payloads.
  • Exposed database keys: if a public database key (such as a Supabase anon key) is found in your live site, you authorize a read-only request made with that key solely to check whether data is reachable without login and how many rows are visible. We do not keep row contents.
  • Repositories: using a short-lived, read-only GitHub App token, we clone the repository to temporary storage, analyze code, configuration, dependencies and git history for security issues and exposed secrets, and delete the copy when the scan ends.

4. Fees, re-scan and refunds

  • A full scan currently costs $1.00 (launch sale; regular price $5.00), paid upfront through Stripe. Prices are in US dollars. You are responsible for any applicable taxes, unless the law requires otherwise.
  • Each paid scan includes one free re-scan of the same Targets within 14 days of payment.
  • If a scan cannot be completed because of a technical problem on our side, we will refund you in full on request.
  • If you cannot verify ownership of your Targets within 14 days of purchase, we will refund you in full on request.
  • Completed scans (a Report was generated) are not refundable.
  • Refund requests: clearancehq@mail.grokbot.com.

5. Acceptable use

You agree not to: submit any Target without proper authorization; use the Service to probe, harass or prepare attacks against others; resell or redistribute Reports about third-party Targets without our written consent; or try to bypass ownership verification, rate limits or our security controls.

6. Eligibility

You must be at least 21 years old to use the Service. By using it, you confirm that you are.

7. No warranty

THE SERVICE AND ALL REPORTS ARE PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT, TO THE EXTENT THE LAW ALLOWS.

A Report reflects automated checks at a single point in time. It is not a human penetration test, a full security audit, a compliance certification or a guarantee. A clean Report does not mean your application is secure. Although our checks are read-only and rate-limited, any automated traffic carries some small risk to fragile or misconfigured servers.

8. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW: (A) WE ARE NOT LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, DATA OR GOODWILL, ARISING FROM THE SERVICE OR ANY REPORT; AND (B) OUR TOTAL LIABILITY FOR ALL CLAIMS IS LIMITED TO THE GREATER OF THE AMOUNT YOU PAID FOR THE SCAN OR US$50. Some jurisdictions do not allow certain exclusions, so some of these limits may not apply to you.

9. Indemnification

You agree to defend, indemnify and hold harmless ClearanceHQ and its operator from third-party claims, losses and expenses (including reasonable legal fees) arising from: (a) your breach of these Terms, including any misrepresentation about your authorization to scan a Target; (b) your violation of any law or third-party right; or (c) scanning a Target you were not authorized to submit.

10. Changes, governing law and contact

We may update these Terms by changing the "Last updated" date above; updated Terms apply to scans ordered after that date.

Governing law: these Terms are governed by the laws of the United States and of the U.S. state in which the operator of ClearanceHQ resides, without regard to conflict-of-law rules.

Contact and refund requests: clearancehq@mail.grokbot.com.