Rules for using Hack My Website
These terms define how customers should use the service and what responsibilities remain with the customer.
Authorized use only
You may only register and scan domains that you own or are explicitly authorized to test. Using the service against systems you do not control is prohibited.
Source Code & Repository Access Rules
When you connect a GitHub repository, you grant Hack My Website read-only access to analyze your codebase. Your repository files are processed ephemerally solely to flag security vulnerabilities and are never persistently stored on our servers.
Verification requirement
Hack My Website requires domain ownership verification before a scan can be launched. Verification is part of the safety model of the product and may not be bypassed.
Nature of the service
The platform provides automated scanning and AI-assisted summaries. It does not replace a full manual penetration test, secure code review, or legal compliance review.
Customer responsibility
Customers remain responsible for remediation decisions, deployment choices, data handling, and ensuring that their use of the service complies with contracts, hosting rules, and local law.
Accuracy and availability
Scan results are produced by third-party scanner engines and AI summarization systems. Findings may include false positives, false negatives, or partial output when external services are unavailable. AI-assisted remediation prompts or suggested code fixes are provided as-is, and the customer is solely responsible for testing and validating any code changes in a staging environment before deploying to production.
Pricing
Pricing, tier parameters, and subscription caps for the Starter, Pro, and Agency tiers are governed dynamically by the active rates displayed on our checkout portals and your account workspace limits. Payment, refund, support, and enterprise terms are governed by the checkout provider records and the commercial agreement shown at purchase time.
Agency and Third-Party Report Distribution
If you are utilizing an Agency tier to generate white-labeled security briefs for third-party clients, you assume all liability for how those clients interpret or rely on the data. You agree to indemnify and hold Hack My Website harmless from any third-party claims arising from reports rebranded and distributed by your organization.
Limitation of liability
The service is provided as an automated security-assistance tool. To the maximum extent permitted by applicable law, Hack My Website is not responsible for business losses caused by missed findings, delayed scans, third-party outages, user misuse, or remediation choices outside the platform.