Skip to content
Use our free scanner to check your security!

Legal

Terms of Service

The terms that apply when you use assistsec.nl and the free exposure scanner. Penetration tests, subscriptions and the ARGUS portal are governed by a separate written agreement.

Last updated September 2, 2026 · Version 1.0

Open items before publication · 9 items

The details below are not recorded anywhere in our systems and must be supplied and checked by AssistSec before this document is relied on. Each one is marked where it belongs in the text.

1. Who we are

These terms are those of full legal name and legal form of the company (e.g. B.V.), trading as AssistSec, registered with the Dutch Chamber of Commerce under number Chamber of Commerce (KvK) number, VAT number VAT identification number, with its registered office at registered office / business address. In these terms, "we", "us" and "AssistSec" refer to that company, and "you" to anyone who uses the website or the scanner.

You can reach us at contact@assistsec.nl.

2. When these terms apply

These terms apply to your use of the website at assistsec.nl, including its Dutch version at assistsec.nl/nl, and of the free digital exposure scanner at assistsec.nl/security-scan. By using the website or the scanner you accept them. If you do not agree, do not use them.

These terms do not govern:

  • our paid services: penetration tests, monthly scans and other engagements. Those are performed under a written agreement with the customer, which sets out the scope, the systems to be tested, the test period, the price and the applicable conditions. That agreement is normally accompanied by an authorisation-to-test and indemnity letter and a non-disclosure agreement. whether separate general terms and conditions apply to paid services, and where they can be found.
  • the ARGUS customer portal at scanner.assistsec.nl, to which the login, demo and registration links on this site lead. Use of the portal is governed by the customer agreement and the portal's own terms of use: link to the terms of use of the ARGUS customer portal (scanner.assistsec.nl).

Where such an agreement and these terms conflict, the agreement prevails. If you are a consumer, nothing in these terms limits rights you have under mandatory law.

3. Using the website

The website describes our services and publishes articles about security. Its content is provided for general information. It is not legal, security or other professional advice, and it is not an offer: the terms of any engagement are agreed in writing. Interface examples shown on the site, such as portal screens, are illustrations and may use sample data.

We may change, suspend or discontinue any part of the website at any time without notice. We aim to keep the site available and accurate but do not guarantee either.

When using the website you must not:

  • use it for any unlawful purpose or in breach of these terms;
  • attempt to gain access to parts of the site or its systems that are not intended for you, including the administrative area, which is for AssistSec staff only;
  • attack, probe, overload or otherwise interfere with the site, its API or the infrastructure it runs on;
  • extract content at scale by automated means, other than through the RSS feed and sitemap we publish for that purpose;
  • misrepresent your identity or your authority to act for someone else.

Found a security issue in our own website? We would like to hear about it. Write to contact@assistsec.nl with what you found, and give us a reasonable time to fix it before disclosing it.

4. The free exposure scanner

The scanner lets you enter a website domain and receive an overview of its publicly visible security exposure. This section sets out what it is, who may use it and what you may expect of its results.

4.1 What the scanner is, and is not

The scanner is an automated, passive review of information that anyone on the internet can observe about a domain: DNS and e-mail authentication records, the TLS certificate, HTTP response headers, hostnames published in Certificate Transparency logs, registered lookalike domains, well-known files and the technologies a site announces. It sends no attack traffic, does not log in, does not test business logic and does not attempt to exploit anything.

The scanner is not a penetration test, a security audit or a compliance assessment, and its output is not a certification of any kind. It is a first, free look at the outside of a domain. A full assessment of a web application or API is what our paid services are for.

4.2 Domains you may scan

You may only submit domains that you own or administer, or for which you have the owner's permission to carry out such a review. Submitting a domain confirms that this is the case.

Using the scanner to gather information about an organisation or person without their authority is not permitted, even though the information it collects is publicly observable. We may refuse or remove scans and block access where we suspect misuse.

4.3 Availability and fair use

The scanner is offered free of charge and as available. We limit the number of scans per connection (currently eight per ten minutes), refuse domains that resolve to private or internal addresses, and may throttle, refuse or withdraw the service at any time, temporarily or permanently, without notice or liability. Repeated submission of the same domain within a short period returns the scan already running rather than starting a new one.

4.4 Results

A report describes the domain as it appeared to us at the moment of the scan. It can be incomplete: some checks may time out, be blocked or be undetermined, and the report says so where that happened. Each finding carries a confidence level; findings marked as possible may be false positives and must be verified by a person before anyone acts on them. A report with few or no findings is not evidence that a domain is secure.

The score and the findings are informational. You decide what to do with them, and you are responsible for verifying a finding before acting on it. We do not notify the owner of a scanned domain, and we do not monitor a domain after a scan.

4.6 Unlocking a full report

To see every finding in a report, we ask for your name, company, job title and work e-mail address. You must provide details that are accurate and your own, and use a company address. By submitting them you agree that we may contact you about our services following your scan; you can tell us at any time that you do not want that. How we handle these details is described in our Privacy Policy.

5. Intellectual property

The website, its design, texts, images, articles and the structure and presentation of scan reports are protected by intellectual property rights that belong to AssistSec or its licensors. The names and logos of partners and certification bodies shown on the site belong to their respective owners.

You may read and print the content for your own use, link to our pages, and quote short passages with attribution and a link to the source. You may use a scan report of your own domain within your organisation for the purpose of improving its security. Any other reproduction, distribution or commercial use of our content requires our prior written permission.

6. Third-party links and services

The site links to services we do not control, including the ARGUS portal, LinkedIn and YouTube, and loads web fonts from Google. We are not responsible for the content, availability or practices of third-party services. Their own terms and privacy notices apply when you use them.

7. No warranty

The website and the scanner are provided "as is" and "as available". To the extent permitted by law, we give no warranty, express or implied, as to their availability, accuracy, completeness or fitness for a particular purpose. A security assessment can never guarantee that every vulnerability is found, and the scanner in particular looks only at the outside of a domain at one moment in time. Our obligation in providing them is one of reasonable effort, not of result.

8. Liability

To the extent permitted by Dutch law, we are not liable for any damage arising from the use of, or the inability to use, the website or the scanner, or from reliance on their content or results. This includes indirect and consequential damage, such as lost profit, lost data, business interruption and damage resulting from decisions taken on the basis of a report.

Nothing in these terms excludes or limits our liability for damage caused by our intent or deliberate recklessness, or any other liability that cannot be excluded by law. Where our liability cannot be excluded but may be limited, it is limited to the amount to which liability is limited where it cannot be excluded.

9. Your responsibility

You are responsible for your use of the website and the scanner, including for having the authority to scan the domains you submit and for what you do with the results. You will compensate us for damage and reasonable costs, including legal costs, arising from claims by third parties that result from your breach of these terms, in particular from scanning a domain without authority.

10. Suspension of access

We may block or restrict access to the website or the scanner for anyone who breaches these terms or whose use we reasonably consider harmful, without prior notice and without liability. We may also remove scans and their reports.

11. Changes to these terms

We may change these terms. The date and version at the top show the current text, and the version published on the site at the time you use it is the one that applies. Where a change is material, we will draw attention to it on the site.

12. Governing law and disputes

These terms and any dispute arising from the use of the website or the scanner are governed by the laws of the Netherlands. Disputes are submitted to the competent court (e.g. the District Court of …), unless mandatory law gives you the right to bring the dispute before another court. We prefer to resolve disagreements by talking first; contact us before taking any other step.

These terms are published in English and in Dutch. If the two versions differ, which language version prevails if the English and Dutch texts differ. If any provision of these terms is held to be invalid, the remaining provisions continue to apply and the invalid provision is replaced by a valid one that comes closest to its purpose.

13. Contact

Questions about these terms can be sent to contact@assistsec.nl or to our postal address: registered office / business address.

Back to top