1. What the service is

Attack Surface Score produces a letter grade for a domain's internet-facing security posture using only publicly observable information — DNS records, email-authentication records, live HTTPS responses, certificate transparency logs, and (where configured) third-party exposure sources. It is a passive external assessment. We do not log in, send exploit or attack traffic, or test internal systems. It is not a penetration test, a security audit, or professional security advice.

2. Acceptable use & authorization

You may submit a domain for scanning only if you own it or are explicitly authorized to assess it. You are responsible for having that authorization. You agree not to:

• use the service to gather information about targets you are not authorized to assess;
• use results to facilitate unauthorized access, attacks, or any unlawful activity;
• circumvent rate limits, automate abusive volumes of scans, or disrupt the service;
• resell or redistribute the service or its output without written permission.

We may rate-limit, suspend, or block any use that violates these terms.

3. Accounts

Some features require an account. You are responsible for the accuracy of your details and for keeping your credentials secure. You must be at least 18 years old to create an account.

4. Paid monitoring & billing

Continuous monitoring is a paid feature. During early access it is invoiced manually (e.g., via PayPal); charges, cadence, and cancellation are agreed at signup. Fees are non-refundable except where required by law. We may change pricing on notice for future billing periods.

5. Intellectual property

The scoring methodology, grades, site, and content are owned by ET2 Labs LLC. We grant you a limited, revocable, non-exclusive right to use the service for its intended purpose. Findings we generate about a domain you are authorized to assess are yours to use.

6. No warranty

The service is provided "as is" and "as available," without warranties of any kind. A grade is a signal, not a guarantee. It reflects only what is externally observable at the time of the scan, may be incomplete or inaccurate, and is not a substitute for a full security assessment. We do not warrant that the service will be uninterrupted, error-free, or that results are complete or current.

7. Limitation of liability

To the maximum extent permitted by law, ET2 Labs LLC is not liable for any indirect, incidental, consequential, or special damages, or for any loss arising from your use of — or reliance on — the service or its results. Our total liability for any claim is limited to the amount you paid us in the twelve months before the claim, or USD $100 if you paid nothing.

8. Indemnification

You agree to indemnify ET2 Labs LLC against claims arising from your use of the service, including any scan you run without authorization or any violation of these terms.

9. Termination & changes

We may suspend or end access at any time for violation of these terms. We may update these terms; material changes will be posted here with a new "last updated" date, and continued use means acceptance.

10. Governing law

These terms are governed by the laws of the State of Oklahoma, without regard to conflict-of-law rules. Any dispute arising out of or relating to these terms or the service will be resolved exclusively in the state or federal courts located in Oklahoma, and the parties consent to personal jurisdiction and venue there.

11. Contact

Questions about these terms: george@tronkits.com.