legal
Last updated: May 30, 2026
These Terms govern your access to and use of Xalgorix ("the Service"), operated by Xalgorix Labs. By creating an account or running a scan, you agree to be bound by them. Read carefully — pentesting is a powerful capability and we hold both ourselves and you to it.
You must be at least 18 and able to form a binding contract. One account per human; sharing credentials is prohibited (use a Team workspace + per-user logins instead).
You are responsible for all activity under your account, including any API keys you create. Notify us immediately at security@xalgorix.com if you suspect compromise.
You may only scan targets you own or are explicitly authorized in writing to test. Unauthorized scanning is illegal in most jurisdictions and a material breach of these Terms.
By starting a scan, you represent and warrant that you hold the necessary authorization. We may require proof at any time and will suspend accounts where authorization is unclear.
You agree to the Acceptable Use Policy, which is incorporated by reference. Violations may result in immediate termination, forfeiture of credits, and referral to law enforcement.
Scans are paid via credits, sold as subscriptions or one-time packs. Subscription credits expire at the end of each billing period; one-time packs do not expire.
Subscriptions auto-renew until cancelled. Cancel any time from Billing; cancellations take effect at the end of the current period. See the Refund Policy for refund eligibility.
We target 99.9% monthly uptime for the dashboard and 99.5% for the scan engine. Status and incident history live at /status. We do not credit downtime under 30 minutes/month.
The Xalgorix engine, methodology, payloads, and brand are our property. You retain ownership of your scan inputs (targets, configs) and the findings produced for your targets.
You grant us a non-exclusive license to process your data solely to operate and improve the Service. We do not sell customer data.
The Service is provided "as is". Automated pentesting reduces but does not eliminate the risk of false positives, false negatives, or unintended impact on your systems. You are responsible for reviewing findings and validating remediation.
To the maximum extent permitted by law, our aggregate liability for any claim arising out of the Service is limited to the amount you paid us in the 12 months preceding the claim. We are not liable for indirect, incidental, or consequential damages.
You may close your account any time from Settings. We may suspend or terminate accounts that violate these Terms, with notice when reasonably possible. On termination, scan data is retained 30 days then permanently deleted.
These Terms are governed by the laws of Ireland. Disputes are subject to the exclusive jurisdiction of the courts of Dublin, except where mandatory consumer law provides otherwise.
We may update these Terms. Material changes will be announced via email and on the dashboard at least 30 days before they take effect. Continued use after the effective date constitutes acceptance.
xalgorix