Terms of Service

Last updated October 27, 2026. Operated by LeakOwl ("LeakOwl", "we", "us"). Questions: support@leakowl.com.

1. The service

LeakOwl performs automated, outside-in, read-only security checks on web applications and reports what it finds. A free summary shows issue counts by severity. Paid options unlock the detailed report for one scan ("Report Unlock") or add weekly re-scans and email alerts for a number of apps ("Watch" plans).

2. You may only scan what you own or are authorised to test

Before any scan you must confirm that you own the application and domain, or that you have the owner's explicit written authorisation to test it. We additionally require technical proof of control (a file at /.well-known/leakowl.txt or a DNS TXT record) and re-check it before every scan. If proof is missing or removed, we do not scan. Providing false confirmation, or placing the verification token on a site you do not control, is a breach of these Terms and may be unlawful. You are responsible for any scan you request.

3. What a scan does

Scans make a limited number of HTTP GET requests (read-only) to the verified site, including its public JavaScript files, common file paths, response headers, and — where the app's own public bundle references a hosted Supabase project — read-only requests using the app's public anon key. We do not log in, submit forms, write data, send exploit payloads, or attempt to bypass access controls. Although scans are designed to be lightweight, you accept that any request to your server can have effects outside our control, and you are responsible for confirming your hosting provider permits security scanning of your own site.

4. No guarantee

Scans are automated and see only what is visible from the internet. They are not a penetration test or audit, can miss vulnerabilities, and can report false positives. A clean report is not a guarantee of security. Fix prompts are suggestions generated for AI coding tools; review any change before deploying it. The service is provided "as is" without warranties of any kind, to the maximum extent permitted by law.

5. Payments, subscriptions and refunds

Payments are processed by Stripe; we do not receive or store your card number. Prices are shown in US dollars at checkout: Report Unlock $10 one-time; Watch plans $19/month (1 app), $39/month (3 apps), $79/month (10 apps). Watch plans renew monthly until cancelled; you can cancel any time from your account (Stripe billing portal) and keep access until the end of the paid period. Taxes may be added where required.

Refunds. If a paid report is materially broken or you were charged in error, contact us within 14 days and we will refund the charge. Because the report is delivered immediately, we do not otherwise refund Report Unlock purchases. For Watch plans, we refund the most recent monthly charge if you ask within 7 days of it and have not relied on that month's alerts. Statutory consumer rights that cannot be waived are not affected.

6. Your data

See the Privacy Policy. We store masked findings, never full secret values or database rows.

7. Acceptable use

You must follow the Acceptable Use Policy. We may suspend or terminate access, and refuse scans, for abuse or suspected abuse.

8. Liability

To the maximum extent permitted by law, LeakOwl is not liable for indirect, incidental, special or consequential damages, loss of data, profits or business, and our total liability for any claim is limited to the amount you paid us in the 12 months before the claim.

9. Changes and contact

We may update these Terms; material changes will be posted here with a new date. Governing law and venue: to be completed by the operator before launch.