01Who you are dealing with
Woland is an independent early-access project at woland.tech. It is not a company with a sales team behind it. If something here matters to you, write to hello@woland.tech and a person will answer.
By using the site or asking us for a report, you accept these terms. If you do not accept them, do not send us an address.
02Where early access actually stands
Be clear on this before you expect anything. The automated scan is not running yet. What you see on the front page is a preview of how the product will behave — a demonstration, not a live scan of your app.
When you submit an address during early access, you join a list. We look at the app and send you what we found. It is free while early access lasts, and it is done by hand as much as by machine.
03What we look at, and what we never do
The check is passive. We look at what your app already hands to any browser that opens it: the code it ships to the page, the addresses it calls, the headers it returns, the things it leaves in plain sight.
- We only look at an address you sent us yourself. Nothing else, no neighbours, no guessing at other hosts you might own.
- We do not break anything, log in, brute-force anything, or change any data.
- We do not keep the contents of your app. We keep the findings and the address.
- No load testing, no denial of service, no attempt to get past a login screen.
By sending us an address you confirm you own that app or are otherwise allowed to have it tested, and that nobody else's terms forbid it. If that is not true, do not send it. You are responsible for what you submit, and you cover us if someone comes to us because you submitted an address you had no right to.
04What a report is and is not
A report tells you what we found. It does not tell you that there is nothing else. Nobody can honestly tell you that.
- An empty report means we did not find anything from the outside — not that your app is secure.
- A passive look sees a slice of the picture. Anything behind a login, inside your server, or in code we never receive stays invisible to us.
- Findings can be wrong in both directions: we can flag something harmless, and we can miss something that matters.
- Fixing what we found is your job, and so is deciding what is worth fixing.
We give no guarantee of security, compliance, or fitness for any particular purpose. The service is provided as is.
05How to use the site
- Do not submit addresses that are not yours to submit.
- Do not flood the site with automated requests or try to work around the rate limits.
- Do not use the findings to attack anyone, including yourself in a way that would break the law where you are.
- Do not try to take the service apart, resell it, or pass it off as your own.
We can stop serving a person or an address at any time, without notice, if any of that happens. We would rather write to you first, and usually will.
06Price and what is included
Early access is free right now. The page shows a future price for the full report; it is an indication, not an offer, and it can change.
What a scan covers, what lands in a report, what is free and what is paid — all of it can change while we build. If we ever charge you for something, you will see the price and agree to it first. Nothing is billed silently.
07Who owns what
Your app is yours. The findings we send you are yours to use, share with your team, and act on however you like.
The site, the wording, the design and the tooling behind it are ours. We may describe what we learn in aggregate — patterns across the apps we see — but never in a way that identifies you or your app.
08Limits on liability
To the fullest extent the law allows, we are not liable for lost profit, lost data, lost business, or any indirect or consequential loss arising from the service or from a finding we did or did not report.
Where liability cannot be excluded, it is capped at what you paid us in the twelve months before the claim — which, during free early access, is nothing. Some countries do not allow parts of this exclusion, and where that is so, it does not apply to you.
09Your data
What we store, why, for how long, and how to have it deleted is set out in the Privacy Notice. Short version: no cookies, no third-party analytics, and one email address is enough to have your data removed.
10Ending it
You can stop using the service whenever you want. Write to us and we will delete what we hold. We can stop offering the service, or any part of it, at any time; if that happens we will say so on this site.
11Changes to these terms
These terms will change as the product does. The date at the top always shows the current version. If a change matters to people already on the list, we will write to them rather than leave it to be noticed.
12Contact
Questions about these terms, the scan, or anything else:
hello@woland.tech
Data requests: privacy@woland.tech