Terms of Service

1. What Wraith does

Wraith performs a single, one-time, externally observable security assessment of the hostnames you authorize, after you prove control of the domain by publishing a DNS TXT record we generate for you. One assessment is one purchase; Wraith is not a subscription and does not renew automatically.

2. Authorization is required, and is limited

By checking the authorization box during checkout, you confirm that you own or are authorized to have the named domain assessed, and you authorize Wraith to run the specific, non-destructive checks described on the site against the specific hostnames covered by your verification — nothing more. Wraith does not attempt exploitation, password guessing, denial-of-service testing, or any authenticated access. Assessing a domain you are not authorized to assess is a breach of these terms and may be unlawful; you are solely responsible for the accuracy of the authorization you provide.

3. What the report is, and is not

The report reflects externally observable configuration at one point in time, from one vantage point. A clean result is not proof that a system is secure, and the assessment is not a penetration test, certification, or compliance attestation of any kind. Wraith makes no guarantee, express or implied, about the completeness or security consequences of its findings.

4. Payment and refunds

The price shown at checkout is the full price for one assessment, charged once. If a paid order cannot be completed for a reason on Wraith’s side — most commonly, authorization lapsing between payment and the scan actually running — Wraith will contact you to arrange a refund. Contact support using the address on your order confirmation for any other refund request.

5. Data and retention

See the Privacy Policy for what is collected and for how long.

6. Governing law

Pending — the governing jurisdiction and dispute-resolution terms for the United Arab Emirates have not yet been finalized. Do not treat this section as complete.