Terms of Service

1. Acceptance of Terms

By accessing or using any part of the WASViking platform, you agree to be bound by these Terms of Service ("Terms"), including all applicable laws and regulations. If you do not agree, you are prohibited from using the platform. Continued access and usage indicate your acceptance of the current version of these Terms.

Even when access to the WASViking platform is granted through a corporate subscription or enterprise account, each individual user must personally review and accept these Terms of Service, the Privacy Policy, and the Acceptable Use Policy as a condition for using the Services. This requirement ensures compliance with applicable data protection laws and establishes individual accountability for the use of the Services.

2. Eligibility

You must be at least 18 years old and legally authorized to represent your organization to use the Services. By accepting these Terms, you confirm that you are authorized to bind the organization to this agreement.

3. Account Registration and Security

You are responsible for maintaining the confidentiality of your login credentials and for all activities that occur under your account. You must promptly notify us of any unauthorized access or suspected compromise. You are solely responsible for all actions performed under your account, including scans initiated through your access tokens or API usage.

The platform provides additional security controls for customer and partner environments, which may include an email security code at sign-in, authenticator-based two-factor authentication, authentication through an approved identity provider, and role-based access control. You are responsible for enabling, configuring, and maintaining the security controls made available to your organization in a manner appropriate to your risk profile, and for the security of your own systems, devices, networks, and email accounts. To the fullest extent permitted by law, WASViking shall not be responsible for unauthorized access to your account or data to the extent it results from your failure to enable or use available security controls, from credentials compromised outside the platform, or from systems, devices, or services under your control or the control of your users.

4. Permitted and Prohibited Uses

You agree to use the WASViking platform only for lawful purposes and only to scan, monitor, or analyze systems, domains, APIs, and certificates you own, or for which you have obtained explicit written authorization.

You may not:

Scan third-party assets without documented consent;
Use the platform to engage in malicious, illegal, or harmful activities;
Attempt to probe, scan, or test the security of any system not explicitly authorized;
Share, resell, sublicense, or commercially exploit the service, except as expressly authorized in a written agreement with WASViking or under the WASViking Partner Agreement;
Circumvent access limitations or licensing restrictions;
Engage in reverse engineering or interfere with the operation of the service.

WASViking reserves the right to suspend or terminate your access in case of violation.

5. License and Ownership

WASViking grants you a limited, non-exclusive, non-transferable, revocable license to access and use the Services during the subscription term, subject to these Terms and any applicable plan limitations.
All intellectual property rights, including software, data models, designs, and underlying technology, remain the exclusive property of WASViking LLC.

6. Data Protection and Privacy

You acknowledge and agree that certain information, including scan results, metadata, IP addresses, and security findings, may be stored securely in our cloud infrastructure for reporting and auditing purposes.
Data in transit is protected using TLS 1.2 or higher, and stored credentials, tokens, and similar sensitive fields receive an additional layer of application-level encryption. Our security program is described in the Security Practices page of the Trust Center.
You may delete targets and their associated data from the dashboard during the subscription term, subject to the deletion controls of your plan, and you may request deletion of your organization's data as described in Section 8.
Use of the service is also subject to our Privacy Policy and, where applicable, the Data Processing Agreement.

The platform lets you share an aggregated, signed view of your organization's security posture with third parties you choose, such as a customer, an auditor or an investor ("Posture Share"). You decide whom to invite, which scope and level of detail to disclose, and for how long, and you may revoke an access at any time. You are responsible for having the right to disclose that information, for the accuracy of the recipient email addresses you enter, and for any confidentiality terms between you and the recipients.

A Posture Share carries aggregated figures and never vulnerability details, affected addresses or asset inventories. WASViking signs each version so that a recipient can verify it was not altered. That signature attests that the figures were produced by the platform; it is not a certification, an audit opinion or a statement of compliance issued by WASViking. Recipients read a Posture Share in the WASViking Assessor Portal, under the Assessor Portal Terms of Use and the Assessor Portal Privacy Notice, and their visits and downloads are recorded and shown to you. How shared data is handled is described on the Posture Share and Assessor Portal Data Handling page.

7. Trial, Access Levels, and Usage Limits

Unless otherwise stated in a written agreement, WASViking does not offer public trial accounts or free tiers. Usage limits per plan (e.g., number of domains, scans, or IPs) are defined during onboarding and are subject to change as part of product evolution, with reasonable notice to the customer.

7.1 Purchases Through Authorized Partners

WASViking subscriptions may be purchased through, or managed by, an authorized WASViking partner, such as a reseller or a managed security service provider. In that case, commercial terms such as pricing, invoicing, and support are agreed between you and the partner. The partner is an independent business. It is not an agent of WASViking and has no authority to modify these Terms, make commitments on behalf of WASViking, or grant rights that WASViking has not granted.

These Terms, the Privacy Policy, and the Acceptable Use Policy continue to apply to every user of your organization, including organizations created or administered by a partner, and each user must accept them before using the platform. If your environment is administered by a partner under a managed services arrangement, the partner's access to your organization is governed by your agreement with that partner, and delegated access events and security-relevant actions performed through partner access are recorded by the platform.

8. Termination and Suspension

We reserve the right to suspend or terminate your access, without refund, if:

You violate these Terms;
You engage in unauthorized scanning;
You exceed usage limits or attempt to circumvent restrictions.

You may also terminate your account at any time; organizations contracting directly can do so from the portal under Privacy & Data, subject to a 60-day reversible window before erasure. Upon termination, your access will be revoked. Upon a verified request, WASViking deletes Customer Data from active systems in accordance with its documented deletion procedures. Limited records may be retained where reasonably necessary for security, fraud prevention, audit integrity, legal compliance, or the establishment, exercise, or defense of legal claims. Retained records remain protected and access-restricted and are deleted or de-identified when no longer required. Residual copies may remain in encrypted backups until they expire through the normal backup retention cycle.

9. Third-Party Services and Links

Our platform may link to or integrate with third-party APIs or services. WASViking is not responsible for the availability, content, or practices of these external services.

10. Disclaimers

The services are provided "as is" and "as available" without warranties of any kind, whether express or implied. We do not guarantee that the platform will be error-free, secure, or uninterrupted, or that results will be accurate or complete.

10.1 Service Level Commitment

As an exception to the disclaimers in Section 10, WASViking offers a Monthly Uptime Percentage of at least 99.2% for the WASViking platform (the web portal and its APIs) in each calendar month. "Monthly Uptime Percentage" means the total number of minutes in the calendar month, minus the minutes during which the platform was Unavailable, divided by the total number of minutes in that month, expressed as a percentage. "Unavailable" means the platform is not able to respond to valid requests, as measured by WASViking's monitoring systems, which are the authoritative source for availability measurement.

The following are excluded from the calculation of Unavailable minutes:

Scheduled maintenance announced in advance, and emergency maintenance;
Factors outside WASViking's reasonable control, including failures of the internet, third-party networks, services, or infrastructure not operated by WASViking, and attacks by third parties that WASViking could not reasonably prevent;
Issues resulting from your equipment, software, network, configurations, acts, or omissions, or from your breach of these Terms;
Suspension or termination of access in accordance with these Terms;
Trial, beta, preview, or free-of-charge features or services.

This commitment applies to the availability of the platform itself and not to the scheduling, execution time, or completion of individual scans, integrations, or notifications.

If the Monthly Uptime Percentage falls below 99.2% in a given calendar month, you may request a service credit equal to 5% of the monthly fee attributable to the affected Services for that month, provided that the Unavailability is verified by WASViking and is attributable to WASViking under the criteria and exclusions of this Service Level Commitment.

For subscriptions billed annually or for periods longer than one month, the applicable monthly fee is calculated proportionally. For an annual subscription, it corresponds to one twelfth (1/12) of the annual fee applicable to the affected Services.

Requests must be submitted in writing to the support address indicated by WASViking within thirty (30) days after the end of the affected calendar month and must include the reasonably available information related to the reported Unavailability. WASViking will verify the request against its monitoring records and the exclusions set out in this Service Level Commitment.

Approved service credits are applied exclusively against future charges for the affected Services, have no cash value, are not transferable, cannot be converted into a payment, and are not refundable.

The total credits related to availability in any calendar month will not exceed 5% of the applicable monthly fee for the affected Services in that month. Service credits are your sole and exclusive remedy for any failure by WASViking to meet this Service Level Commitment.

11. Limitation of Liability

To the fullest extent permitted by law, WASViking LLC shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of data, business interruption, or security breaches caused by misuse of the platform.

To the fullest extent permitted by law, the total aggregate liability of WASViking LLC arising out of or relating to these Terms or the Services, whether in contract, tort (including negligence), or otherwise, shall not exceed the total amounts paid to WASViking for the Services in the twelve (12) months immediately preceding the event giving rise to the claim or, where your subscription was purchased through an authorized partner, the amounts received by WASViking that are attributable to your subscription in that period. The existence of more than one claim shall not enlarge this limit. Nothing in these Terms excludes or limits any liability that cannot be excluded or limited under applicable law.

12. Indemnification

You agree to indemnify, defend, and hold harmless WASViking LLC, its officers, affiliates, and employees from any claim, loss, or liability (including legal fees) arising from:

Your misuse of the Services;
Unauthorized or illegal scans;
Breach of these Terms;
Your violation of applicable laws or third-party rights.

13. Export Compliance

You agree to comply with all applicable U.S. export control laws. You may not use or export the Services in violation of U.S. laws or to any restricted jurisdictions.

14. Modifications to the Terms

WASViking may update these Terms from time to time. Updates will be posted on our website, and your continued use after changes constitutes acceptance of the new version.

15. Governing Law and Jurisdiction

These Terms shall be governed by and construed under the laws of the State of Florida, United States, without regard to conflict of law principles. All legal actions must be brought in courts located in Florida.

16. Compliance with Brazilian Data Protection Law (LGPD)

If you are located in Brazil, you acknowledge that WASViking processes data in accordance with the Brazilian General Data Protection Law (LGPD – Law No. 13,709/2018), and that any personal data collected or processed by WASViking is handled in compliance with the principles and legal bases established by this law.

17. Exposure Intelligence and Sensitive Data Handling

The Exposure Intelligence feature is designed to identify potential security risks related to domains, credentials, and publicly exposed data associated with assets under the Customer’s control.

The Customer acknowledges and agrees that Exposure Intelligence findings may include personal or sensitive data (such as email addresses, usernames, or credential indicators), and that such data is processed strictly for legitimate security and risk assessment purposes.

The Customer is solely responsible for ensuring that it has a valid legal basis to monitor, access, and use such data, including compliance with applicable data protection, privacy, and employment laws.

WASViking does not verify ownership of individual data subjects and shall not be responsible for the Customer’s use or interpretation of any data obtained through the platform.

Access to sensitive fields may be restricted, masked by default, and logged for auditing and abuse prevention purposes.

18. Contact Information

If you have questions about these Terms, contact us at:
WASViking LLC
Orlando, FL, USA
[email protected]