Terms & Conditions
These Terms govern your use of ArgosX ("ArgosX", "we", "us"). By using the service you agree to them. If you don't agree, don't use the service.
1. What ArgosX does
ArgosX runs automated and human-assisted tests against a web application at a URL you provide, and returns findings and a score. Free scans are passive and read-only. Paid tiers actively use your application, signing in, submitting forms and changing data, as set out in section 2A. We never make real payments on any tier. Results are provided on an "as-is" basis and are not a guarantee that your application is free of defects or secure.
2. Authorization & your responsibilities
You represent that you own the application you submit, or are authorized to have it tested, and that submitting it does not violate any third-party agreement. You are responsible for the accuracy of any credentials or scope you provide, and for backing up your own data.
2A. Consent to active testing (Pro and above)
Free scans are passive: ArgosX loads your public pages the way any visitor or search engine would. Paid tiers are different, and ordering one is your authorization for us to interact with your application as a user would. By purchasing a Pro scan or any higher tier for an application, you consent, for that application and for the duration of that test, to all of the following:
- Signing in and acting as a user. Using credentials you supply to authenticate, navigate, click, and submit forms, including as more than one role where you provide more than one login.
- Changing data. Test activity may create, modify or delete records in the environment you point us at: sign-ups, saved items, uploads, messages, settings, and similar. Point us at a staging environment if that matters to you, and keep your own backups.
- Exercising checkout and payment flows in test or sandbox mode where you enable it. We never enter real payment details and never transact real money.
- Probing for security and privacy defects, attempting access-control, authorization and input-validation failures against your own application, so that we can report them to you before someone else finds them.
- Automated request volume beyond that of a single human visitor, within limits intended not to degrade your service.
- Storing your credentials encrypted for the scope you set, and processing your application’s content through the third-party model providers named in our Privacy Policy.
This consent is limited to the application you submitted and does not extend to any other system. It does not waive section 2: you still represent that the application is yours or that you are authorized to have it tested. You may withdraw consent at any time by cancelling the test, which stops it at the next stage boundary.
2B. Additional scans for internal testing & learning
Separately from the scan you order, we may run ArgosX against an application you submit — at any tier, including tiers beyond the one you paid for — at any time, for our own internal testing, quality assurance, and product learning. This applies to hackathon, event, and other free submissions as well as paid ones. Section 7 governs how the outputs of any scan are used.
3. Acceptable use
You may not use ArgosX to test systems you do not control or are not authorized to test, to attempt to breach or overload third-party infrastructure, or for any unlawful purpose.
4. Payment
Paid tests are billed per test at the price shown at checkout. Free scans are provided at no cost and may be rate-limited. Fees are non-refundable except where required by law.
5. Confidentiality
We treat your application details, credentials and findings as confidential and use them only to perform and improve the service, as described in our Privacy Policy, and except as set out in sections 6 and 7.
6. Publication of results
We publish research about the quality of AI-built applications. To do that we may publish aggregated or anonymized results from scans, including free scans, for example "of 44 apps scanned, 75% were missing a security header". Aggregated and anonymized means the published material does not name your application or identify it by URL, screenshot or any other detail.
We will not publish your application's name, URL or individual results alongside its score unless you opt in, for example by entering a leaderboard or competition, or agreeing to a case study. Where you do opt in, you grant us permission to name and describe your application in marketing material, and you can withdraw that permission at any time by emailing us, after which we will remove it from material we control.
Anything you publish yourself using the sharing features we provide, such as a score card link or embedded badge, is public because you chose to share it.
7. Learning & AI training
The findings, screenshots, session recordings and test trajectories we generate while testing are our work product (see our Privacy Policy). We use them to make ArgosX smarter, including to train, evaluate and develop AI testing models, benchmarks and datasets, some of which we may license or commercialize.
Whenever that material is used beyond delivering your own results, it is de-identified first: no app name, no URL, no branding, no credentials, and no data belonging to your users. Your application's code and your users' data are never sold or licensed. If you would prefer that de-identified outputs from your app's future scans be excluded from datasets we license to third parties, email us and we will exclude them.
8. Disclaimers & limitation of liability
The service is provided without warranties of any kind. To the maximum extent permitted by law, ArgosX is not liable for indirect or consequential damages, and our total liability is limited to the amount you paid for the test giving rise to the claim.
9. Changes
We may update these Terms; material changes will be posted here with a new effective date. Continued use after changes means you accept them.
10. Contact
Questions about these Terms? Email support@getargosx.com.