Terms
Last updated 25 October 2026.
Authorization required
You may only scan websites you own or are explicitly authorized to security-test. Unauthorized scanning is illegal. By using this service you confirm you have that authority. For Deep / Active Scan you must also complete domain ownership verification. We may refuse or stop any scan and report abuse.
What we provide
Lordevo Security provides automated security scans for information. Safe Scan is non-intrusive. Deep Scan uses automated scanners (nuclei, Lordevo Deep modules, and optionally nikto/ZAP/nmap). These are not a guarantee of security, not a penetration test by a human, and not manual exploitation.
Code security review
The optional code review is only for repositories you own or maintain; the token you give us must come from an account with maintainer access. It is an automated, AI-assisted, source-only review of part of your code: not a manual code audit, not a guarantee, and it may miss issues or report ones that aren't real. It runs in a queue and may take up to a few days at busy times.
No guarantees
Automated findings can be wrong or incomplete. Verify before changing production systems. Keep backups. You are responsible for your systems and for any consequences of scanning.
Fair use
Do not use the service to attack, overload, or scan third-party sites without authorization. We rate-limit and may block abuse. Private/local addresses are refused.
Paid plan
Deep / Active Scan is US$45 one-off. Prices are shown and charged in your billing currency, which we pick from the country you visit from (Malaysian ringgit in Malaysia, euros in Europe, US dollars elsewhere). Paid via Stripe; confirmed when payment succeeds. If we cannot complete a verified scan, we refund you.
Security Care (subscription)
Security Care is US$35 a month, a subscription that renews automatically each month until you cancel. Cancel any time by emailing hello@lordevo.com; it stops before the next payment, and the current month isn't refunded. Active (deep) scans only run against the domain you verified; you verify once at signup and we keep it on file for the subscription. Tell us straight away if you stop controlling the domain, and we will stop scanning it. Monitoring is automated: alerts and reports are best-effort, can miss issues, and are not a guarantee your site can't be compromised.
Liability
To the extent the law allows, our liability for any paid service is limited to the amount you paid for it.