Terms of Service

1.The Service

TUT1 is an external attack surface intelligence platform. Depending on the plan, the Service may include passive enumeration (subdomains, hosts, certificates, DNS data sourced from public and third-party indexes), active scanning (open-port and service fingerprinting, CVE detection), certificate and TLS posture analysis, anti-phishing look-alike domain detection, and breach or credential exposure monitoring, including monitoring of deep and dark web sources.

We offer three plans: Oneshot, a single one-time passive recon pass with no active scanning; Monthly and Annual, auto-renewing subscriptions covering one validated domain under continuous active and passive monitoring. Current pricing is published on our pricing page and in the checkout flow.

2.Eligibility & accounts

You must be at least 18 years old and capable of forming a binding contract to use the Service. If you create an account on behalf of an organization, you represent that you have the authority to bind that organization to these Terms.

You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account. Notify us immediately at contactus at tut1.io if you suspect unauthorized access.

3.Authorization to scan

By submitting a domain, IP range, or other asset to the Service, you represent and warrant that you own that asset, or that you have obtained explicit authorization from its owner to have it scanned — including active scanning where the plan performs it.

We reserve the right to request proof of ownership or authorization (for example, a DNS TXT verification record or a signed authorization letter) before enabling active scanning on a domain, and to suspend or refuse scanning where authorization cannot be confirmed.

4.Plans, billing & renewal

Fees are billed in advance and processed by our payment provider, Stripe. Prices are quoted in USD; Stripe may display and charge an equivalent amount in another supported currency at checkout.

• Oneshot is a one-time payment for a single passive scan report. It does not renew and is not a subscription.
• Monthly and Annual plans automatically renew at the then-current price at the end of each billing period until cancelled. You can cancel at any time through your account billing portal; cancellation stops future renewals but does not refund the current, already-paid period.
• Additional domain slots may be purchased at a discount to your existing subscription rate, where offered at checkout.

Except where required by mandatory consumer protection law (including the Brazilian Consumer Defense Code, where applicable), fees are non-refundable once the corresponding scan or billing period has started.

5.Acceptable use

Use of the Service is subject to our Acceptable Use Policy, which is incorporated into these Terms by reference. It covers, among other things, prohibited targets, prohibited uses of scan and breach data, and the consequences of misuse.

6.Intellectual property & data ownership

TUT1 retains all rights, title, and interest in the platform, software, and underlying methodology. Subject to your compliance with these Terms, we grant you a limited, non-exclusive, non-transferable license to access and use the Service and to use scan results for your own internal security purposes.

As between you and TUT1, you own the scan results generated for the assets you submitted. You grant TUT1 a license to process, store, and display that data as necessary to operate and improve the Service.

7.Third-party & breach data

Breach, credential exposure, and dark web monitoring features surface information sourced from public and third-party datasets. TUT1 does not independently verify the accuracy or completeness of this data and makes no warranty regarding it. This data is provided solely for defensive security purposes — to help you understand and remediate exposure tied to your own organization.

8.Availability & disclaimer

The Service is provided "as is" and "as available." We do not guarantee that the Service will be uninterrupted, error-free, or that it will detect every vulnerability or exposure. To the maximum extent permitted by applicable law, we disclaim all implied warranties, including merchantability, fitness for a particular purpose, and non-infringement.

9.Limitation of liability

To the maximum extent permitted by applicable law, TUT1's total liability arising out of or related to the Service will not exceed the fees you paid to TUT1 in the twelve (12) months preceding the claim, and TUT1 will not be liable for indirect, incidental, special, consequential, or punitive damages. Nothing in these Terms limits liability that cannot be limited under applicable law, including in cases of willful misconduct, gross negligence, or fraud.

10.Indemnification

You agree to indemnify and hold TUT1 harmless from claims, damages, and expenses (including reasonable legal fees) arising from your breach of these Terms, your violation of applicable law, or your submission of a target for scanning that you were not authorized to submit.

11.Manual penetration testing

Manual penetration testing is offered as an additional, separately-scoped service. It is not included in any subscription plan and will not begin until both parties have signed a separate statement of work and rules of engagement defining scope, timing, and authorization.

12.Data protection

Our collection and processing of personal data, including cross-border transfer to infrastructure hosted in the United States, is described in our Privacy Policy.

13.Suspension & termination

We may suspend or terminate your access to the Service if we reasonably believe you have violated these Terms or the Acceptable Use Policy, failed to pay applicable fees, or if required to do so by law or a competent authority. You may stop using the Service and cancel your subscription at any time.

14.Export & sanctions compliance

You may not use the Service if you are located in, or ordinarily resident in, a country or territory subject to comprehensive trade sanctions, or if you are listed on an applicable restricted-party list.

15.Changes to these Terms

We may update these Terms from time to time. For material changes, we will provide at least 30 days' notice by email or in-app notice before the changes take effect. Continued use of the Service after that date constitutes acceptance of the updated Terms.

16.Governing law & disputes

These Terms are governed by the laws of the Federative Republic of Brazil, without regard to its conflict-of-laws principles. Any dispute arising from these Terms or the Service will be submitted to the courts of the comarca of São Paulo, SP, Brazil, unless mandatory law grants you the right to bring a claim in your own jurisdiction.

17.General provisions

If any provision of these Terms is found unenforceable, the remaining provisions remain in full force. These Terms, together with the Privacy Policy and Acceptable Use Policy, constitute the entire agreement between you and TUT1 regarding the Service. You may not assign these Terms without our consent; we may assign them in connection with a merger, acquisition, or sale of assets. Neither party is liable for delays caused by events beyond its reasonable control.

18.Contact

Questions about these Terms can be sent to contactus at tut1.io.