Terms of Service

1. Agreement to Terms

By accessing or using the StealthMark v6.0 100-point passive perimeter scanner, Domain Fix & Forensic Packs (Cloudflare Edge Worker v6.0, Static PDF CDR Inspector, Anti-SSRF Guard & <3KB Client RASP), CLI (@stealthmark/cli), or related APIs (collectively, the "Service"), you agree to be bound by these Terms of Service. If you do not agree to all terms, you may not access or use the Service.

2. Description of Service

StealthMark provides non-intrusive, passive external cybersecurity reconnaissance across 100 controls (TLS 1.2/1.3, DNS/SPF/DMARC/CAA, Shodan InternetDB passive open ports and CVEs, HTTP security headers, exposed dotfiles, client JS bundle secret patterns, and OWASP Top 10:2025 gates), alongside one-time per-domain remediation packs (Cloudflare WAF Wirefilter expressions, Edge Worker templates, Google Cloud Armor CEL/Terraform rules, Cursor/Claude AI remediation prompts, and White-Label Executive PDF reports). StealthMark performs strictly passive external observations and never executes destructive or intrusive exploitation payloads.

3. Merchant of Record & Payment Processing

Our order process and billing is conducted by our online reseller and Merchant of Record, Polar (Polar Software Inc. / polar.sh). Polar handles all customer inquiries, tax management, and invoicing. When purchasing a StealthMark Fix & Forensic Pack, you agree to comply with Polar's Terms of Service and Privacy Policy.

4. Service Tiers & Billing

• Free 100-Point Perimeter Recon ($0): Evaluates any public domain across 100 tactical controls, displays the Executive Grade (A+ to F), OWASP Top 10:2025 gate status, and reveals the top 2 findings (plus the 3rd finding and passive CVE/port radar alerts when a work email is provided).
• Fix & Forensic Pack: $49 USD one-time payment per domain ($24.50 USD with the 50% Community Defense Grant code BLACKOCTOBER or FTZKIH6N valid through December 31, 2026) that unlocks all remaining findings, exact Grade A+ configuration blueprints, the 3-page White-Label Forensic PDF report, Cloudflare WAF & Google Cloud Armor rules, Edge Worker template, and Cursor/Claude AI Fix Prompts for that domain. It is a one-time purchase with zero recurring subscription.
• Enterprise Security Assessment: Custom-scoped Red Team reconnaissance, API/Cloud architecture security review, and Blue Team edge WAF hardening under a separate mutual NDA and statement of work via security@stealthmark.ioCopy.

5. Acceptable Use & Authorization

You agree not to use StealthMark to:

• Facilitate distributed denial of service (DDoS) attacks, brute-force attacks, or unauthorized exploitation of third-party systems.
• Bypass rate limits or scrape proprietary remediation blueprints and WAF rules for commercial resale outside authorized agency client engagements.

StealthMark reserves the right to rate-limit or block abusive automated scanning traffic violating this policy.

6. Availability & Disclaimer

The automated scanner and Fix Pack deliverables are provided on an "as is" and "as available" basis based on publicly observable network signals at the time of the scan. Custom SLA commitments apply only to Enterprise engagements under a signed agreement.

7. Contact Information

For legal inquiries or terms clarification, please contact our support desk at support@stealthmark.ioCopy or our security desk at security@stealthmark.ioCopy.