Terms of Service
Effective: 2026-05-12
These terms govern your use of SolEye — the hosted continuous-pentest platform operated at soleye.tech (the "Service"). By creating an account, running a scan, or otherwise using the Service, you agree to these terms.
1. Authorization to test
You warrant that you own — or have explicit written authorization from the owner of — every target you submit. You will not use the Service to test any system you are not authorized to test.
Unauthorized scanning may violate the Computer Fraud and Abuse Act (CFAA) and analogous laws in your jurisdiction; sole legal liability rests with you.
2. Scope enforcement
Scans are confined to the targets you verify (DNS TXT, HTML meta, or /.well-known file). The sandbox enforces network-egress rules in production. We may suspend your account if our logs show traffic to assets outside your verified scope.
3. Findings handling
You are responsible for triaging and remediating findings. We do not share findings with third parties without your written consent, except where compelled by law (subpoena, court order). Findings are retained for 90 days then purged unless you request earlier deletion.
4. Acceptable use
Forbidden:
- denial-of-service or flood attacks
- password brute force above 100 attempts/minute
- exploiting findings to extract data beyond what's needed to demonstrate
impact
- scanning shared infrastructure when only one tenant is in scope
- using the Service to harm, harass, or surveil people
5. AI agent
The offensive AI agent operates under the same scope rules. We do not train models on your findings or scan output. Your data is processed in transit only; raw outputs may be cached for up to 24 hours for debugging and then purged.
6. Pricing model
SolEye operates on a one-time, pay-per-service model. There are no recurring subscriptions and no auto-renewals.
- Audit — USD 99 one-time per domain. Delivered within 1 business
day. Includes a full PDF report, finding list with severity ratings, and remediation recommendations.
- Remediation packages — purchased only if you decide to have us
fix the findings, after you read the report. Tiers are framed by how many critical findings the package covers; all other severities (high · medium · low · info) are always included: - Quick Fix — USD 399 — up to 2 critical findings · 2 business days - Standard — USD 899 — up to 4 critical findings · 3 business days - Major — USD 1 999 — unlimited critical findings + full hardening pass · 5 business days - Custom — quoted on scope, scheduled after a free 15-min call
- Optional add-ons (re-audit certificate, monthly retainer) carry their
own one-time or recurring price and are documented at point of sale.
Buying an audit creates no obligation to buy remediation. Buying remediation creates no obligation to buy further audits. Every line item on your invoice is its own contract.
7. Personal manager
Every paid order receives a named human account manager reachable on Telegram and email. Standard office hours are 09:00–21:00 UTC; active incidents are handled 24/7 once you flag them.
8. Liability cap
Our liability to you is capped at the total fees paid by you in the twelve (12) months preceding the event giving rise to the claim, or USD 1 000, whichever is greater. We provide no warranty that the Service will identify all vulnerabilities; absence of findings is not absence of weakness.
9. Bug-bounty / coordinated disclosure
If a scan or AI mission discovers a vulnerability that appears to be a 0-day (no published CVE), you may opt to coordinate responsible disclosure through us. Coordination is optional and free for paying customers.
10. Refunds and cancellation
Because every order is one-time, there is nothing to "cancel" — you simply stop placing new orders. Once a deliverable (audit report, remediation patch) has been started, the corresponding fee is non-refundable. If you cancel before work starts you receive a full refund. Workmanship issues are covered by the fix-warranty bundled with the relevant remediation tier.
11. Governing law
These terms are governed by the laws of the European Union and, where applicable, the country in which the SolEye operating entity is established. Disputes are resolved by the competent EU courts.
12. Changes
We will notify you in-app and by email at least 14 days before any TOS change takes effect. Continued use after the effective date constitutes acceptance.
Contact
Questions about these terms, account issues, or commercial enquiries: [soleye.support@gmail.com](mailto:soleye.support@gmail.com).
For faster, conversational support: Telegram @soleye.