Terms of Service
Last updated: August 2026.
1. Authorized use only
You may only scan domains you own or are explicitly authorized to test. You confirm ownership before any active audit runs. Scanning assets without authorization is prohibited and grounds for immediate termination.
2. The service
Notra performs automated security assessments and returns verified findings. We use non-destructive probes by default and do not touch money-movement endpoints without your explicit consent. Security testing is inherently probabilistic, a clean report is not a guarantee that a site is free of vulnerabilities.
3. Accounts & billing
You’re responsible for activity under your account and for keeping credentials secure. Subscriptions bill monthly until cancelled; one-time audit credits are consumed when a scan is run. Prices and included limits are described on the pricing page.
4. Acceptable use
Don’t use Notra to attack third parties, to resell raw scanning against unconsented targets, or to violate any applicable law. Misuse can be reported via our abuse channel.
5. Liability
The service is provided “as is.” To the extent permitted by law, Notra is not liable for indirect or consequential losses arising from use of the service or from acting on (or failing to act on) a report.
6. Refunds
If an audit fails to deliver a report, the run auto-retries once; if it still fails, the credit is returned to your balance automatically, and you can request a refund of that charge. You never pay for a scan that didn’t run. Subscriptions can be cancelled anytime and remain active through the end of the paid period.
Questions about these terms? Contact us. See also our privacy notice.