Terms of Service

AIM Safe runs automated, non-destructive security checks on internet-facing assets you add (domains, websites, APIs and IP addresses), and sends you a daily report and email alerts about what it finds.

The checks are detection only: certificate and TLS configuration, DNS and email security records, HTTP security headers, publicly exposed files, open ports, known vulnerabilities in software versions we can see, and a fixed allowlist of safe detection templates. We do not exploit vulnerabilities, guess passwords, or put load on your systems.

The service shows you issues we can detect from the outside. It is not a full penetration test or audit, and it will not find every weakness.

Before any check runs, you must prove you control each asset by publishing a DNS TXT record or a file at a /.well-known/ path that we give you. We re-check ownership before every daily run. If the re-check fails, we pause the asset and tell you.

You must not add, or try to prove ownership of, an asset that you do not own or are not authorised to have tested.

After ownership is proved, no check runs until you sign the authorisation below for that asset. We store who signed it, their title, the time, their IP address, the terms version and the assets it covers. You can withdraw it at any time from the asset page, and checks on that asset stop from the next run.

By signing, you confirm that you have the authority to give this permission for the organisation that owns the asset. If an asset is hosted by a third party (for example a cloud or hosting provider), you are responsible for making sure their terms allow this kind of testing.

You sign in with a one-time link sent to your email. Keep access to that mailbox secure. You are responsible for activity in your account and for keeping alert recipients up to date.

Daily monitoring costs $599/month, billed monthly in advance through Stripe. You can add and verify assets before you pay; checks only run while the subscription is active.

You can cancel at any time from Billing. Monitoring continues to the end of the paid period and then stops. [Refund policy to be decided.] We will give at least [30] days’ notice of any price change.

You must follow our Acceptable Use Policy. We may suspend an account that breaks it, and we will stop all checks on an asset immediately if we have reason to believe the authorisation was not valid.

Reports include plain-English explanations written with the help of an AI model. They can be incomplete or wrong. Check a finding before acting on it, and make your own decisions about your systems.

You own your data and reports. We use them only to provide the service, as described in our Privacy Policy.

The service is provided “as is”. We do not guarantee that your assets are secure, that every issue will be found, or that the service will be uninterrupted. Using AIM Safe does not certify your systems or make them compliant with any standard.

[Limitation of liability, indemnity and the cap, to be drafted by counsel. Typical cap: the fees paid in the 12 months before the claim.]

We will email you before material changes take effect. If the authorisation text changes, we ask you to sign the new version before checks continue.

[Governing law and venue to be decided.] Questions: pending. AI Makers LLC, [registered address].