Frequently asked questions

Yes, when we do it with your consent. We run an active test only on a domain whose ownership we have verified and for which we hold your signed authorisation. We do not test other people's websites.

We test carefully, but every active test carries a small risk of downtime. That is why you set the scope and the time in the authorisation, and we recommend keeping a current backup.

Nobody can guarantee that. The report and the confirmation describe the state as of the test date. They are not a guarantee of security nor a certificate under Slovak Act No. 69/2018 Coll.

A free passive check of publicly available settings: headers, TLS, DNS, SPF, DKIM, DMARC and public files. It does not attack your website and does not issue a badge.

A confirmation has a unique ID, a QR code and a cryptographic signature, so anyone can verify it. It is valid for 90 days. The badge on your website shows its current status, and we issue it only if no critical finding remains open.

Test outputs are deleted after 90 days. We keep accounting documents as the law requires.

The test uses the AI model of the provider we list as a subprocessor in the data processing agreement. Client data is not sent to Chinese models.

By card through Stripe or by invoice with a bank transfer. We do not store card data; Stripe processes it.

We do not issue the confirmation until the finding is fixed. After fixing, you can repeat the test. A retest is included in the Pro package.