Terms of Service

1. Scope of Authorization & Ownership Verification

By submitting an order on BreachSweep, you represent and warrant that you are the lawful owner or authorized security administrator of the designated target domain, APIs, and associated web infrastructure. You explicitly authorize BreachSweep and its automated offensive security agents to perform non-destructive security scanning, reconnaissance, and vulnerability verification against the declared targets.

Target ownership must be validated via our DNS TXT record challenge or HTTP well-known token verification before active, authenticated tests commence. BreachSweep reserves the right to terminate audits immediately if target ownership cannot be validated.

2. Non-Destructive Testing

BreachSweep is designed to be non-destructive. Our agents and tooling are configured to test authorization boundaries, IDOR vulnerabilities, state machines, and API logic using benign proof-of-concept payloads.

The following are excluded from every engagement:

• Distributed Denial of Service (DDoS) or brute-force bandwidth exhaustion
• Data destruction, unauthorized deletion (DROP/DELETE) of production records
• Persistent modification of third-party systems or external services
• Exfiltration of confidential customer personal identifiable information (PII) beyond minimal PoC verification

3. Delivery Window & Refunds

BreachSweep aims to deliver your report within the delivery window of your tier (Recon Sweep: 4 hours; Deep Logic Sprint: 24 hours), calculated from the moment target domain ownership is verified.

If we miss the delivery window for your tier, you can request a full refund by emailing info@breachsweep.com.

4. Limitation of Liability

BreachSweep reports represent point-in-time assessments based on observable interfaces and authorized testing scope. No security assessment can guarantee the absolute absence of undiscovered vulnerabilities. BreachSweep shall not be held liable for security incidents arising from out-of-scope assets or vulnerabilities introduced after the audit date.

5. Provider, Customers & Contract

Services are provided by VİRİLE PEAK TAKVİYE GIDA TİC. LTD. ŞTİ., Bahçelievler Mah. Koca Yusuf Sok. H. Tunç Apt. No:2 İç Kapı No: 4, Merkez / Burdur, Türkiye (see Imprint). Services are offered to businesses only (B2B); by ordering you confirm that you act in a commercial or professional capacity. Payment is processed via our checkout provider Whop.

6. Subscriptions & Cancellation

Continuous Watchdog subscriptions renew monthly and can be cancelled at any time with effect from the end of the current billing period, via your checkout account or by email to info@breachsweep.com.

7. Governing Law

These terms are governed by the laws of the Republic of Türkiye. Contact: info@breachsweep.com.