Terms of Use

1. Who we are

Kayvrn is operated by Conso4s Ltd, a company registered in England and Wales with company number 11083797, registered office Suite 3, Middlesex House, Rutherford Close, Stevenage, SG1 2EF, United Kingdom ("Conso4s", "we", "us", "our"). Kayvrn is a Conso4s product. Conso4s is the only contracting party, worldwide. We do not push our obligations onto unnamed affiliates.

These Terms of Use ("Terms") govern your use of the Kayvrn website at kayvrn.com, the Kayvrn application at app.kayvrn.com, and everything we deliver through them (together, the "Service").

By creating an account, submitting a domain, or using any part of the Service, you agree to these Terms. If you use Kayvrn for an organisation, you confirm you have authority to bind that organisation. If you do not agree, do not use the Service.

These Terms should be read with our Privacy Policy. Where there is a conflict about how we handle personal data, the Privacy Policy and any Data Processing Addendum signed with you take precedence on that point.

2. What Kayvrn does

Kayvrn is continuous, agentless, outside-in security monitoring. You prove you control a domain, and we then scan that domain from the outside on a recurring schedule, run a catalogue of checks against what is publicly reachable, join the results to public threat intelligence, and produce a graded report with prioritised findings.

Everything Kayvrn does is observation of publicly available information about your infrastructure. We install nothing on your systems and we require no credentials to your systems.

3. Your account

• You must be at least 18 and able to enter a binding contract. Kayvrn is a business service and is not offered to consumers for personal use.
• Give us accurate account details and keep them current. We use your email address for verification, service notices, and scan results.
• You are responsible for keeping your passphrase and any API keys secret, and for everything done under your account or by members you invite to your organisation.
• Tell us promptly at [email protected] if you believe your account has been compromised.
• We may enable multi-factor authentication and other protections. Turning them off is your choice and your risk.

4. Plans, billing and cancellation

Kayvrn is sold as a monthly subscription tier (Free, Pro, Growth, Business). Each tier sets how many domains you may monitor and how many scans per domain are included. Additional scans, one-off scans, and domains beyond your tier allowance are charged separately. Current prices are on our pricing page and are shown to you before you pay.

• Prices are in US dollars and exclude taxes unless stated. Any VAT or sales tax due is added at checkout.
• Payments are taken by Stripe. We do not receive or store your full card details.
• Paid subscriptions renew automatically each month until cancelled. You authorise us to charge your payment method on each renewal.
• You can cancel at any time from your billing settings. Cancellation takes effect at the end of the billing period you have already paid for. You keep access until then.
• Because the Service is delivered digitally and immediately, we do not give pro-rata refunds for a period already started. This does not affect any rights you have under mandatory law.
• If a payment fails, we may suspend scanning and access to reports until the balance is settled. Data is retained during a suspension in line with the Privacy Policy.
• We may change prices. Changes apply from your next renewal and we will tell you before they take effect.

5. Your authority to scan the domains you submit

This section matters more than any other. Kayvrn probes real infrastructure on the internet. Pointing it at something you do not control is not acceptable and may be unlawful.

• You may only submit a domain that you own, or that you are expressly authorised in writing by its owner to have assessed.
• By submitting a domain you warrant that this authority exists, that it covers automated, recurring, outside-in scanning by a third-party provider, and that it remains in force for as long as the domain is monitored.
• We require proof of control before we scan. Verification is by DNS TXT record, a file served at a path we specify, an HTML meta tag, or an email challenge to an administrative address on the domain.
• Control is re-checked periodically. If a domain fails re-verification you get a grace period to fix it, after which monitoring for that domain stops.
• Verification proves control of the domain. It does not prove you own the underlying hosting, and it is not a substitute for your own authorisation from anyone else whose systems are in scope.
• Tell us immediately if you lose authority over a monitored domain. We will stop scanning it.
• You indemnify Conso4s against any claim, loss, or cost arising from a domain you submitted without the authority described here.
• We may refuse, pause, or remove any domain, with or without reason, if we have concerns about authority or abuse.

6. Acceptable use

You must not:

• Submit a domain you do not control or have written authority to have scanned.
• Use Kayvrn output to attack, exploit, or gain unauthorised access to any system, whether yours or anyone else's.
• Add email addresses to a breach watchlist unless they belong to your own organisation and you have a lawful basis and, where required, have told the people concerned.
• Resell, publish, or pass off Kayvrn reports as your own assessment without our written permission.
• Probe, load-test, reverse engineer, scrape, or attempt to break the Service, circumvent rate limits or tier allowances, or share credentials to avoid paying for seats or domains.
• Use the Service unlawfully, or in a way that damages or is likely to damage Conso4s or another customer.

We may suspend or terminate access immediately for a breach of this section, and we will co-operate with law enforcement where we are legally required to.

7. What Kayvrn is not

Kayvrn is an outside-in monitoring service. It is deliberately non-intrusive. Read the following as hard limits on what a scan can tell you.

• It is not a penetration test. We observe and infer; we do not attempt to exploit, bypass authentication, or prove impact by breaking in.
• It is not an audit or a certification. A Kayvrn grade is our assessment of your externally visible posture, not a compliance attestation and not a warranty to any third party.
• It sees only what is reachable from outside. Internal networks, code, staff devices, offline processes, and anything behind authentication are out of scope.
• It is point-in-time. Your exposure can change between scans, and a clean result never means you are secure.
• Findings can be wrong in both directions. False positives happen, and no scanner finds everything. Verify before you act on a finding, and do not treat an empty report as proof there is nothing to find.
• Third-party intelligence we join to your results (vulnerability catalogues, exploitation feeds, breach data) comes from external sources whose accuracy and timeliness we do not control.
• Nothing in a report is legal, regulatory, or professional advice. Security decisions and remediation remain yours.

8. Availability and changes to the Service

• We aim for continuous availability but do not guarantee uninterrupted or error-free service, and no formal uptime commitment applies unless we have signed a separate agreement with you.
• We may add, change, or retire checks, tiers, and features. Where a change materially reduces what you are paying for, we will tell you and you may cancel.
• Scanning cadence, queue position, and check depth may vary with your tier and with load.

9. Your data and our platform

• You keep ownership of the domains, configuration, and other material you give us. You grant us the licence needed to run the Service: to scan, process, store, and present results to you and your organisation.
• We own the Service itself, including the check catalogue, scoring, report design, software, and branding. Nothing here transfers that to you.
• Reports we produce for you are yours to use internally and to share with your own advisers, insurers, and customers. Do not present them as an independent audit.
• We may use aggregated, de-identified statistics that cannot identify you or your infrastructure to improve and describe the Service.

10. Warranties

We provide the Service with reasonable care and skill. Beyond that, and to the extent the law allows, the Service is provided as is and we exclude all other warranties, express or implied, including fitness for a particular purpose, non-infringement, and any warranty that the Service will detect every risk or prevent any incident.

11. Limitation of liability

Nothing in these Terms limits liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for anything else that cannot lawfully be limited.

Subject to that, and to the extent permitted by law:

• We are not liable for loss of profit, revenue, business, goodwill, anticipated savings, or for any indirect or consequential loss.
• We are not liable for a security incident, breach, or compromise that Kayvrn did not detect or report, or for your decision to act or not act on a finding.
• We are not liable for the accuracy of third-party intelligence sources, or for downtime, blocking, or damage caused by your own infrastructure or providers reacting to our probes.
• Our total aggregate liability arising out of or in connection with the Service is limited to the fees you paid us in the 12 months before the event giving rise to the claim, or GBP 100 if you have paid us nothing.

12. Suspension and termination

• You may stop using Kayvrn and close your account at any time.
• We may suspend or terminate your access if you breach these Terms, if payment fails, if we are required to by law, or if your use puts the Service or another customer at risk.
• On termination your right to use the Service ends. Data is deleted in line with the retention periods in our Privacy Policy. Export what you need before you close the account.

13. Changes to these Terms

We may update these Terms. The effective date at the top of this page always shows the current version. If a change materially affects your rights, we will give reasonable notice by email or in the app before it takes effect. Continuing to use the Service after that means you accept the updated Terms.

14. Governing law and disputes

These Terms and any dispute arising from them are governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction. If you are a consumer resident elsewhere, you keep the benefit of any mandatory protections of your local law.

15. General

• If any part of these Terms is unenforceable, the rest stays in force.
• Not enforcing a right straight away does not waive it.
• You may not assign these Terms without our consent. We may assign them to a successor of our business.
• These Terms, with the Privacy Policy and any signed addendum, are the whole agreement between us about the Service.
• Neither party is liable for failure to perform caused by events outside its reasonable control.

16. Contact

• Email: [email protected]
• WhatsApp: +44 1438 893080
• Post: Conso4s Ltd, a company registered in England and Wales with company number 11083797, registered office Suite 3, Middlesex House, Rutherford Close, Stevenage, SG1 2EF, United Kingdom
• Company number: 11083797. VAT number as shown on invoices.