Terms of service

Who operates Module Audit

Module Audit is provided by Cloud & Code Consulting, established in The Netherlands (referred to as “we”, “us” and “our”). You can contact us using the details below.

What the service does

You submit a publicly reachable website URL. Module Audit examines publicly accessible pages and assets, identifies deployed software dependencies and compares its findings with public vulnerability advisories. Depending on your account and plan, features include scheduled scans, report history, AI summaries, email reports and PDF downloads.

Audits have limits: they may miss packages, versions, pages or vulnerabilities, and findings can be incorrect or incomplete. A report without known advisories does not establish that a website is secure. AI summaries can also contain errors. Verify findings before changing a system or relying on a report.

Module Audit is not a penetration test, security certification or guarantee against an incident. It does not sign into target websites or intentionally exploit vulnerabilities. Scans can load a site in a browser, execute its public JavaScript and follow links within the configured scope.

Your account and permitted use

You must be at least 18 and legally able to enter into this agreement. Keep your account information accurate and protect your sign-in account and any guest access token. Tell us promptly if you suspect unauthorised use.

• Only submit sites that you own or are authorised to have scanned. You are responsible for the scope, frequency and recipients you configure, including any permissions required from clients or hosting providers.
• Do not use the service for unlawful activity, harassment, unauthorised reconnaissance, exploitation, disruption or infringement of another person’s rights.
• Do not bypass usage limits, create accounts to abuse free allowances, interfere with the service, or attempt to access another user’s reports or data.
• Do not submit passwords, private access links, API keys, confidential information or sensitive personal data in URLs, site names or report settings. Only add report recipients who are authorised to receive the information.

Guest access is subject to limits and expiry shown in the service. Keep your guest token private; losing it can prevent access to your guest results. Signing in and claiming an unexpired guest audit moves it into your account.

Plans, tokens and payments

The pricing page describes current allowances and features. The price, currency, billing period and any applicable taxes shown before you confirm payment form part of your purchase. Stripe processes payments.

Each audit costs one token. Subscription tokens are used first, reset each billing period and do not roll over. Separately purchased tokens do not expire while your account remains open. Tokens are service credits, have no cash value and cannot be transferred or redeemed for money, except where a refund is required by law.

An audit recorded as failed is credited back automatically. A completed audit still uses a token when it finds no advisories, has limited coverage or cannot identify every dependency. A missing AI summary or undelivered email does not by itself make a completed scan a failed audit.

Subscriptions renew automatically for the billing period shown at checkout until cancelled. Scheduled audits consume tokens and may stop if you have no tokens or exceed your plan’s limits. Scan timing and email delivery are not guaranteed.

Cancellation and refunds

You can manage or cancel your subscription through Billing. The billing portal shows when cancellation takes effect; a cancellation scheduled for the end of a paid period leaves your plan available until then. Contact [email protected] if you need help or believe a charge is incorrect.

Except for statutory rights or a remedy for our failure to supply the agreed service, payments are non-refundable and we do not refund unused tokens or unused portions of a billing period merely because you stop using the service.

Consumers: if you buy as an individual outside your trade or profession and have an applicable statutory withdrawal right, you may withdraw from a distance purchase within 14 days after the contract is concluded, without giving a reason. Email or write to us using the contact details above, identifying yourself and the purchase and clearly stating that you wish to withdraw. You may use this wording: “I withdraw from my Module Audit purchase made on [date], for account [email]. Name: [name]. Address: [address]. Date: [date].”

We reimburse payments covered by a valid withdrawal within 14 days after receiving your notice, using the original payment method unless agreed otherwise, without a refund fee. If you expressly requested service during the withdrawal period, a proportionate charge may apply only where the law permits. A withdrawal right is lost only when the legal conditions, including any required express consent and acknowledgement, have been met. Simply accepting these terms does not waive that right. Statutory remedies for a defective or non-conforming digital service remain available.

Your data, reports and intellectual property

You retain your rights in information you submit. You give us permission to access, store and process it as needed to provide the service, generate reports and deliver them to your chosen recipients. You may use and share your reports, subject to third-party rights and the confidentiality of any information they contain.

Rights in Module Audit’s software, design and branding belong to us or our licensors. These terms give you a non-exclusive right to use the service for its intended purpose; they do not transfer ownership of it. Third-party packages, advisory databases and other materials remain subject to their own rights and licences.

Our privacy policy explains how we handle personal data, including information sent to payment, email and AI providers. It is an information notice, not a request to consent to every form of processing.

Retention, suspension and account closure

Report history is limited by your plan, as explained in the privacy policy. Save any reports you need before changing plans or deleting a site or account. A downgrade may reduce the history available to you.

You can delete your account from Account. This removes your active account, sites, reports and token balance and requests immediate cancellation of your subscription. It does not automatically refund purchases. If cancellation fails or you receive a later charge, contact us so we can resolve it. Records required by law may be retained separately.

We may restrict or suspend access when reasonably necessary to address misuse, non-payment, a security risk or a legal requirement. Where practicable, we will explain the reason and give you an opportunity to resolve it. Contact us if you believe a restriction is a mistake.

Availability and responsibility

We will provide the service with reasonable care and skill. Maintenance, outages and changes to target sites or third-party services can affect availability and results. We do not promise uninterrupted operation, complete detection or any particular security outcome. Beta features may change.

For business customers, to the extent permitted by law, our total liability arising from the service is limited to the fees you paid us in the 12 months before the event giving rise to the claim. We are not liable to business customers for indirect or consequential loss, lost profits, lost business opportunities or loss of data.

These exclusions and limits do not apply to fraud, intentional misconduct or deliberate recklessness by us or our management, or to liability that cannot lawfully be excluded or limited. They do not restrict mandatory consumer rights.

Changes to the service or these terms

We may make reasonable changes to maintain, secure or improve the service or respond to legal requirements. We will notify affected users in advance of material changes to these terms, prices or paid features, stating when they take effect. Price changes apply to a future billing period, not a period already paid for.

You may cancel before a material change takes effect. If we discontinue a paid service or materially reduce it during a period you have paid for, we will provide the remedies required by law, including any applicable refund. We will not apply changes retroactively to remove accrued rights.

Dutch law and resolving complaints

Dutch law governs these terms. Business disputes are submitted to the competent court in The Netherlands. If you are a consumer, this choice does not deprive you of mandatory protections or rights to bring proceedings in your country of residence.

Please send complaints and questions to [email protected], with enough information for us to investigate. If a provision is unenforceable, the remaining provisions continue to apply to the extent permitted by law.