These Terms of Service ("Terms") govern your access to and use of Macan (the "Service"), a vulnerability assessment and penetration testing management platform. By creating an account or using the Service, you agree to these Terms.
1. Description of Service
Macan provides automated vulnerability scanning, penetration testing workflow management, and reporting tools for internal and public-facing network and web assets.
2. Authorization to Scan
You are solely responsible for ensuring you have the legal right and explicit authorization to scan any target you submit through the Service. Scanning systems you do not own or do not have written authorization to test may be illegal in your jurisdiction and is strictly prohibited under these Terms. We may require you to confirm authorization before a scan is executed, and we reserve the right to suspend or terminate accounts found to be scanning unauthorized targets.
3. Account Registration
You must provide accurate and complete information when creating an account. You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account. Notify us immediately if you suspect unauthorized access to your account.
4. Subscription and Billing
- The Service is offered on a subscription basis, billed monthly, every 6 months, or annually, as selected at signup.
- Subscriptions renew automatically at the end of each billing period unless canceled before the renewal date.
- Payments are processed by Xendit (for Indonesian Rupiah) or Creem (for other currencies). By subscribing, you also agree to the applicable payment processor's terms.
- Prices are subject to change with reasonable advance notice; changes apply to future billing periods, not periods already paid for.
- See our Refund Policy for details on cancellations and refunds.
5. Acceptable Use
You agree not to:
- Use the Service to scan or attack systems without proper authorization.
- Use the Service in any way that violates applicable law.
- Attempt to interfere with, disrupt, or gain unauthorized access to the Service's infrastructure.
- Resell or sublicense access to the Service without our written consent.
- Use the Service to store or transmit malicious code intended to harm third parties outside the scope of an authorized engagement.
6. Intellectual Property
The Service, including its software, design, and underlying technology, is owned by us and protected by intellectual property laws. Scan results and reports generated for your workspace belong to you; we do not claim ownership of your scan data or findings.
7. Disclaimers
The Service is provided "as is" and "as available," without warranties of any kind, express or implied. We do not guarantee that the Service will identify every vulnerability present in a scanned target, or that it will be uninterrupted or error-free. The Service is a tool to assist your security program, not a substitute for comprehensive security review or professional judgment.
8. Limitation of Liability
To the maximum extent permitted by law, we are not liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of the Service, including but not limited to loss of data, revenue, or business opportunities, even if we have been advised of the possibility of such damages. Our total liability for any claim arising from these Terms or the Service is limited to the amount you paid us in the 12 months preceding the claim.
9. Termination
You may cancel your subscription at any time from your account settings. We may suspend or terminate your access to the Service if you violate these Terms, including unauthorized scanning of targets, without prior notice in cases of serious or repeated violations.
10. Changes to These Terms
We may update these Terms from time to time. We will post the updated version on this page with a revised "Last updated" date. Continued use of the Service after changes take effect constitutes acceptance of the revised Terms.
11. Governing Law
These Terms are governed by the laws of Indonesia, without regard to its conflict-of-law principles, except where mandatory local consumer protection law in your jurisdiction requires otherwise.
12. Contact Us
Questions about these Terms can be sent to legal@xrisko.com or via our Contact page.