Skip to main content
zeriflow --terms

These Terms of Use govern the use of the ZeriFlow service accessible at https://zeriflow.com.

Last updated: 2026-09-20

DEFINITIONS

Service — the Zeriflow external-security service and controlled Z-Key Design Partner Preview products
User — any person creating an account on ZeriFlow
Scan — an authorized security assessment of a website, source code, or approved infrastructure evidence
Results — the information generated by the scan (score, findings, recommendations)

ACCEPTANCE

Using the Service implies unreserved acceptance of these Terms of Use. If you do not accept these terms, you must not use the Service.

SERVICE DESCRIPTION

  • Zeriflow performs hosted external web and security assessment of authorized public surfaces
  • Hosted Advanced Scan analyzes explicitly submitted source; Z-Key Code provides local-first source-code security assessment
  • Z-Key Infrastructure provides local or on-premises infrastructure, security, and operations intelligence for authorized environments
  • The products provide findings, evidence, prioritization, reasoning, and recommendations within their documented scope

The Service provides analyses for informational purposes only. The results do not constitute a certified security audit, a penetration test, or legal advice. ZeriFlow does not guarantee the completeness of analyses nor the absence of undetected vulnerabilities.

RESPONSIBLE USE

The User agrees to:

  • Only scan websites they own or for which they have explicit authorization from the owner
  • Not use the Service to prepare cyberattacks
  • Not attempt to overload the Service (rate limiting, scraping)
  • Not automate access to the Service without authorization
  • Not bypass the Service's security or billing mechanisms
  • Comply with applicable laws and obtain authorization before assessing any target

Quick Scan uses read-only, non-destructive HTTP/application, DNS, TLS/certificate, protocol/service-reachability, and safe exposure checks. It does not intentionally perform exploitation, credential attacks, authentication bypass, brute force, destructive payloads, or state-changing infrastructure operations.

Z-KEY DESIGN PARTNER PREVIEW

  • Z-Key Code and Z-Key Infrastructure are controlled Design Partner Preview products; access is manually reviewed, participation is not guaranteed, qualification is ongoing, and preview participation is not certification or general availability
  • Only infrastructure owned by the user or covered by explicit authorization may be accessed; read-only actions remain constrained by configured identity, permissions, policy, and audit controls
  • Vulnerability Intelligence may use imported or locally generated normalized evidence, asset-linked findings, contextual prioritization, and Z-Key reasoning
  • OpenVAS/Greenbone integration is in qualification. Active assessment is disabled in the current public release and any future use must be explicitly authorized and approval-gated; arbitrary public or unauthorized third-party scanning is prohibited
  • The current OT/industrial preview does not authorize or provide active mutation of PLCs, controllers, HMIs, or industrial control systems
  • External Windows and Linux production qualification continues and is not implied by preview access

SOURCE CODE

  • Hosted Advanced Scan source is analyzed in memory on hosted infrastructure and deleted after analysis
  • Z-Key Code is local-first and does not upload full source by default unless the user explicitly selects a hosted function that requires it
  • Analysis results and operational evidence are retained according to the Privacy Policy and selected workflow
  • ZeriFlow acquires no intellectual property rights over submitted code

USER ACCOUNT

The User is responsible for the confidentiality of their login credentials. Any activity carried out from their account is deemed to have been performed by them.

LIABILITY LIMITATION

ZeriFlow is not responsible for:

  • Consequences of misinterpretation of results
  • Damages resulting from the use or inability to use the Service
  • Temporary unavailability of the Service (maintenance, outages)
  • User actions following Service recommendations
  • Vulnerabilities not detected by the Service

ZeriFlow's liability is limited to the amount paid by the User in the last 12 months.

INTELLECTUAL PROPERTY

The Service, its source code, design, and algorithms are the exclusive property of ZeriFlow. The User has a limited, non-exclusive right to use the Service within the scope of their subscription.

TERMINATION

The User may delete their account at any time from account settings. ZeriFlow reserves the right to suspend or terminate an account in case of violation of these Terms.

APPLICABLE LAW

The operator is an independent software publisher based in Germany. Applicable-law and competent-forum wording is pending owner/legal approval; mandatory consumer and data-protection rights remain unaffected.

Contact

For any questions: the contact page