Terms of Service

DRAFT: needs legal review before use. Prepared by the product team on 18 Oct 2026. Not legal advice. Do not publish until reviewed by a qualified lawyer (England and Wales, plus US consumer-law review).

Service: Is My Agent Safe (ismyagentsafe.com)

Provider: YOUR EVENINGS LTD (trading as Is My Agent Safe), a company registered in England and Wales, company number 17185055. Registered office: 66 Paul Street, London, England, EC2A 4NA ("Your Evenings Ltd", "we", "us").

Contact: hello@ismyagentsafe.com

Last updated: [date of publication]

1. What these terms cover

These terms apply when you use our free check, buy a full report, or subscribe to monitoring or the agency plan (together, "the Service"). By using the Service you agree to these terms, our Refund Policy and our Privacy Policy.

2. Limits of the check

Please read this section carefully. The name of our Service asks a question. Our answer is never "yes, it's safe." We can show you what we checked and what we found; we can't promise that your agent can't be attacked.

• Point-in-time. Every result and report describes what we checked and found at the date and time (UTC) shown on it. Your setup, your software and the threats against it change. A result can be out of date minutes later.
• Look-only. We review the audit output, version and configuration you give us, and (only for systems you've proven you control) make a small number of ordinary, non-intrusive requests from the outside. We don't log in, guess passwords, exploit vulnerabilities, send messages to your agent, or try to break anything.
• Not a penetration test. The Service isn't a penetration test, a security audit by a certified professional, a code review, or a compliance certification.
• No guarantee. A green result means "no issues found in the checks we ran." It doesn't mean your agent, your computer, your accounts or your data are free of vulnerabilities, and it isn't a guarantee or warranty of security.
• Only what's listed. Each result lists what we didn't check. Anything not listed as checked wasn't checked.
• Data we rely on. Version and vulnerability checks rely on public advisory data (for example osv.dev and project changelogs) as of the date shown in the report. They may be incomplete or wrong.
• You decide. Fix suggestions and copy-paste commands are general guidance. Back up first, review each command, and apply changes at your own risk. You're responsible for your systems and for any changes you make.

3. Who can use the Service

You must be at least 18 and able to enter into a contract. If you use the Service for a business, you confirm you're authorized to bind that business.

4. Only check systems you own or are authorized to test

• You may only submit audit output, configuration and addresses for systems you own or are expressly authorized to test.
• Before any outside check, you must prove control using one of our verification methods (a file at /.well-known/ismyagentsafe-verify.txt, a DNS TXT record at _ismyagentsafe.<your-domain>, or an X-IsMyAgentSafe-Verify header). We record that proof together with your confirmation.
• We refuse private, internal and reserved network addresses, and we may refuse or stop any check at our discretion.
• Misuse (for example trying to check systems you don't control) may be reported to the relevant authorities.

5. What you send us

• Don't paste passwords, API keys or tokens. Our check page hides values that look like secrets in your browser before sending, and we hide them again on our side, but no filter is perfect.
• You keep ownership of what you send. You give us a limited license to process it to provide the Service, as described in the Privacy Policy.

6. Paid plans, prices and payment

• Prices are shown in US dollars on the pricing page. At the time of writing: free check $0; full report $29 (one-off); monitoring $9/month; agency founding seat $99/month. Your $99 founding price is locked for 12 months while you stay subscribed. Cancel any time. Taxes may be added where required.
• Payments are processed by our payment provider; we don't see or store your full card details.
• Subscriptions renew automatically each month until you cancel. You can cancel any time, and the plan stays active to the end of the period you've paid for.
• Refunds are covered by our Refund Policy, including the automatic refund if a check can't finish.

7. Monitoring

Monitoring re-checks your verified setup on a schedule and sends alerts by email. Alerts are best-effort and may be delayed or missed. Monitoring stops automatically if your ownership proof is removed.

8. Acceptable use

Don't use the Service to attack, probe or disrupt any system; to reverse-engineer or overload the Service; or to resell it except under an agency plan.

9. Our liability

• Nothing in these terms limits liability that can't legally be limited, including for death or personal injury caused by negligence, or fraud.
• Subject to that, we aren't liable for indirect or consequential losses, or for loss of data, profits, or business, or for losses caused by a security incident affecting your systems, whether or not our check found the issue.
• Subject to the above, our total liability to you for any claim is limited to the amount you paid us in the 12 months before the claim.
• If you're a consumer, you also have rights under the law where you live that these terms don't take away.

[Lawyer to confirm the cap and its enforceability for US and UK/EU consumers.]

10. Changes and ending the Service

We may update these terms; material changes will be emailed to paying customers at least 14 days before they take effect. You can stop using the Service at any time. We may suspend accounts that break these terms.

11. Law and disputes

These terms are governed by the laws of England and Wales. If you're a consumer, you may also be able to bring claims in the courts where you live, and mandatory consumer protections of your home country or US state still apply. [Lawyer to review: US arbitration/class-action language deliberately not included in this draft.]