Legal
Last updated 25 August 2026.
These terms govern your use of Ironimo. By creating an account you agree to them. If you are agreeing on behalf of a company, you confirm you have authority to bind that company.
Ironimo is a hosted web application security scanning service. It runs security tooling against web application targets that you nominate, and returns findings with supporting evidence.
Ironimo is provided by a company established in the Netherlands ("we", "us").
You may only submit targets you own or have documented written permission to test. Running security tooling against systems without authorisation is a criminal offence in most jurisdictions, including under Article 138ab of the Dutch Criminal Code. You are solely responsible for holding that authorisation, and for any consequences of scanning without it.
By submitting a target you represent that you hold the necessary authorisation. We log target submissions. We may suspend or terminate any account we reasonably believe is being used to scan third-party systems without permission, and we may report it.
If you are a consultancy scanning on behalf of clients, keep your written scope agreements. We may ask to see one.
You may not use Ironimo to:
Keep your credentials secure and tell us promptly at security@ironimo.online if you think an account has been compromised. You are responsible for what happens under your account, including actions by team members you invite.
Your scan configurations, findings, and reports are yours. We process them to run the service, as described in the privacy policy. We do not sell them and we do not use your scan results to market to you or to anyone else.
The Ironimo platform, its orchestration logic, its interface, and its documentation remain ours. Nothing in these terms transfers our intellectual property to you.
We may use aggregated, fully anonymised statistics — for example, the distribution of vulnerability classes across all scans — to improve the product and to write about the state of web application security. This never identifies you or your systems.
We work to keep Ironimo available, but the service is provided without an uptime guarantee unless you have a written SLA as part of an Enterprise agreement. We may take the service down for maintenance, and will give notice where we reasonably can.
Ironimo is an automated scanning tool. A clean scan is not a certificate of security, a substitute for a penetration test, or a guarantee that your systems cannot be compromised. Automated scanning does not reliably find business logic flaws, authorisation gaps that depend on your product's semantics, or chained multi-step exploits. We say so plainly on the product page.
You remain responsible for your own security decisions. We provide findings and evidence; acting on them is yours.
To the maximum extent permitted by law, our total liability arising out of or relating to the service is limited to the fees you paid us in the twelve months preceding the event giving rise to the claim.
We are not liable for indirect or consequential loss, loss of profit, loss of data, or business interruption. Nothing in these terms excludes liability for intent, wilful recklessness, death or personal injury, or anything else that cannot be excluded under Dutch law.
You indemnify us against claims arising from your use of the service in breach of these terms, in particular claims arising from scanning systems you were not authorised to test.
You may cancel at any time; monthly plans end at the close of the current period and annual plans at the end of the paid term. We may suspend or terminate your account for material breach of these terms, including unauthorised scanning, and for non-payment after notice.
Export your findings before your account closes. After closure we delete your data on the schedule set out in the privacy policy.
We may update these terms. For material changes we will notify account holders by email at least 30 days before they take effect. Continuing to use Ironimo after that means you accept the new terms; if you do not, you may cancel.
These terms are governed by Dutch law. Disputes go to the competent court in the Netherlands. If you are a consumer, this does not deprive you of the protection of mandatory provisions of the law of your country of residence.