Terms of Service

These terms apply when you use ScanMalware: the website scanmalware.com, its API, the MCP server at mcp.scanmalware.com and the sign-in service at auth.scanmalware.com (together, "the service"). The service is provided by Triop AB, a Swedish company ("we", "us"). By using the service you accept these terms. If you use it on behalf of an organisation, you accept them for that organisation and confirm that you may do so.

How we handle personal data is described in our Privacy Policy.

1. Who we are

Triop AB (org. no. 556768-7321)
Rörosvägen 31, 846 72 Funäsdalen, Sweden
Email: contact@scanmalware.com, or use our contact form.

This address is also our single point of contact for users and for authorities under the EU Digital Services Act. You can write to us in English or Swedish.

2. The service

ScanMalware visits a web address (URL) in an isolated browser, records what the page shows, loads and does, and analyses it with detection rules, threat-intelligence data and an AI model. It also lets you look up domains, IP addresses, certificates and related data, follow threat hunts, and use all of this through an API.

• The service is free of charge. There is no guaranteed availability or response time.
• We may change, limit or remove features. If we intend to close the service as a whole, we will announce it on the website and email account holders in advance when we reasonably can.
• Rate limits apply to the website and the API. They are described in the API documentation and may change.

3. Accounts and API keys

• You do not need an account to scan or look things up. You need one for private scans, API keys and hunt alerts.
• You must be at least 13 years old to create an account.
• Give a working email address and keep your password, passkeys, two-factor devices and API keys secret. You are responsible for what is done with your account and your keys.
• Tell us without delay if you think someone else has access to your account or a key.
• You can delete your account at any time from your account page. Your private scans are then unlinked from you and no one can open them; ask us if you want them deleted.

4. Scans and their visibility

When you submit a URL, our browser visits it from our own network. The website receives an ordinary visit and can see that it was visited. You choose who can see the result:

• Public (the default): listed on the website and in the API, posted with the site's name, verdict and a link to our accounts on X and Mastodon, and can be found by search engines.
• Unlisted: not listed, but anyone who has the link can open it.
• Private: only you can see it. This requires an account.

A public or unlisted result shows the URL exactly as you submitted it, together with screenshots and the content the page loaded. Do not submit a URL as public or unlisted if it contains personal data, a password, an access token or a one-time link (for example a password reset, sign-in, invoice or document-sharing link). Our visit can also use up a one-time link. Use a private scan, or remove the sensitive part of the URL first.

We may make a scan private, hide parts of it or remove it, for example when it exposes personal data or secrets, or after a notice under section 9. Our own systems also scan URLs, for example from threat-intelligence feeds.

5. Acceptable use

You may not use the service to:

• break the law, or help someone else do so;
• attack, overload or gain unauthorised access to any system, including ours, or make our scanner act against a website (for example to submit forms, trigger transactions or exhaust its resources);
• get around rate limits or other protections, for example by spreading requests over many accounts, keys or addresses;
• test the security of our own systems without our written permission (we welcome reports of vulnerabilities at contact@scanmalware.com);
• publish personal data about other people, or harass or harm anyone;
• collect data from the website by automated means at a volume that affects other users (use the API instead);
• present our results as something they are not, for example as a certification, or alter a result and present it as ours.

6. What you submit, and the rights to it

You keep whatever rights you have in what you submit (URLs, reports, votes and messages). You give Triop AB a free, non-exclusive, worldwide licence to store, analyse and publish it, according to the visibility you chose, and to use it together with the scan results to run and improve the service and to produce threat intelligence. The licence lasts as long as we hold the data. You confirm that you may submit what you submit.

7. Scan results and our content

• A scan result records what a third-party website showed when we visited it. Screenshots and page content belong to that website's owner; we show them for security analysis and research. We do not host the website itself, so removing a scan does not remove the website.
• You may use results, including through the API, to protect yourself, your organisation or your customers, and for research, teaching and incident response. When you publish them, please name ScanMalware as the source. Selling or redistributing our data in bulk, or using it to build a competing database, needs our written agreement.
• Our software, texts, design and name remain ours.
• Results contain links to other websites, many of them malicious. Do not open them unless you know what you are doing. We are not responsible for other websites.

8. Verdicts are automated assessments

Our verdicts are produced automatically and can be wrong in both directions. A page we rate as safe may still be harmful, and a page we flag is not a legal finding about its owner. The AI Security Verdict is written by an AI language model and is labelled as such. Use the results as one input to your own decision, and use other tools and professional advice for decisions that matter. If you own a website and believe its verdict is wrong, tell us as described in section 9 and we will review it.

9. Reporting content and asking for removal

Anyone can tell us about a scan or other content they believe is illegal, exposes personal data, or is wrong (for example a verdict, or a brand listing that names your business). Use the contact form or email contact@scanmalware.com, and include:

• the link to the scan or page;
• why you believe it is illegal, personal or wrong;
• your name and email address, so we can answer; and
• a statement that the information in your notice is accurate and complete to the best of your knowledge.

We confirm that we have received your notice, decide on it carefully, objectively and without undue delay, and tell you what we decided and why. Automated rules and AI models help produce scan results, but a person decides on every notice. If we report information to the authorities, it is because the law requires it, for example where content suggests a threat to someone's life or safety.

10. Restrictions, suspension and termination

• You can stop using the service and delete your account at any time.
• To protect the service and others, we may limit or block requests, make scans private or remove them, block URLs from being scanned, and suspend API keys or accounts. Rate limits and abuse protection run automatically; a person decides on suspending an account.
• We act in proportion to the problem. When we remove something you submitted or restrict your account, we tell you what we did and why, unless the law prevents it. You can reply to ask us to reconsider, and a person will review the decision.

11. No guarantee

The service is provided free of charge, "as is" and "as available". To the extent the law allows, we give no guarantee that it is accurate, complete, uninterrupted or fit for a particular purpose, and we do not guarantee that every threat is detected. Nothing in these terms limits rights you have as a consumer under mandatory law.

12. Liability

To the extent the law allows, we are not liable for indirect or consequential loss, such as lost profit, lost data, interruption of business or claims from third parties, nor for loss that follows from a decision you made based on a result. This does not limit our liability for loss we cause intentionally or through gross negligence, or any liability that cannot be limited under mandatory law.

13. Changes to these terms

We may update these terms. The date at the top shows the latest version. We will tell account holders about material changes by email at least 30 days before they take effect, and announce them on the website. If you do not accept the new terms, stop using the service and delete your account before they take effect.

14. Governing law and disputes

These terms are governed by Swedish law, without regard to its conflict-of-law rules. If you are a consumer, you keep the protection of the mandatory rules of the country where you live, and you may bring a dispute before the courts there. Other disputes are decided by the Swedish general courts, with Östersunds tingsrätt (Östersund District Court) as the first instance.

15. Contact

Questions about these terms: contact@scanmalware.com or our contact form.