Terms of Service
Effective date:
Operator and contact
SecurityFuse is operated by Digital Magnet Corporation, with its registered address at 196 McIntyre Drive, Kitchener, Ontario, Canada N2R 1H4.
Contact hello@securityfuse.com for account and service questions, and security@securityfuse.com for security concerns and scan opt-out requests.
In these Terms, “we” means Digital Magnet Corporation and “you” means the individual accepting them or the organization that individual is authorized to represent.
Eligibility and temporary admission restrictions
Individuals, solo developers, personal or hobby users, and business users may apply for the beta, subject to the admission restrictions below.
You must be at least 18 years old and legally able to enter these Terms, and must have authority to bind an organization only when acting on its behalf.
We do not admit Quebec residents to the beta, whether applying personally or for a business, until the applicable French-language requirements for standard-form contracts have been addressed.
We do not admit residents of the EU, EEA or United Kingdom to the beta until the applicable EU and separate UK representative requirements have been assessed and any required representatives appointed.
After sign-in, we ask your country of residence and, where applicable, province or territory. Eligible answers can activate invitation access automatically. We record the residence answer and admission decision against your sign-in identity; this question does not itself accept these agreements.
Free invitation beta
SecurityFuse is available by invitation. Hosted website scanning is not currently enabled. The scan-authorization, scope and allowance conditions below apply when supported scanning is enabled.
Invitation beta access is free, requires no payment details and does not automatically convert to a paid plan.
Any future paid plan requires separate, explicit enrollment under the pricing and terms presented at that time.
The beta has no fixed end date; free beta access is temporary and may end.
We aim to give seven calendar days’ email notice before ending the beta or materially reducing scan allowances, with shorter notice only where necessary for security, abuse prevention, legal requirements or urgent operational issues and subject to mandatory law.
The applicable scan allowance and reset period are communicated before use; free access does not mean unlimited scanning.
Agreement, updates and notices
Before your first scan, you must select an initially unticked checkbox agreeing to these Terms and the Acceptable Use Policy.
Privacy and Cookies notices are presented separately, and accepting an agreement does not provide blanket consent for personal-information processing or browser storage.
We record the authenticated user, accepted policy versions and acceptance time separately from scan authorization.
We aim to give seven calendar days’ email notice before material policy changes take effect, subject to the limited security, abuse, legal and urgent-operational exceptions above and mandatory legal requirements.
Material revisions to these Terms or the Acceptable Use Policy require fresh, initially unticked acceptance before scanning under revised terms.
If you decline revised terms, new and scheduled scans stop when they take effect, while account-closure and privacy-request channels remain open.
Policy-acceptance records are stored separately from later acceptances and are subject to the retention limits in the Privacy Policy. The owner handles deletion manually; there is no automated acceptance-record expiry job.
Account and contractual notices are sent to the email address associated with your account, which you must keep current. Service and policy notices are handled manually by the owner; authentication email is handled by Clerk through Resend.
Delivery of a notice is not acceptance of revised Terms or a substitute for separately required consent.
Target authority and withdrawal
You must own each target you submit or have explicit permission covering the requested assessment.
When website scanning is enabled, Quick will require an authorization attestation and Deep will also require current ownership proof.
Repository assessment, if offered, requires its own grants and processing authorization. Permission for one target or activity does not authorize another.
To withdraw authorization, contact hello@securityfuse.com. The owner handles withdrawal requests manually; no automated email-withdrawal control is promised.
Hosted scanning is currently disabled. For any future assessment, the owner will handle withdrawal and stopping work within our control manually; requests already sent cannot be recalled.
Any resumed assessment requires fresh authorization and applicable current ownership proof. Withdrawing authorization does not restart the retention period for existing records.
Licence to use the service, reports and submitted content
Subject to these Terms and communicated allowances, Digital Magnet grants you a limited, non-exclusive, non-transferable right to use SecurityFuse and its reports for lawful personal purposes or internal business purposes.
You may share a report with people you authorize to review or remediate the assessed system, subject to confidentiality and applicable rights.
This licence grants no access to another person’s account, target or confidential information.
You grant Digital Magnet a limited, non-exclusive licence to access the authorized targets and process submitted content solely to deliver and operate the requested service within the authorized scope, Privacy Policy and retention rules.
You grant no rights you do not hold, and the processing licence does not expand scan authorization or permit unrelated use of submitted content.
Reports, confidentiality and feedback
We treat non-public reports and submitted content as confidential and disclose them only to authorized recipients, service providers needed to deliver the service, or as required by law, subject to applicable confidentiality duties.
You must not disclose another person’s confidential report or submitted content without authority, except where law permits or requires disclosure.
You may voluntarily provide feedback that we may use to improve SecurityFuse without payment, but that permission does not grant rights to use customer data, scan contents or confidential material for advertising, publicity or AI training.
Informational scope and user decisions
SecurityFuse is an informational scanning and reporting tool that provides observations and guidance based on the checks performed, assessed resources and assessment time stated in each report.
It is not a comprehensive cybersecurity assessment, certification or guarantee that a system is secure, compliant or free of vulnerabilities, and a report identifying no issues does not establish that no issues exist.
You decide whether and how to use reports and remain responsible for reviewing and testing changes, maintaining appropriate backups and safeguards, and obtaining specialist advice where needed.
SecurityFuse does not implement changes or manage your systems, and following guidance is not guaranteed to prevent an incident.
A repair statement is not a fresh observation, and a recheck does not approve an application.
These service-scope limitations do not override an express commitment or exclude obligations or liability that cannot lawfully be excluded.
Business liability and separate consumer treatment
For business users only, and subject to the carve-outs below, Digital Magnet’s aggregate liability is limited to the greater of CAD $1,000 or fees paid for the affected service in the 12 months immediately preceding the first event giving rise to the claim, aggregated per customer and not per scan, finding or claim.
To the extent permitted by applicable law, Digital Magnet is not liable to business users for indirect or consequential business losses arising from SecurityFuse.
Neither the business cap nor the business-loss exclusion limits liability for fraud, death or personal injury caused by negligence, or anything that cannot lawfully be limited or excluded.
Consumers receive separate treatment: the business cap and business-loss exclusions do not apply to consumers, and statutory service standards and remedies that cannot be waived remain intact.
The contracting operator is Digital Magnet Corporation; these Terms create no personal guarantee by a director, officer or member of its personnel.
Narrow business-user indemnity
If you use SecurityFuse for business purposes, you indemnify Digital Magnet Corporation and its directors, officers and personnel against third-party claims and reasonable legal costs arising from targets you submitted without the required permission.
We must promptly notify you of a covered claim and provide reasonable cooperation in its defence.
You may control the defence through competent counsel reasonably acceptable to the protected party, with that party entitled to reasonable participation.
A settlement must not impose an admission, non-monetary obligation or unreimbursed liability on another party without its prior written consent, which must not be unreasonably withheld.
The indemnity excludes losses attributable to SecurityFuse exceeding the authorized scope or to Digital Magnet’s or a protected person’s own wrongful conduct.
It does not remove regulatory responsibility or a person’s liability for their own conduct under applicable law.
No indemnity applies to personal or hobby users; they remain responsible for submitting only authorized targets and for their own use and implementation decisions.
Changes, suspension and account lifecycle
We may change or discontinue features, subject to the notice, fresh-acceptance and mandatory-rights protections in these Terms.
We may pause scans or suspend access for reasonably suspected unauthorized scanning, limit bypass, abuse or threats to the service, and explain the reason where appropriate.
You may request human review by the owner at hello@securityfuse.com, without a promised fixed appeal deadline.
Access may be restored once the underlying issue is resolved and required authorization is valid; serious or repeated misuse or restriction evasion may lead to permanent termination.
Privacy and account-deletion request channels remain open after suspension or termination, and retention rules continue to apply.
You may request account closure at hello@securityfuse.com.
After 12 months without sign-in or authorized scan activity, we may close an account after giving 30 calendar days’ email notice and an opportunity to keep it open by signing in.
Assignment, severability, entire agreement and events beyond control
You may not assign the account or agreement without our written consent, and Digital Magnet may assign it in a lawful reorganization or business transfer only without reducing your rights or bypassing required notice or permission for changed data use.
If a provision is unenforceable, it is limited or removed only as law permits, and the remaining provisions continue unless applicable law requires otherwise.
These Terms and the applicable Acceptable Use Policy form the agreement for use of SecurityFuse and supersede prior agreements on that subject, without overriding mandatory rights or a separate binding express commitment.
If events beyond reasonable control interrupt service, we will take reasonable steps to mitigate and resume and provide notice where reasonably possible.
Any relief for such events depends on applicable law and does not remove mandatory duties or non-waivable consumer remedies.
Governing law and disputes
These Terms are governed by Ontario law and the applicable federal laws of Canada, without depriving consumers of protections under their country, province or state of residence that cannot be waived by agreement.
Informal resolution through hello@securityfuse.com is encouraged but is not a condition of legal proceedings, urgent relief or a regulator complaint and does not extend a filing deadline.
Subject to mandatory law and consumer rights, Ontario courts have exclusive jurisdiction over disputes, with proceedings in the Region of Waterloo where applicable court rules permit.
Consumers retain applicable rights to proceedings in their home courts, requirements for proceedings against them to be brought there, regulator complaints and other rights or remedies that cannot lawfully be restricted.