Legal disclaimer & limitation of liability

The Secuwithlove platform, its passive scanning tools, threat intelligence, hunting playbooks, hardening baselines, generated reports and any other content are provided “as is” and “as available”, without warranty of any kind, whether express or implied, including but not limited to warranties of accuracy, completeness, merchantability, fitness for a particular purpose or non-infringement.

Results are derived from public and third-party data sources that may be incomplete, outdated or incorrect. A clean result never means a system is secure, and a reported finding is not a confirmation of an actual vulnerability or compromise.

To the fullest extent permitted by applicable law, Secuwithlove, its owners, employees and partners accept no responsibility and shall not be held liable for any direct, indirect, incidental, special, consequential or punitive damages, including but not limited to loss of data, loss of profit, business interruption, service outage, reputational harm, regulatory penalties or security incidents, arising out of or in connection with the use of, or inability to use, this platform, its outputs or any action taken on the basis of them.

Where liability cannot be excluded by law, it is limited to the amount actually paid by the user for the service during the twelve (12) months preceding the event giving rise to the claim.

You are solely responsible for how you use this platform and for ensuring that you have explicit, documented authorisation to assess any domain, IP address, host or asset you submit. Any use against systems you do not own or are not authorised to test is strictly prohibited and is your sole legal responsibility.

You remain responsible for your own security decisions, configuration changes, remediation actions and for complying with all applicable laws and regulations, including data-protection law.

Content, scores, benchmark mappings (including CIS and MITRE ATT&CK references) and reports are informational only. They do not constitute legal, regulatory, compliance or certification advice, and do not certify conformity with any standard or framework.

The platform aggregates data and news from third parties. Secuwithlove does not control and is not responsible for the availability, accuracy, legality or content of those third-party sources, services or websites.

Secuwithlove processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP). The controller is Secuwithlove, reachable through the contact form on this site.

Data we process: account data (name, company, email address, hashed credentials or identity-provider identifier), billing and subscription data handled by our payment processor, the targets and results of the scans you run, alerts and reports you create, contact-form messages, and technical logs (IP address, timestamps, user agent) needed for security and abuse prevention.

Purposes and legal bases: performing the contract (providing the portal, scans, reports and support), our legitimate interest in securing the service and preventing abuse, compliance with legal obligations (accounting, lawful requests), and your consent where required (marketing emails, non-essential cookies and advertising).

Recipients: data is shared only with processors strictly needed to run the service — hosting and database infrastructure, email delivery, payment processing, and the public threat-intelligence sources queried when you launch a scan. Scan targets you submit may be sent to those third-party intelligence providers. We never sell personal data.

International transfers: some processors are located outside the EU/EEA and Switzerland; such transfers rely on adequacy decisions or EU Standard Contractual Clauses with equivalent Swiss addenda.

Retention: account data is kept for the lifetime of the account and deleted (or anonymised) within 90 days of closure, except where a longer statutory retention applies. Scan results, reports and alerts are kept until you delete them. Technical logs are kept for a maximum of 12 months.

Your rights: you may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest; you may withdraw consent at any time without affecting prior processing. Requests can be made through the contact form and are answered within 30 days. You also have the right to lodge a complaint with your supervisory authority or with the Swiss Federal Data Protection and Information Commissioner (FDPIC).

Security: data is protected by encryption in transit, access control, row-level isolation between accounts and least-privilege administration. No system is fully secure, and we cannot guarantee absolute security.

Your own responsibility: if you submit data concerning third parties (for example scan targets, logs or findings containing personal data), you act as controller for that data and warrant that you have a valid legal basis to process it and to transmit it to us.

We use strictly necessary cookies for authentication and session management. We do not load third-party advertising scripts on the platform.

This disclaimer may be updated at any time without prior notice. Continued use of the platform after changes constitutes acceptance of the updated terms.