Terms of Service

1. What Magekwik is

Magekwik is a passive security and compliance instrument for Magento 2 and Adobe Commerce storefronts. It issues read-only GET/HEAD requests to publicly reachable URLs and reports what it observes. It never authenticates, submits forms, writes data, brute-forces, or attempts exploitation. The report is diagnostic information, not a certification and not a guarantee that a store is secure or compliant.

2. Authorised use only

You may submit a URL for scanning only where you own the target store or are authorised by its operator to have it assessed. You are solely responsible for having that authority. You must not use Magekwik to probe systems you have no right to test, to circumvent access controls, or in any way that breaches the UK Computer Misuse Act 1990 or equivalent law in your jurisdiction. We may refuse, rate-limit, or block any request, and the scanner refuses private, internal, and non-resolving hosts by design.

3. Acceptable use

• Do not attempt to overload the service or use it to generate load against a third party.
• Do not resell, scrape, or systematically extract the service without written permission.
• Do not represent a Magekwik report as an official audit, penetration test, or PCI attestation.

4. Remediation guidance

Reports include suggested composer commands, patches, and configuration changes. These are provided in good faith for an expert operator to evaluate. Test every change in a non-production environment first. We are not responsible for the outcome of applying any remediation, including downtime or data loss.

5. Pro and paid plans

Pro is a monthly subscription at the price shown on the pricing page when you subscribe. Payment is taken by Stripe; we never see or store your card.

• Renewal. Pro renews automatically each month, on the date you first subscribed, until you cancel.
• Cancelling. Cancel at any time from Settings, Manage billing. Pro stays on until the end of the month you have paid for and is not renewed after it. We do not refund the unused part of a month, except where the law requires it.
• If you are a consumer. Pro is sold to businesses. If you buy it as a consumer, you may cancel within 14 days of subscribing. Because Pro starts as soon as you ask for it, we refund the payment less a proportionate amount for the days it ran.
• Failed payments. If a renewal fails, Stripe retries it. Pro stays on while it does; if every retry fails, the account returns to the free plan. Your checks, channels and keys are kept, paused, and start again when you resubscribe.
• Price changes. We will email you at least 30 days before a new price applies to your subscription, and you can cancel before it does.
• Pro through a Magekwik Care plan. A Care plan bought on magekwik.com includes Pro on the Scanner account with the email the plan was bought with, for up to 3 verified stores. Pro starts when the plan's first payment clears and stays on while the plan is paid, including while Stripe retries a failed payment. If the plan is cancelled, Pro stays on to the end of the last month paid for. If a plan's latest payment is refunded in full, Pro ends at once. The Care plan itself is sold on magekwik.com's terms.
• No paying twice. If you are paying for Pro when a Care plan starts on the same account, we cancel the Pro subscription that day and refund the unused part of the month to your card. Pro carries on through the Care plan without a gap.
• Agency agreements. Where Pro is included with an agency agreement, it runs for as long as that agreement does, on that agreement's terms.

6. Monitoring, alerts and the API

• Only your own domains. Uptime checks, status pages and the deeper checks run only against domains you have verified. When a verification expires, the checks for that domain pause until you verify it again.
• Best effort, not a guarantee. We check, alert and report as described, but monitoring can miss an outage or report one late, and alerts can be delayed or lost by the email or chat service that carries them. There is no service-level agreement, and no credit is owed for a missed or late alert.
• Your channels. You choose where alerts go. You are responsible for the Slack, Microsoft Teams or webhook address you give us, and for who can read what it receives.
• API keys. Keep your keys secret and revoke a key you think has leaked. You are responsible for requests made with your keys. The API is rate-limited, including one scan an hour per site.
• Status pages are public when you switch them on, and show only what you choose to put on them.
• Live script reports. When you enable live script reports, you instruct us to process your store visitors' report data as your processor, solely to detect and alert on unexpected scripts, under the retention limits in our Privacy policy. You are responsible for telling your visitors about it in your own privacy notice.

7. No warranty

The service is provided “as is” and “as available”, without warranties of any kind, express or implied, including fitness for a particular purpose. Findings derived from version strings are marked inferred and are hedged; you must verify exact patch levels before acting. We do not warrant that the service will detect every vulnerability or misconfiguration, nor that it is error-free or uninterrupted.

8. Limitation of liability

To the fullest extent permitted by law, 4KTechnologies Ltd (company no. 14234800, trading as Magekwik) shall not be liable for any indirect, incidental, or consequential loss, or for loss of profit, revenue, data, or goodwill, arising from use of or inability to use the service. Nothing in these terms excludes liability that cannot lawfully be excluded.

9. Changes

We may update these terms; the “last updated” date reflects the current version. Continued use after a change constitutes acceptance. If you pay for Pro, we will email you about a change that affects what you pay for before it applies.

10. Governing law

These terms are governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction.

11. Contact

Questions about these terms: support@magekwik.com.