Terms of use

About these terms

These terms are an agreement between you and Shipwardly, run by a self-employed sole trader in the United Kingdom. They apply when you use the Shipwardly website, scanner, reports, accounts and paid services. By using Shipwardly you agree to them. If you use Shipwardly for a business, you confirm that you may agree to them on its behalf.

You can reach us at [email protected].

They work together with our privacy notice, our cookie notice and our acceptable use policy.

Only scan sites you are allowed to

You may only scan sites you own or are authorised to test. By submitting an address you confirm that you own the site or have the owner's permission to test it.

A free scan is passive: it reads only what any visitor's browser receives. Deeper checks run only after you verify ownership of the domain. You must not try to get around verification, rate limits, the Turnstile check or the opt-out that site owners can set, or use Shipwardly to attack, overload or gain access to any system. Our acceptable use policy sets this out in full and forms part of these terms.

A Monitor plan scans sites you have not verified only after you declare, for each site, that you own it or are authorised to test it. The declaration must be true for as long as the site is monitored: withdraw it, or remove the site, as soon as that stops being so. We record when you made it, honour every site owner's opt-out and may stop monitoring any site if we have reason to believe the declaration is not true.

What a scan is, and is not

The free scan is a surface check, not a full audit. It looks for common, high-confidence problems in what a browser can see. It cannot find every issue, and passing it does not mean your app is secure. Reports are information to help you, not a guarantee or professional certification.

Free scans, reports and the copy-ready fixes in them are provided as they are. We take care to make them accurate, but we do not promise that a report is complete or free of mistakes, that a suggested fix suits your app, or that following a report will stop an attack. Check a change before you rely on it, and keep backups. If you are a consumer, this does not take away your legal rights.

Accounts, teams and share links

Keep your login details safe and tell us straight away if you think someone else has used your account. You are responsible for what happens in your account. We may suspend accounts that break these terms.

Give us an email address you can receive mail at, and keep it up to date. If our emails to your address cannot be delivered, for example because it does not exist or its mail server refuses them: an account whose address was never confirmed is deleted straight away, in the same way as deleting it yourself in Settings, and if you later sign in or register with that address we tell you why; an account with a confirmed address is never deleted automatically, but we stop emailing that address and ask you, inside the app, to update it, and we may delete the account by hand later if the address stays undeliverable. If you mark one of our emails as spam, we stop sending you updates, but still send the reports you ask for.

If you hold an account, you may invite other people to work in it as Managers or Viewers. You are responsible for who you invite and for what they do in your account, and only you can pay for work, change billing or manage the team. Remove anyone who should no longer have access; their access ends at once. If you are invited into someone else's account, what you do there is on their behalf, and they can remove you at any time.

A share link shows a report to anyone who has it, without signing in. Only share it with people who should see your findings, and withdraw it when they no longer need it. The same terms apply to a shared report as to any other: it is a surface check, not a full audit.

Audits and paid work

The security audit costs a fixed price, shown on the booking page before you pay (currently £395 including VAT). If you book fix work with us afterwards, the full amount you paid for the audit is credited against it. The scope, timing and price of any fix work are agreed in writing before we start.

When online payment is not available, we agree the price of the work, and how and when you pay, with you by email before we start. These terms apply to that work in the same way.

An audit is carried out with reasonable care and skill by a person, within the scope shown on the booking page. Like any security review, it reduces risk but cannot prove that an app has no weaknesses. You must have the right to give us the access you arrange for the audit or fix work, and you must not send us passwords or keys through our forms.

An accepted fix quote is paid in advance, by card through Stripe, for whatever is left after any audit credit. We start the work once the payment has reached us. Stripe sends the receipt and VAT invoice.

Monitor plans are monthly subscriptions at the price shown, including VAT, and renew each month until you cancel. You can cancel or switch plan at any time from Billing in your account; a cancelled plan runs to the end of the month you have paid for. When you switch plan, Stripe adjusts the difference on your next invoice. If a plan ends or covers fewer sites, the sites beyond it are paused, never deleted.

Weekly monitoring is a repeated surface check. It emails you when it sees something new or fixed, but it cannot promise to notice every change or problem, or to notice it at once.

Cancelling and refunds

If you are a consumer, you have the right to cancel a paid service within 14 days of the day you buy it, without giving a reason, under the Consumer Contracts Regulations. If you want an audit, fix work or a Monitor plan to start within those 14 days, we ask you to request that expressly. If you then cancel within the 14 days, we refund what you paid, less a fair amount for what we had already done. Once the service has been fully provided at your express request, and you have acknowledged that you would then lose the right to cancel, you can no longer cancel it. To cancel, email [email protected] with your order reference, or cancel a Monitor plan in Billing.

Whether you are a consumer or a business: if we cannot do your audit, we refund you in full. If we cannot deliver something you paid for, we refund what you paid for the part we did not deliver. Refunds go back to the card or account you paid with.

Prices and VAT

All our prices include VAT at the current rate. Stripe sends the receipt and a VAT invoice for each payment.

We may change our prices from time to time. A change never affects what you have already paid for or an order you have already placed. If you are on a Monitor plan, you keep paying your current price until we tell you otherwise by email, at least 30 days before a new price applies, so you can cancel before it does.

Our liability

We provide our services with reasonable care and skill. Nothing in these terms limits or excludes our liability for death or personal injury caused by our negligence, for fraud or fraudulent misrepresentation, or for anything else that cannot be limited or excluded by law. If you are a consumer, nothing in these terms affects your legal rights.

If you are a consumer, we are responsible for loss or damage you suffer that is a foreseeable result of our breaking these terms or failing to use reasonable care and skill. We are not responsible for loss that was not foreseeable. We provide Shipwardly to help you look after your own websites; if you use it for a business, we are not responsible to you for loss of profit, loss of business, business interruption or loss of business opportunity.

If you use Shipwardly for a business, we are not responsible for loss of profit, revenue, business, goodwill or data, or for any indirect or consequential loss. We are not responsible for losses caused by issues a scan or an audit did not detect, by changes you make based on a report, or by anyone else's actions, such as an attacker's. Our total liability to you in any 12 months is limited to the greater of £100 and the amount you paid us in those 12 months.

If you use Shipwardly for a business

If you use Shipwardly for a business and you break our acceptable use policy, for example by scanning a site you were not authorised to test, you agree to cover the claims, losses and reasonable costs, including legal costs, that we suffer as a result. We will tell you promptly about any such claim and let you take part in how it is handled.

Intellectual property

Shipwardly, our website, scanner, reports, fix playbooks and their design belong to us or the people we license them from. Your website, your code and your data stay yours.

You may use your reports, including the copy-ready fixes in them, for your own sites and share them with the people who help you run them. You must not copy, resell or offer Shipwardly as your own service, or collect our content by automated means. If you send us ideas or feedback, we may use them without owing you anything.

Availability and changes to the service

We aim to keep Shipwardly available and working well, but we cannot promise it will always be available or free of faults. We may need to pause it for maintenance, security or reasons outside our control.

We may change, add or remove features to improve Shipwardly or to keep it safe and lawful. If a change significantly affects a paid service you have already bought, we will tell you first, and you may cancel and receive a refund for any part you have paid for and not received.

Suspension and ending these terms

You can stop using Shipwardly at any time, and delete your account in Settings. Cancel a Monitor plan in Billing first.

We may refuse or stop a scan, suspend an account or end these terms with you if you break them, if we reasonably believe you are using Shipwardly to harm others, if you do not pay for a paid service, or if the law requires it. We will tell you why and, where it is fair, give you a chance to put things right first, unless that would be unsafe or unlawful. If we end a paid service for a reason that is not your fault, we refund the part you have paid for and not received.

Notices

Send notices and questions about these terms to [email protected]. We send notices to the email address on your account, or the address you gave us for an order, so keep it up to date.

Changes and governing law

We may update these terms and will show the date of the latest version on this page. If a change affects a paid service you are using, we will tell you by email before it applies. The terms in force when you place an order apply to that order.

These terms are a contract between you and us only; nobody else may enforce them. They are governed by the law of England and Wales, and the courts of England and Wales may hear any dispute. If you are a consumer living in Scotland or Northern Ireland, you can also bring proceedings in your local courts, and you keep the protections of your local law.

Last updated: 31 October 2026.