1. Acceptance of Terms
By accessing or using any part of the WASViking platform, you agree to be bound by these Terms of Service ("Terms"), including all applicable laws and regulations. If you do not agree, you are prohibited from using the platform. Continued access and usage indicate your acceptance of the current version of these Terms.
Even when access to the WASViking platform is granted through a corporate subscription or enterprise account, each individual user must personally review and accept these Terms of Service, the Privacy Policy, and the Acceptable Use Policy as a condition for using the Services. This requirement ensures compliance with applicable data protection laws and establishes individual accountability for the use of the Services.
2. Eligibility
You must be at least 18 years old and legally authorized to represent your organization to use the Services. By accepting these Terms, you confirm that you are authorized to bind the organization to this agreement.
3. Account Registration and Security
You are responsible for maintaining the confidentiality of your login credentials and for all activities that occur under your account. You must promptly notify us of any unauthorized access or suspected compromise. You are solely responsible for all actions performed under your account, including scans initiated through your access tokens or API usage.
4. Permitted and Prohibited Uses
You agree to use the WASViking platform only for lawful purposes and only to scan, monitor, or analyze systems, domains, APIs, and certificates you own, or for which you have obtained explicit written authorization.
You may not:
- Scan third-party assets without documented consent;
- Use the platform to engage in malicious, illegal, or harmful activities;
- Attempt to probe, scan, or test the security of any system not explicitly authorized;
- Share, resell, sublicense, or commercially exploit the service, except as expressly authorized in a written agreement with WASViking or under the WASViking Partner Agreement;
- Circumvent access limitations or licensing restrictions;
- Engage in reverse engineering or interfere with the operation of the service.
WASViking reserves the right to suspend or terminate your access in case of violation.
5. License and Ownership
WASViking grants you a limited, non-exclusive, non-transferable, revocable license to access and use the Services during the subscription term, subject to these Terms and any applicable plan limitations.
All intellectual property rights, including software, data models, designs, and underlying technology, remain the exclusive property of WASViking LLC.
6. Data Protection and Privacy
You acknowledge and agree that certain information, including scan results, metadata, IP addresses, and security findings, may be stored securely in our cloud infrastructure for reporting and auditing purposes.
Data in transit is protected using TLS 1.2 or higher, and stored credentials, tokens, and similar sensitive fields receive an additional layer of application-level encryption. Our security program is described in the Security Practices page of the Trust Center.
You may delete targets and their associated data from the dashboard during the subscription term, subject to the deletion controls of your plan, and you may request deletion of your organization's data as described in Section 8.
Use of the service is also subject to our Privacy Policy and, where applicable, the Data Processing Agreement.
7. Trial, Access Levels, and Usage Limits
Unless otherwise stated in a written agreement, WASViking does not offer public trial accounts or free tiers. Usage limits per plan (e.g., number of domains, scans, or IPs) are defined during onboarding and are subject to change as part of product evolution, with reasonable notice to the customer.
7.1 Purchases Through Authorized Partners
WASViking subscriptions may be purchased through, or managed by, an authorized WASViking partner, such as a reseller or a managed security service provider. In that case, commercial terms such as pricing, invoicing, and support are agreed between you and the partner. The partner is an independent business. It is not an agent of WASViking and has no authority to modify these Terms, make commitments on behalf of WASViking, or grant rights that WASViking has not granted.
These Terms, the Privacy Policy, and the Acceptable Use Policy continue to apply to every user of your organization, including organizations created or administered by a partner, and each user must accept them before using the platform. If your environment is administered by a partner under a managed services arrangement, the partner's access to your organization is governed by your agreement with that partner, and delegated access events and security-relevant actions performed through partner access are recorded by the platform.
8. Termination and Suspension
We reserve the right to suspend or terminate your access, without refund, if:
- You violate these Terms;
- You engage in unauthorized scanning;
- You exceed usage limits or attempt to circumvent restrictions.
You may also terminate your account at any time; organizations contracting directly can do so from the portal under Privacy & Data, subject to a 60-day reversible window before erasure. Upon termination, your access will be revoked. Upon a verified request, WASViking deletes Customer Data from active systems in accordance with its documented deletion procedures. Limited records may be retained where reasonably necessary for security, fraud prevention, audit integrity, legal compliance, or the establishment, exercise, or defense of legal claims. Retained records remain protected and access-restricted and are deleted or de-identified when no longer required. Residual copies may remain in encrypted backups until they expire through the normal backup retention cycle.
9. Third-Party Services and Links
Our platform may link to or integrate with third-party APIs or services. WASViking is not responsible for the availability, content, or practices of these external services.
10. Disclaimers
The services are provided "as is" and "as available" without warranties of any kind, whether express or implied. We do not guarantee that the platform will be error-free, secure, or uninterrupted, or that results will be accurate or complete.
11. Limitation of Liability
To the fullest extent permitted by law, WASViking LLC shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of data, business interruption, or security breaches caused by misuse of the platform.
12. Indemnification
You agree to indemnify, defend, and hold harmless WASViking LLC, its officers, affiliates, and employees from any claim, loss, or liability (including legal fees) arising from:
- Your misuse of the Services;
- Unauthorized or illegal scans;
- Breach of these Terms;
- Your violation of applicable laws or third-party rights.
13. Export Compliance
You agree to comply with all applicable U.S. export control laws. You may not use or export the Services in violation of U.S. laws or to any restricted jurisdictions.
14. Modifications to the Terms
WASViking may update these Terms from time to time. Updates will be posted on our website, and your continued use after changes constitutes acceptance of the new version.
15. Governing Law and Jurisdiction
These Terms shall be governed by and construed under the laws of the State of Florida, United States, without regard to conflict of law principles. All legal actions must be brought in courts located in Florida.
16. Compliance with Brazilian Data Protection Law (LGPD)
If you are located in Brazil, you acknowledge that WASViking processes data in accordance with the Brazilian General Data Protection Law (LGPD – Law No. 13,709/2018), and that any personal data collected or processed by WASViking is handled in compliance with the principles and legal bases established by this law.
17. Exposure Intelligence and Sensitive Data Handling
The Exposure Intelligence feature is designed to identify potential security risks related to domains, credentials, and publicly exposed data associated with assets under the Customer’s control.
The Customer acknowledges and agrees that Exposure Intelligence findings may include personal or sensitive data (such as email addresses, usernames, or credential indicators), and that such data is processed strictly for legitimate security and risk assessment purposes.
The Customer is solely responsible for ensuring that it has a valid legal basis to monitor, access, and use such data, including compliance with applicable data protection, privacy, and employment laws.
WASViking does not verify ownership of individual data subjects and shall not be responsible for the Customer’s use or interpretation of any data obtained through the platform.
Access to sensitive fields may be restricted, masked by default, and logged for auditing and abuse prevention purposes.
18. Contact Information
If you have questions about these Terms, contact us at:
WASViking LLC
Orlando, FL, USA
[email protected]