Terms of Service
Last updated: October 2026
By using SiparSec, you agree to these terms.
What SiparSec Does
SiparSec performs passive analysis of HTTP security headers on publicly accessible websites. It sends a single HTTPS request to the target URL, reads the response headers, and evaluates them against OWASP standards. It does not attempt to exploit vulnerabilities, access restricted content, or perform penetration testing. SiparSec is an independent project and is not affiliated with, endorsed by, or sponsored by the OWASP Foundation. OWASP is a registered trademark of the OWASP Foundation.
Acceptable Use
You may scan any publicly accessible website. You are responsible for ensuring you have authorization to scan any target that is not publicly available. Do not use SiparSec to scan targets you do not own or have permission to test. Do not attempt to circumvent rate limits or abuse the service.
Data Collection
SiparSec stores the URL you submit, the scan results (response headers, score, grade), and your IP address for rate limiting purposes. Scan results are publicly accessible via their report URL. We do not collect personal information beyond what is necessary to operate the service.
Disclaimer
Scan results are informational and do not constitute a security audit or certification. Scores reflect HTTP header configuration only and do not assess application logic, server configuration, or other security aspects. SiparSec is provided as-is with no warranty of any kind.
Rate Limits
To ensure fair access, scans are limited to 1 per minute and 10 per day per IP address. Results are cached for one hour. Attempting to circumvent these limits may result in temporary or permanent blocking.
Changes
We may update these terms at any time. Continued use of SiparSec after changes constitutes acceptance of the updated terms.