Effective date: 8 July 2026 · Last updated: 8 July 2026
These Terms of Service (the "Terms") govern your use of the free website scanner at scanner.pcrisk.com and the paid "Trust Badge" subscription service. Please read them together with our Privacy Policy. By creating an account, using the scanner, or subscribing, you agree to these Terms.
The scanner and the Trust Badge are operated by RCS LT, UAB, 18 I. Kanto str., 44296 Kaunas, Lithuania, European Union ("RCS LT", "we", "us"). You can contact us at support@pcrisk.com.
These Terms cover two services: (a) the free website scanner, which lets anyone scan a public website URL and produces a published report (a trust score of 0-100, a threat classification, screenshots, WHOIS/DNS/SSL data and an AI-generated summary); and (b) the paid Trust Badge, an embeddable seal and monitoring subscription for websites you control. Where a clause applies to only one service, that is stated.
Scans are automated and point-in-time. They draw on independent third-party data sources (including VirusTotal, Quttera, WHOIS/registrar providers, Tranco and OpenPageRank/Keywords Everywhere) that we do not control. Reports are published on public report pages. A trust score is an automated opinion and is not a guarantee; no vendor can guarantee 100% detection of threats.
Some information in a report (for example domain registrant details in WHOIS/DNS records) may include personal data obtained from public registries and third-party providers rather than from you. If you are an individual identified in a report and wish to object, correct or remove that information, use the dispute form on the report page or email support@pcrisk.com; every report can be reviewed by a person through this channel. How we handle this personal data is described in our Privacy Policy.
To use the Trust Badge you must create an account with a valid email address, which we verify by an emailed link. You may also sign in with Google or Apple. You are responsible for keeping your credentials secure and for activity under your account. By opening an account you confirm that you have the legal capacity to enter into a binding contract and that, where you act for an organisation, you are authorised to bind it. You may delete your account at any time from Settings; deletion is treated as a GDPR erasure and cascades to your subscriptions, domains and sign-in identities, subject to records we must retain by law (see the Privacy Policy).
When you create an account you accept these Terms and acknowledge the Privacy Policy through an explicit action at sign-up. We record the version accepted and the time of acceptance.
The Trust Badge is offered on three monthly plans. Prices are quoted in US dollars (USD):
| Plan | Price (USD, per month) | Domains |
|---|---|---|
| Solo | $19 | 1 |
| Pro | $39 | 5 |
| Business | $149 | 25 |
The figures above are the base subscription prices. Before you are bound, the total price payable, including any applicable taxes (such as VAT) and shown in your local currency where applicable, is calculated and displayed to you by Paddle at checkout. That checkout total is the binding price.
Paddle is the merchant of record. Your subscription is sold and billed by Paddle.com Market Limited, which acts as the merchant of record and authorised reseller. Your payment, invoicing, VAT/tax charging and remittance, refunds and chargebacks are handled by Paddle under the Paddle Buyer Terms. The Trust Badge service itself is provided to you by RCS LT, UAB under these Terms. Both sets of terms apply. Your card data is handled by Paddle and never touches RCS LT servers.
The Paddle checkout presents the required pre-contract information and an order button clearly labelled with an obligation to pay (for example "Subscribe & Pay" or "Order with obligation to pay", or Paddle's equivalent), so that you place your order only through an unambiguous, paid action.
Confirmation of your contract. After your order is placed, you receive confirmation of the concluded contract on a durable medium: Paddle issues an order/invoice email setting out the plan, price, billing period, renewal and withdrawal information, and RCS LT sends a welcome email confirming activation of the service.
New subscriptions include a 14-day free trial that requires a valid payment card on file. Unless you cancel during the trial, the subscription converts automatically to the paid monthly plan you selected. The exact date and amount of the first charge (the plan price plus any applicable tax, as shown by Paddle) are displayed to you at sign-up before you commit.
Subscriptions auto-renew monthly at the same price until cancelled. You can cancel anytime from your dashboard; cancellation is self-service and takes effect at the end of the current billing period, with no lock-in and no cancellation fee. Cancelling is at least as easy as subscribing. The cancellation flow is designed to meet the EU requirements for online cancellation and withdrawal applicable from 19 June 2026, including a clearly labelled, easily and continuously accessible cancellation function and confirmation of cancellation on a durable medium (email).
The binding price and terms are those presented and confirmed at checkout through Paddle. Prices, plans and features shown on the site (including any annual pricing) are indicative, may change or be withdrawn, and are not a binding offer (see clause 11(c)).
If you are a consumer in the EU/EEA, you have a statutory right to withdraw from this distance contract within 14 days. Because the Trust Badge is a digital service, the 14-day period runs from the conclusion of the contract. To withdraw, send any clear statement of your decision to support@pcrisk.com or to Paddle. You may use the model withdrawal form set out in Annex A to these Terms, which is available to you before you place your order; use of the form is optional.
Starting the service immediately. If you ask us to begin providing the Trust Badge service straight away (including starting the free trial) and acknowledge that you will lose your right of withdrawal once the service has been fully performed, then: (i) you may withdraw only while the service has not yet been fully performed, and you lose the right of withdrawal once the service has been fully performed on the basis of that prior consent and acknowledgement; and (ii) if you withdraw after performance has begun but before it is complete, you must pay a proportionate amount for the service already provided. You give this consent and acknowledgement as a distinct, active step at checkout, and Paddle confirms it to you on a durable medium (email). Where you did not give that consent, your full 14-day withdrawal right is preserved.
In addition to your statutory rights, we offer a voluntary 30-day money-back guarantee: if you are not satisfied, email support@pcrisk.com within 30 days of your first charge and we will arrange a refund through Paddle. This commercial guarantee is offered in addition to, and does not limit or replace, your statutory rights as an EU consumer, including your 14-day right of withdrawal and your rights if the service is not as described.
Each plan permits monitoring of the number of domains stated in clause 4. You must not exceed your plan's domain allowance or use automated means to circumvent limits. We may apply reasonable rate limits and fair-use controls to protect the platform, and may throttle or suspend usage that is abusive, excessive or degrades the service for others.
Subject to these Terms and an active subscription, RCS LT grants you a limited, revocable, non-exclusive, non-transferable and non-sublicensable licence to display the badge solely on the verified domain(s) covered by your plan. The badge is score-gated: it renders only while that domain's most recent daily scan scores at least 70/100, and it hides automatically otherwise. Its hiding is by design and is not a defect, and we make no representation that the badge will be continuously visible or that the service will be uninterrupted.
You must not alter, reproduce, spoof or fake the badge, display it on any unverified domain, or keep displaying it after your subscription ends. We may modify or revoke the badge and this licence.
We provide daily automated scans. We send essential service and security messages that you cannot opt out of while you hold an active account or subscription - including threat-alert and all-clear notices, and billing, account and legal notices. Separately, we may send an optional weekly digest, which is treated as direct marketing: it carries an unsubscribe link in every message, and unsubscribing suppresses only the digest and any other marketing content while your essential security and billing messages continue. The transactional-versus-marketing split and the legal bases for these emails are described further in our Privacy Policy.
On Pro and Business plans we also offer optional Slack and webhook alerts to endpoints you supply. Webhook payloads are signed with HMAC-SHA256 so you can verify them. Notifications are provided on a best-efforts basis and may be delayed, incomplete or undelivered; customer-supplied endpoints are used at your own risk. You must not rely on these alerts as your sole means of detecting security issues.
We offer a REST API with bearer keys. Access is plan-scoped: Pro is read-only, and Business is full access including adding and removing domains. API keys are confidential, are stored only as SHA-256 hashes, and you are responsible for all use under your key. You must not share keys, and you must not use the API to scan or add domains you do not own or lack authorisation to test. We may apply rate limits and may throttle, suspend or revoke keys for breach, security risk or non-payment, without liability.
You must not: scan or add domains you are not authorised to test where authorisation is required; use outputs to defame or harass; scrape or bulk-automate the service outside the documented API; reverse engineer the service; resell scan results; circumvent the score gate or fake a badge; or interfere with, overload or attempt to compromise the platform. We may suspend or terminate access for breach.
(a) "Verified / This website is safe" is an opinion, not a certification. The Trust Badge, trust score and any label such as "Verified" or "This website is safe" are an automated, point-in-time assessment generated from third-party data at the time of the most recent scan. They are an opinion only and are not a guarantee, warranty, certification, accreditation or representation that a website is secure, free of malware, vulnerabilities or threats, or safe to use. No reliance should be placed on the badge as an assurance of safety.
(b) The scan-date may lag the current state. Each badge and report shows the date of the scan on which it is based. A website's security posture can change at any time after a scan, so the badge and score may not reflect the current state of the website. Results are valid only as of the stated scan date, and we do not warrant that any result is up to date.
(c) Prices and plans are indicative. Prices, plans and features shown on the site (including any annual pricing) are indicative, are subject to change or withdrawal at any time, and do not constitute a binding offer. The binding price and terms are those confirmed at checkout through Paddle; where a displayed price is incorrect we may decline or cancel an order before it is confirmed.
(d) "Monitoring" means recurring automated scans. "Monitoring" and "monitored" mean periodic, automated scanning of your domain(s) at the frequency stated for your plan (currently daily). Monitoring is not continuous, real-time or human protection and does not prevent, block, remediate or remove threats.
To the maximum extent permitted by applicable law, the service and all outputs are provided "as is" and "as available". We disclaim all express, implied and statutory warranties, including merchantability, fitness for a particular purpose, accuracy, completeness, non-infringement, title, and uninterrupted, error-free or secure operation. We do not warrant that scans detect all threats or that scores or verdicts are accurate, current or complete. If you are a consumer, this disclaimer does not affect your statutory conformity rights under Directive (EU) 2019/770 as implemented in Lithuania - namely that the paid digital service matches its description, is fit for purpose, is supplied with updates and functions as described, together with the statutory remedy ladder (bringing the service into conformity and, where applicable, a price reduction or termination).
Reliance on third-party data. Scans and scores incorporate data from independent third-party sources that we do not control and do not warrant. We are not liable for third-party inaccuracy, latency, gaps or unavailability, and WHOIS output may include personal data supplied by those sources.
Nothing in these Terms excludes or limits liability that cannot lawfully be excluded or limited, including liability for (a) death or personal injury caused by negligence; (b) fraud or fraudulent misrepresentation; (c) wilful misconduct or gross negligence; and (d) any liability that cannot be excluded or limited under applicable mandatory law, including your statutory rights as a consumer under EU and Lithuanian law.
Subject to the paragraph above and to the maximum extent permitted by applicable law: (i) we shall not be liable for any indirect, incidental, special, consequential or punitive damages, or for loss of profit, revenue, data, goodwill or business, or for any loss arising from reliance on a trust score or badge, or from any missed, delayed, false-positive or false-negative threat assessment; and (ii) our total aggregate liability shall not exceed the total fees you paid for the Trust Badge subscription - whether to RCS LT or via Paddle as merchant of record - in the twelve (12) months before the event giving rise to the claim, or, for users of the free scanner who pay nothing, EUR 100.
You may stop using the free scanner at any time and cancel or delete your Trust Badge account as described above. We may suspend or terminate access for breach of these Terms, non-payment, or where required to protect the platform or comply with law. On termination your badge licence ends and you must remove the badge from your site. Clauses that by their nature should survive (including clauses 11, 12, 15 and 16) survive termination.
Our trust score is generated automatically from third-party security signals. It assesses websites, not individuals, and does not by itself produce legal or similarly significant effects on any natural person; every score can be reviewed by a person through our dispute channel. We do not use it to make solely automated decisions about you within the meaning of Article 22 GDPR. For Trust Badge customers, the show/hide of the badge at the 70/100 threshold is contract performance, not a decision producing legal or similarly significant effects on a natural person.
We may update these Terms from time to time. For material changes we will give reasonable notice, including by email to account holders where appropriate, and we will update the "Last updated" date above. Continued use after the changes take effect constitutes acceptance. If you do not agree, you may cancel and stop using the service.
These Terms are governed by the law of the Republic of Lithuania, and disputes fall to the courts of Kaunas. If you are a consumer, this does not deprive you of the protection of the mandatory consumer-law provisions of your country of habitual residence, nor of your right to bring proceedings before the competent courts there. Nothing in these Terms limits statutory rights you cannot lawfully waive.
If you are a consumer and have a complaint we cannot resolve directly, you may refer the matter to a competent alternative dispute resolution (ADR) body. In Lithuania the competent consumer authority is the State Consumer Rights Protection Authority (Valstybinė vartotojų teisių apsaugos tarnyba, vvtat.lt); consumers resident elsewhere in the EU may use the ADR body competent in their own country. Billing, invoicing, tax and refund complaints are handled by Paddle as merchant of record under the Paddle Buyer Terms.
Your statutory conformity rights for the paid digital service (that it matches its description, is fit for purpose, is supplied with updates and functions as described, together with the statutory remedy ladder) are preserved and are not limited by these Terms.
RCS LT, UAB, 18 I. Kanto str., 44296 Kaunas, Lithuania, European Union. Email: support@pcrisk.com. Billing, invoicing, tax and refund questions are handled by Paddle as merchant of record; other questions about the service can be sent to us directly. See also our Privacy Policy.
(Complete and return this form only if you wish to withdraw from the contract. If you consented to immediate performance of the service, see clause 5 for the effect on any amount owed.)
To: RCS LT, UAB, 18 I. Kanto str., 44296 Kaunas, Lithuania, European Union - support@pcrisk.com
I/We (*) hereby give notice that I/We (*) withdraw from my/our (*) contract for the supply of the following service:
- Ordered on (*)/received on (*): ____________________
- Name of consumer(s): ____________________
- Address of consumer(s): ____________________
- Signature of consumer(s) (only if this form is notified on paper): ____________________
- Date: ____________________
(*) Delete as appropriate.