Terms of use

Only scan what you are allowed to test

You may only scan websites and apps that you own or that you have explicit permission to security-test. Every scan asks you to confirm this, and the scanner refuses to run without it. Scanning systems without permission may be illegal where you or the target are located.

What the scanner does

RLS Radar sends a small number of read-only HTTP GET/HEAD requests (see the methodology). It does not write data, run exploits or brute-force anything, and it refuses private, local and cloud-metadata addresses. Scans are rate-limited per network.

No guarantee

The service is free and provided "as is", without warranties. A clean scan does not mean an app is secure, and a finding can be a false positive. You are responsible for verifying results and for the changes you make. To the extent the law allows, we are not liable for damage arising from use of the service.

Fair use

Don't use RLS Radar to attack, overload or harass anyone, or to get around its limits. We may block abusive traffic.

Reporting a vulnerability

Found a security problem in RLS Radar itself? Email rlsradar@mail.grokbot.com with steps to reproduce. Please don't access other people's data, run destructive tests or cause disruption. We aim to reply within 7 days. Our security.txt has the same contact.

Changes

We may update these terms; the date above shows the latest version. Privacy details are on the privacy page.