Terms of Service

Last updated 20 October 2026

Indicative scan, not a pentest

Abbi Labs provides an automated, indicative, passive scan. It is not a penetration test or security audit and does not guarantee your application is secure. Absence of findings does not mean absence of vulnerabilities.

Only domains you verify

You may only add domains you own or are authorised to test. Every domain must be verified via DNS TXT record (abbilabs-verify=<token>) or /.well-known/abbilabs.txt before scanning. We never scan unverified domains.

How scans behave

Scans are rate-limited and use read-only HTTP GET requests to publicly served resources. We do not exploit, brute-force, fuzz, or write data.

Plans & billing

Free: one-off scan of one verified domain. Starter (US$15/month): one app with weekly and deploy-triggered scans and email alerts. Pro (US$39/month): up to five apps. Subscriptions renew monthly until cancelled via the billing portal.

Liability

The service is provided “as is”. To the maximum extent permitted by law, Abbi Labs is not liable for losses arising from security incidents, whether or not detected.

Contact

support@abbilabs.xyz

Bought an Abbi Labs template? Contact support@abbilabs.xyz.