1. All Reports Are Private
Both security audit reports and technical SEO fix reports are private. Each is delivered only through a unique, cryptographically random access link and is shown to you inside your client portal. Reports are never listed publicly, browsed, or indexed by search engines.
2. Private, Link Only Access
Each report is issued with a unique access token. Reports cannot be guessed, browsed, or enumerated. Only a person holding the exact link can open the report. We apply "noindex" and "do not store" controls to every report to keep them out of search engines and shared caches.
3. Why We Restrict Access
Security reports describe potential weaknesses in a website. Public exposure could assist attackers. Expiring access by private link limits that risk and keeps the report with you and the people you choose to share it with.
4. Link Expiry
For security, private report links automatically expire after 30 days by default, unless a different period is agreed. After expiry, the link stops working and displays an "expired" notice. We can issue a fresh link or a new audit on request, at our discretion.
5. View Limits and Revocation
We may apply a maximum view count to a report and may revoke, disable, or replace any link at any time, including if we believe it has been shared inappropriately, if payment is outstanding, or for security reasons. Revocation is effective immediately and without liability to you.
6. Your Responsibilities
Treat report links like passwords. Do not post them publicly (social media, forums, public documents, issue trackers). You are solely responsible for anyone to whom you forward a link and for any consequences of that sharing. If you believe a link has been exposed, notify us immediately so we can revoke and reissue it.
7. Nature of Findings; No Warranty
Reports reflect the site's condition at the time of scanning only. Findings are provided for informational purposes, are automated and/or manual in nature, and may contain false positives, false negatives, or omissions, and may become outdated as your site and the threat landscape change. A report is not a certification, guarantee, or warranty that your site is secure, compliant, or free of vulnerabilities or malware. Reports are provided "AS IS" under the disclaimer and limitation of liability in our Terms of Service.
8. Use of Reports
Reports are licensed for your own internal business use only. You may not resell, republish, sublicense, or present our reports or report formats as your own, or use them to make representations to third parties, without our written consent. You are responsible for deciding whether and how to act on any finding, and for any action or inaction based on a report.
9. Authorization
Reports are generated only for websites you own or are authorized to have scanned, as warranted in Section 3 of our Terms of Service. You are responsible for ensuring any report you request or share is lawful.
10. Changes
We may update this Policy at any time by posting a revised version. Continued access to any report after changes take effect constitutes acceptance.
11. Contact
Questions: audit@candidaudit.in.