Terms of service

These terms apply when you request a report from us, receive one, or engage us for security work. Please read them. If anything is unclear, ask us at hello@neurabase.pro before proceeding.

What we provide

neurabase produces a passive security assessment of a website, based only on information that website already makes public. Where you engage us further, we may also carry out remediation work, monitoring or advisory services under a separate written agreement.

What a passive audit is, and is not

Our audit observes a website from the outside, exactly as any member of the public can. We do not log in, do not attempt to bypass any control, do not test for weaknesses by exploiting them, and do not access private systems or data.

This has an important consequence you should understand. A passive audit cannot prove a website is secure. It reports what we could observe from outside at the time of the scan. Problems may exist that an external observer cannot see, and a site that scores well can still be compromised through a route we cannot examine, such as a stolen password, an insider, or a weakness only visible from inside the network.

Our report is a starting point for improving security. It is not a certification, a guarantee, or a substitute for a full penetration test or a security programme.

Accuracy

We work hard to avoid false findings and we verify what we report. Even so, automated assessment of a live website can occasionally misread a configuration. If you believe a finding is wrong, tell us and we will re-check it and correct the report without charge.

Requesting an audit of a website

By asking us to audit a website, you confirm that you own it or are authorised to request an assessment of it. Do not ask us to scan a site you have no connection to.

Reports and confidentiality

A report is prepared for the business the website belongs to. Report links contain a long random token, are excluded from search engines and expire 30 days after creation. Please treat the link as confidential, since anyone holding it can open the report during that window.

We will not disclose the contents of your report to anyone else, except where we are required to by law.

Unsolicited outreach

We sometimes run a preview assessment of a public website and contact the business to offer the results. That contact will always identify us, explain what we did, and give a simple way to decline. If you ask us to stop, we will stop and add you to a permanent do not contact list.

Fees

The initial report is free and carries no obligation. Any paid work is quoted in advance and only begins once you accept in writing.

Liability

We provide our services with reasonable care and skill. To the extent permitted by law, neurabase is not liable for indirect or consequential loss, and our total liability in connection with any free report is limited to nil, since it is provided without charge. Liability for paid work is set out in the agreement covering that work.

Nothing in these terms excludes liability that cannot lawfully be excluded.

Governing law

These terms are governed by the laws of the Hong Kong Special Administrative Region, and the Hong Kong courts have exclusive jurisdiction.

Last updated: February 2026.