Terms of Use
1. Acceptance and Authority
These Terms govern access to and use of the DastPilot API security service (“DastPilot”, the “Service”, “we”, “us” or “our”). In these Terms, DastPilot refers to the operator of the Service.
By creating an account or using the Service, you agree to these Terms. If you use the Service for an organization, you confirm that you have authority to accept these Terms for that organization. If you do not agree or do not have that authority, do not use the Service.
2. Description of the Service
DastPilot is an automated dynamic application security testing service for APIs. It imports OpenAPI or Swagger documents, lets users configure targets, credentials and roles, sends active HTTP requests to the selected target, and presents potential vulnerability findings and remediation guidance.
4. Security-Testing Risks
Security testing generates active HTTP traffic and may create, modify or delete test data, trigger alerts, consume resources or affect the target system. Use an isolated or non-production environment where practical, maintain backups and provide credentials with only the permissions required for the intended tests.
You are responsible for reviewing the scan configuration, choosing an appropriate time and environment, monitoring the target, and stopping a scan if it causes an unacceptable effect.
5. Account Responsibilities
Provide accurate account information, keep your credentials confidential and use reasonable measures to prevent unauthorized account access. You are responsible for activity performed through your account and for the users to whom you grant access. Notify DastPilot promptly at [email protected] if you suspect unauthorized use.
6. Customer Content
You retain ownership of API specifications, configuration and other content you submit. You grant DastPilot only the limited permission required to process that content, operate the Service and perform the scans you request.
You confirm that you have the rights and permissions needed to submit that content. Do not include information that is unnecessary for the requested scan. The handling of personal information is described in the Privacy Policy.
7. Payment and Dodo Payments
The published paid plan is $2 per API operation per month. An API operation is one method-and-path operation defined in an active OpenAPI or Swagger specification. For example, GET /users and POST /users are two API operations. The pricing page and checkout show the current plan details before purchase.
Paid subscriptions are sold and processed by Dodo Payments, the Merchant of Record. Payment methods, applicable taxes, invoices, renewals and refunds are handled through the checkout and billing services provided by Dodo Payments and may also be subject to Dodo Payments’ Buyer Terms.
8. Trial and Cancellation
No payment method is required to start the 30-day trial. When the trial ends, scanning access pauses unless the user chooses a paid plan and completes checkout.
You may manage or cancel an active subscription through the billing portal made available in the Service. Cancellation and any resulting access period are shown through the applicable billing flow. Contact [email protected] if you need help with account access or a billing issue.
9. Acceptable Use
You must not use the Service to test a system without authorization; break the law; infringe another person’s rights; distribute malware; obtain data you are not authorized to access; evade access controls or testing limits; interfere with the Service or another user; misrepresent your identity or authority; probe DastPilot’s own infrastructure without permission; or help another person do any of these things.
You must not resell, copy, reverse engineer or attempt to extract the source code of the Service except to the extent that applicable law does not allow that restriction.
10. Service Limitations and No Guarantee
DastPilot is an automated security-testing tool. It does not guarantee that every vulnerability will be identified and does not replace a complete security programme, professional penetration test, legal review, compliance audit or certification.
Findings may include false positives or may depend on the specification, credentials, role mappings, target behavior and scan configuration supplied. You are responsible for reviewing and validating findings before relying on them. The Service may be changed, interrupted or unavailable from time to time and is provided on an “as is” and “as available” basis to the extent permitted by applicable law.
11. Limitation of Liability
To the fullest extent permitted by applicable law, DastPilot will not be liable for indirect, incidental, special, consequential or punitive loss, or for loss of profits, revenue, business, goodwill or data, arising from or related to the Service or a scan. To the fullest extent permitted by applicable law, DastPilot’s total liability for claims arising from or related to the Service will not exceed the amount you paid for the Service during the 12 months before the event giving rise to the claim.
These limitations do not apply to liability that cannot lawfully be excluded or limited.
12. Suspension and Termination
DastPilot may limit or suspend access when reasonably necessary to address a security risk, suspected unauthorized testing, unlawful use, a material breach of these Terms, non-payment, harm to the Service or others, or a legal requirement. Where practical, DastPilot will provide notice and an opportunity to correct the issue.
You may stop using the Service and request account deletion at any time. Provisions that by their nature need to continue after access ends, including payment obligations already incurred, content permissions needed to complete requested processing, disclaimers and liability limits, will continue to apply.
13. Changes
DastPilot may update the Service and these Terms. Updated Terms will be posted on this page. For material changes, DastPilot may also provide notice through the Service or by email.
14. Applicable Law
These Terms are governed by applicable law. Nothing in these Terms limits any rights that cannot lawfully be excluded.
If any provision is found unenforceable, it will be limited to the minimum extent necessary and the remaining provisions will continue to apply. A failure to enforce a provision is not a waiver of it.
15. Contact
For questions about these Terms, account access or billing support, contact [email protected].