🩺 Security Ready日本語EnglishLog in

Terms of Service

Established November 10, 2026

This English version is provided for reference. The Japanese Terms of Service are the governing version; in case of any difference, the Japanese text prevails. Read the Japanese original (利用規約)

The key points first. (1) We can only scan servers whose Owner has given Authorization. If you record anything about Authorization that is untrue, you are responsible. (2) A scan covers what was found at that time and within that scope. Finding nothing is not a guarantee of safety. (3) As a rule, the most we will pay in compensation is the fees you paid in the most recent 12 months (except where we acted intentionally or with gross negligence).

Article 1 (About These Terms)

  1. These Terms of Service (the "Terms") set out the conditions for using "Security Ready" (the "Service") provided by KazLinks Inc. (株式会社カーズリンクス; the "Company").
  2. Anyone who uses the Service (a "User") shall use the Service after agreeing to these Terms.
  3. The Service is intended to be used by businesses for their own business purposes.

Article 2 (Definitions)

    • "Target Server" means a server or website that a User has registered with the Service as the subject of scans.
    • "Owner" means the company or person that has the authority to manage a Target Server.
    • "Authorization" means the Owner's approval of scans, specifying the scan level, period, time window and upper limit on the number of requests.
    • "Scan" means an automated test performed by the Service on a Target Server to look for weaknesses (vulnerabilities) and misconfigurations.

Article 3 (Authorization as a Prerequisite for Scans)

  1. For each Target Server, the User must obtain Authorization for scans from the Owner and accurately record its content in the Service. The same applies where the User is the Owner.
  2. The User warrants that the recorded content of the Authorization is true and that the User will not request scans beyond the scope of the Authorization.
  3. If damage is caused to the Company or a third party because the content of the Authorization was untrue, or because of a request beyond the scope of the Authorization, the User shall bear responsibility for it and shall compensate the Company for the damage incurred (including the costs of dealing with third parties).
  4. The Company performs scans based on the User's declaration (that the User is the administrator of the target, or an agent who has obtained proper authorization from the administrator) and on the recorded scope of the Authorization. The Company has no obligation to verify the content of the declaration. The Company records the declaring User, the date and time, and the connection source. The Service is designed so that scans outside the scope of the Authorization stop automatically.

Article 4 (Content and Limitations of Scans)

  1. Scans use automated tools to examine the parts visible from the internet. Screens that require login (except where a Cookie has been provided for in-depth testing), the inside of servers, and defects specific to business workflows are, in principle, out of scope.
  2. Scan results reflect the time and scope of the scan. Vulnerabilities published after a scan are handled in subsequent scans and matching.
  3. The Company does not guarantee that scans will find all vulnerabilities in a Target Server. The fact that no vulnerability was found does not guarantee that no vulnerability exists or that no harm will occur.
  4. The "to-dos" included in scan results are general guidance on countermeasures. Actual countermeasures should be taken at the discretion of the User or of a contractor engaged by the User.

Article 5 (In-Depth Testing)

  1. "In-depth testing", such as tests that attempt attacks by sending malicious commands through input fields, is performed only where there is a record of the Owner's written consent.
  2. In-depth testing may affect a Target Server, for example by writing data to it, slowing it down or causing it to stop temporarily. The User shall back up data in advance and, if the testing is performed in a production environment, shall make the request after explaining these effects to the Owner.
  3. The Company is not liable for effects caused by in-depth testing, except where the Company acted intentionally or with gross negligence.

Article 6 (Survey Program)

  1. The Company provides a "survey program" that collects the names and versions of software installed on a Target Server. The survey program only reads information and does not change the settings or data of the Target Server.
  2. Whether to run the survey program, and running it, are at the User's own discretion and responsibility.

Article 7 (Handling of Information Entrusted to Us)

  1. The Company uses information such as scan results, configuration information, survey program results and Cookies provided to it solely for the purpose of providing the Service.
  2. Cookies provided for testing screens after login are stored encrypted and used only for in-depth testing. The User shall provide Cookies of a test account, not of a real customer's account.
  3. Except as required by law, the Company does not disclose this information to third parties without the User's consent. However, the Company may have contractors, such as cloud service providers, handle it to the extent necessary to provide the Service.
  4. The Service uses information from public vulnerability databases (such as NVD, CVE and OSV). For matching, the Company may query external databases with software names and versions, but does not send the names of Target Servers or information about Users.

Article 8 (Prohibited Acts)

  1. The User shall not do any of the following:
    • Register as a Target Server, or request scans of, a server without the Owner's Authorization
    • Use the Service to attack third parties or to prepare for such attacks
    • Make records about Authorization that are contrary to fact
    • Lend or transfer a Service account to a third party
    • Interfere with the operation of the Service, or infringe the rights of the Company or third parties
    • Act in violation of laws and regulations or public order and morals

Article 9 (Suspension of Scans and Interruption of the Service)

  1. The Company may stop scans without prior notice if it receives an inquiry or complaint from the Owner of a Target Server or a third party, if there is doubt about the content of an Authorization, or if it otherwise deems it necessary.
  2. The Company may interrupt all or part of the Service in the event of maintenance, failures, natural disasters or other unavoidable circumstances.

Article 10 (Fees)

  1. Fees for the Service are charged monthly per server (per host name), in the amounts shown on the Company's website. The first scan (the free in-depth scan) is free of charge.
  2. Payment methods, annual payment, multi-server discounts and similar matters are determined separately by the Company and communicated to the User.

Article 11 (Scope of Liability)

  1. Where the Company is liable to compensate the User for damage, such liability is limited to ordinary damage directly and actually incurred by the User due to causes attributable to the Company. It does not include indirect damage such as lost profits, loss of data or loss of business opportunities.
  2. The amount of compensation payable by the Company is capped at the total fees for the Service paid by the User to the Company during the 12 months preceding the date on which the damage occurred.
  3. The preceding two paragraphs do not apply where the Company acted intentionally or with gross negligence.

Article 12 (Confidentiality)

  1. The Company and the User shall not disclose to third parties, without the other party's consent, confidential information of the other party learned through the Service, and shall not use it for purposes other than those of the Service.

Article 13 (Changes to These Terms)

  1. The Company may change these Terms as necessary. When doing so, the Company will notify Users in advance of the content of the change and its effective date by posting it on the Service's screens or by other means.

Article 14 (Governing Law and Jurisdiction)

  1. These Terms are governed by and construed in accordance with the laws of Japan. Any dispute relating to the Service shall be subject to the exclusive jurisdiction of the Chiba District Court as the court of first instance.

End