Public assessment terms

Service operator: NetGains Technologies Pvt Ltd. Published 27/10/2026.

Abuse and assessment-scope contact: support@netgainstechnologies.com.

Authority and exact scope

Request an assessment only for a website or application you own or are expressly authorised to assess. Obtain required customer, hosting and network approvals first. A verified office email identifies your account; it does not prove ownership of a website or grant permission to test another customer.

Your declaration covers the selected hostname, methods, request limits and assessment only. Apex and www are separate targets. A shared IP, certificate or redirect does not authorise testing another host, tenant or origin. Recurring work, authenticated testing and provider or hosting connections require their separately approved scope and consent.

Acceptable use and stop conditions

Use the service to review permitted evidence and plan remediation. Do not use it for unauthorised discovery, denial of service, credential guessing, exploitation, evasion, accessing unrelated data or bypassing another operator’s security controls. Do not evade limits by rotating identities or clearing cookies.

Normal public checks respect access denials, challenges, rate limits and bounded redirects. This permission does not authorise triggering application emails, submitting forms, changing configurations or attacking an origin behind a proxy. Imported research must have been obtained within its source owner’s authorisation. The service may refuse, pause or stop work for safety, capacity, uncertain authority or a credible complaint.

Evidence and access

Results are dated observations with stated confidence and coverage. Missing evidence is not a pass. Public technology clues do not verify installed patches or effective WAF rules. Automated results are not a complete penetration test, a guarantee against compromise or regulatory certification.

Your declaration grants no access to another user’s retained reports, private inventory, credentials, mailboxes or integrations. Those require separate current permissions. Do not upload passwords, tokens, unnecessary personal data or unrelated customer material.

Retention and deletion

The operator’s report-retention setting is 365 days. Eligible completed reports are removed by scheduled maintenance after the applicable retention cutoff, or earlier through authorised deletion. Cleanup is asynchronous and is not a promise of deletion at an exact minute.

Some sensitive records have shorter module-specific limits; operational settings, consent/access records, audit records and case history have their separately stated lifecycle. Provider mailboxes, independent infrastructure backups and exported or emailed copies are not recalled by portal deletion. Necessary incident or legal preservation requires a recorded purpose, restricted access and a review/deletion date. See the privacy notice for storage, requests and backup limitations.

Complaints, suspension and review

A target owner or hosting operator may report suspected unauthorised activity to support@netgainstechnologies.com. Include the hostname, UTC time range, sanitised request/source details and a safe way to verify your authority. Do not send passwords, codes, bearer tokens or private report links.

The operator may pause affected work while investigating and request authority evidence. Reinstatement requires explicit operator review of exact scope and limits. A complaint does not entitle its sender to another customer’s identity or private data. These terms operate alongside your service agreement and applicable law; no response-time or 24×7 support guarantee is created here.