Terms of use

Last updated: 2026-11-03

These terms apply to the website secaudit.eu, its public verification pages and panel, and the services the Security Audit & Compliance plugin for WordPress uses. The service is run by AngelForce OÜ, Narva mnt 5, 10117 Tallinn, Estonia (registry code 16520440).

The plugin, everything it does on your own site, the verification page and the vulnerability database are free, and so are the malware signatures and firewall rules 30 days after we release them. The services that run on secaudit.eu (signed report documents, the newest signatures and firewall rules, AI assistance, off-site scanning, downtime and certificate alerts, urgent vulnerability alerts and the panel for many sites) are part of the paid plans described under "Paid plans". Until the online checkout opens, they are available to every site at no charge as early access (see "Early access"). secaudit.eu sells only the automated services described in these terms. We do not do hands-on work on customer sites, consulting or remote support.

The plugin itself is free software under the GNU General Public License v2 or later; these terms do not limit the rights that licence gives you.

What a verification page means

A verification page shows the security score and audit date that the Security Audit & Compliance plugin reported for a site, and whether its malware, core-file and spam-link checks passed at that time.

It does not mean that a site is secure, free of vulnerabilities, or compliant with GDPR, NIS2, the Cyber Resilience Act or any other law. It is not a certification, and AngelForce OÜ does not audit sites by hand. Do not rely on it as a guarantee when deciding whether to trust a website.

If you publish a verification page

You may publish a page only for a website you run or are authorised to manage. By turning the option on in the plugin, you confirm that.

You agree not to:

• change the plugin or its reports to show a better result than the real one
• show the seal, or claim a verification, for a site that has no active verification page
• enter personal data of other people, or anything unlawful, misleading or offensive, in the business details
• use the service to attack, overload or probe secaudit.eu or other systems

We do not list sites with adult content, escort services, gambling or betting, pirated content, drugs, fake documents or hacking services, or other illegal content. We check this automatically each time a page is published. We may refuse, remove or mark as revoked any page that breaks these terms, or for which we receive a well-founded complaint, without notice. If you think we made a mistake, write to info@secaudit.eu.

You can remove your page at any time by turning the option off in the plugin, or by writing to us.

The malware-signature feed

The feed is a list of detection patterns, signed by us so the plugin can tell it has not been altered. It is provided for defensive use in the Security Audit & Compliance plugin. No detection list catches all malware, and any list can produce false alarms. Review findings before deleting files.

During early access, every site receives new signatures and firewall rules the day we release them. After early access, they reach sites without a paid plan 30 days after we release them; sites with a plan receive them the same day.

Report documents

With a paid plan, the plugin can have secaudit.eu turn its findings into a GDPR, NIS2 or CRA report document (PDF or CSV); during early access, every site can use it. Each document carries a report code; anyone can ask us whether a code exists and for which site, report type and date it was made. A report document describes what the plugin found at that moment. It is not a certification, an audit by us, or a statement that the site complies with a law.

Original copies of the plugin

The services, the verification page and the seal are made for the plugin as we release it. The plugin compares its own files with the list of files we publish for each release. If its files were changed, it tells the site's administrators, and the verification page does not show the site as verified. You may still change the plugin under its licence (GNU GPL v2 or later); a changed copy simply cannot use the seal, and you may not offer a changed copy under the name secaudit or with our logo.

Downtime and certificate alerts

You may turn the alerts on only for a website you run or are authorised to manage, and only with an email address you may use for this. Every alert mail has a link to stop the alerts.

The alerts are a convenience, not a guarantee. We check from one place every five minutes, so we can miss a short outage, report one that only our network sees, or send a mail late or not at all. Do not rely on them as your only monitoring.

The panel

You may link only websites you run or are authorised to manage. Anyone who can read your email, or use one of your passkeys, can sign in to your account, so keep both safe. You can remove sites and delete your account in the panel at any time. We may close accounts that break these terms or are used to attack or overload the service.

The panel shows what each site's plugin reported, with its history and the results of our downtime checks. It is not a full audit, and a site can be less secure than its summary suggests.

Off-site scanning

You may turn it on only for a website you run or are authorised to manage. By turning it on, you confirm that you may send that site's code files to us for scanning.

The scan uses detection patterns like those in the feed: it can miss malware and can produce false alarms. To keep the service fair, we limit how much each site can send per day, and we may pause the service under heavy load; the plugin then scans on the site's own server.

AI assistance

You may turn it on only for a website you run or are authorised to manage. By using it, you confirm that you may send the finding details, code excerpts and site details described in the privacy policy to us and our AI providers.

The answers are written by an AI model. They can be wrong or incomplete, and they are advice, not a security audit, legal advice or a guarantee: check them before you act, and never delete or change files only because an answer says so. A "second opinion" never removes a finding by itself. The daily limits shown in the plugin apply, and we may pause the service under heavy load or when our AI providers are unavailable.

Early access

Until the online checkout opens, the Pro and Agency services are available to every site at no charge. We collect no payment details during early access, and nothing turns into a paid plan by itself. When early access ends, the Pro and Agency services stop on sites without a plan; everything the plugin does on your own site, the verification page and the vulnerability database stay free. We announce the end date on secaudit.eu at least 14 days ahead.

Paid plans (secaudit.eu Pro and Agency)

Who sells. The checkout is run by our payment partner, which acts as the merchant of record for your purchase: it takes the payment, charges the applicable VAT or sales tax, issues the receipt and invoice, and handles refunds of the payment. Its name and buyer terms are shown at checkout and on your receipt.

Who can buy. We cannot sell plans to customers in Ascension Island, China, Cuba, Iran, Kosovo, North Korea, Russia, Syria or Tristan da Cunha, or to persons and companies on EU, UN or US sanctions lists, or for use in those places. The plans may not be used in breach of export-control or sanctions law.

Prices. Prices on the pricing page are in euros (EUR) and include VAT. The checkout shows the final price, with the tax, before you pay.

What a plan includes. A plan gives the sites it covers the services that run on secaudit.eu: signed report documents, the newest signatures and firewall rules the day they are released, AI assistance, off-site malware scanning, downtime and certificate alerts, urgent alerts when a newly published serious vulnerability affects a covered site, and, with the Agency plans, the panel for many sites. What each plan includes and costs is shown on https://secaudit.eu/pricing/ when you buy it. The services stay subject to the sections above (for example the daily limits of the AI assistance and of off-site scanning).

Delivery. Plans are delivered electronically. Right after payment our server emails the license key to the address used at checkout, usually within minutes. Enter it in the plugin under Security Audit → Settings → License; the services start automatically. Nothing is shipped. If the key has not arrived within one hour, write to info@secaudit.eu.

Term, renewal and cancellation. Plans are yearly subscriptions. They renew automatically for another year at the end of each year, at the price then shown, unless you cancel before the renewal date; we say so on the pricing page and at checkout before you pay. We email you at least 14 days before each yearly renewal, with the date, the price and how to cancel. You can cancel at any time with the link in your receipt mail, or by writing to info@secaudit.eu; cancelling needs no reason and no form. The plan then stays active until the end of the year you paid for. If a renewal payment fails, the plan stays active for 7 more days while the payment is retried.

If you are a consumer. After a plan has renewed at least once, you may end it at any time: it then ends at the end of the current month, and we refund the unused full months of that year.

License key and sites. A plan covers the number of sites it names. Each site address counts as one site: every domain, every subdomain and every path of a multisite network is its own site. A site joins a plan when its plugin proves that it controls the domain. You can free a site and use the place for another site a limited number of times per month (the panel shows how many). With an Agency plan, the sites linked to the panel of the account with the buyer's address are covered too, up to the plan's number of sites.

Fair use. You may not share, sell, rent or publish a license key, use one plan for more sites than it covers, resell the services, give others access to them, or work around the limits. Agencies may use an Agency plan for the client sites they manage. A key that is tried on many sites within a short time is locked automatically; the buyer can make a new key in the panel. We may suspend or end a plan that breaks these terms; refunds then follow the refund policy and the law.

Price and plan changes. We may change prices or the content of the plans for future years, never for a year you have already paid for. We tell you by email at least 30 days before a renewal at a higher price or with less included, so you can cancel before it.

Refunds. Whether you are a consumer or a business, you get a full refund when you ask within 14 days of your first payment for a plan or of an automatic yearly renewal, no questions asked. See the refund policy: https://secaudit.eu/refund/

Availability. We aim to keep the paid services running at all times, but we do not promise that they will never be interrupted. They are tools that help you secure your site; they cannot make it secure on their own.

Articles

The guides on secaudit.eu are general information, not legal or professional advice for your situation. Some articles are written with the help of AI tools; each article says so.

Availability and changes

We may change, suspend or end any part of the free services. We will try to announce major changes on this website in advance. If we end a paid service before the end of a year you paid for, we refund the unused part of that year.

Liability

We provide the services as they are. To the extent the law allows, AngelForce OÜ is not liable for loss caused by using or being unable to use the services, or by relying on a verification page or a scan result, except for loss caused intentionally or through gross negligence, and except for liability that cannot be limited by law, such as for injury to life or health. For the paid plans, our total liability for each year of a plan is limited to the amount paid for that year, with the same exceptions.

If you are a consumer, nothing in these terms limits the rights you have under the mandatory law of the country where you live.

Law and disputes

Estonian law applies. For disputes with businesses, Harju County Court (Harju Maakohus) in Tallinn has jurisdiction. Consumers can also bring a claim in the courts of the country where they live.

Contact

• Email: info@secaudit.eu. We answer emails within 2 business days.
• Phone: +372 5705 2044 (billing and account questions, Mon–Fri 9–17 Estonian time)
• AngelForce OÜ, Narva mnt 5, 10117 Tallinn, Estonia