These terms cover use of CBWatch (cbwatch.co.uk), operated by Connor Burton. Using the site — running a free scan, creating an account, or subscribing to monitoring — means you agree to them.
This is not a comprehensive security audit. CBWatch runs a fixed set of automated, passive checks against publicly available information at a single point in time. A clean result doesn't mean a domain is secure, and a low score doesn't capture every risk — it reflects only what these specific checks look at. It isn't a penetration test, a compliance assessment, or a substitute for professional security advice, and shouldn't be relied on as one.
See Methodology for exactly what is and isn't checked.
The homepage offers a free, unlimited, no-login scan of any domain. Creating an account and subscribing adds ongoing monitoring of domains you choose: automatic rescans, a history of results, and email alerts when something notable changes.
Login is passwordless — a one-time link sent to the email address you provide. You're responsible for keeping access to that inbox secure; anyone who can read a login link can access the account it was sent to.
Monitoring is a recurring monthly subscription, billed and processed by Stripe. You can cancel at any time from your dashboard's billing portal — monitoring stays active until the end of the billing period already paid for, and doesn't renew after that. We don't offer partial refunds for unused time within a period you've already paid for.
The free scanner exists for checking domains you own or are otherwise legitimately interested in the security posture of. Don't attempt to circumvent the scan rate limits, use the service to build a database of results at scale, or use it as part of an attack against the domains it reports on. We may restrict or suspend access for use that looks like abuse.
The service is provided "as is." We don't guarantee it will be available without interruption, that every finding is accurate or complete, or that a result stays current — several checks (breach data, exposed-services data) are inherently snapshots that can go stale between scans. See Methodology for the specific, known limitations of each check.
To the extent permitted by law, CBWatch and Connor Burton aren't liable for any loss or damage arising from your use of the service, your reliance on a scan result, or a security incident affecting a domain you scanned or monitored — whether or not CBWatch reported an issue related to it. Nothing in these terms excludes liability that can't legally be excluded, such as for fraud.
You can stop using the service and cancel your subscription at any time. We may suspend or terminate an account for breach of these terms, including the acceptable-use section above.
These terms may be updated as the service changes. Material changes will be reflected in the "last updated" date, and account holders will be notified by email.
These terms are governed by the laws of England and Wales.