Terms of Service

Last updated: March 2026

Please read these terms carefully before using AuditROI. By accessing our platform, you agree to be bound by these terms.

1

Definitions and Interpretation

In these Terms of Service, the following definitions apply:

"AuditROI", "we", "us", "our"

Means AuditROI, a product of QuestFeed Pty Ltd (ABN 58 632 013 855), an Australian Private Company registered in Queensland.

"Platform"

Means the AuditROI application at app.auditroi.com, the marketing website at auditroi.com, and all associated APIs, infrastructure, and services.

"Services"

Means all security intelligence services provided through the Platform, including external security scanning, vulnerability assessment, threat intelligence enrichment, ML-based scoring, report generation, and continuous monitoring.

"User", "you", "your"

Means any individual or entity accessing or using the Platform or Services, whether on a free or paid subscription.

"Scan"

Means an automated external security assessment of a domain or set of domains using our scanner catalog, ML models, and threat intelligence database.

"Report"

Means the security assessment output generated by a Scan, including findings, risk scores, remediation guidance, and executive summaries.

2

About AuditROI

What We Provide

External security vulnerability scanning (266 scanners)
ML-powered risk scoring and prioritization (184 models)
Threat intelligence enrichment (507M+ records)
Attack chain mapping and kill chain analysis
Compliance mapping (18 frameworks)
Continuous monitoring and alerting
Executive and technical security reports
Remediation guidance with effort estimates

What We Do NOT Provide

Professional legal, regulatory, or compliance advice
Guarantee of specific security outcomes or certifications
Internal penetration testing or red team operations
Website development, hosting, or remediation services
Insurance or indemnification against security incidents
Access to your internal systems (we are external-only)
3

Acceptance of Terms

By accessing or using the Platform, you acknowledge that you:

Have read, understood, and agree to be bound by these Terms of Service

Have read and agree to our Privacy Policy

Are at least 18 years of age or have legal authority to enter these Terms on behalf of an organization

Will use the Platform only for lawful purposes and in accordance with these Terms

Have the authority to bind the organization you represent (if applicable)

Changes to Terms: We may modify these Terms at any time. Material changes will be communicated via email to registered users. Your continued use of the Platform after changes constitutes acceptance of the modified Terms.

4

Authorized Use & Domain Ownership

Domain Authorization

By submitting a domain for scanning, you represent and warrant that:

  • - You own the domain or have explicit written authorization from the domain owner to perform security scanning
  • - You have the legal right to submit the domain and receive security assessment results
  • - The domain does not host content that violates any applicable laws or third-party rights
  • - You understand that AuditROI performs external scanning using publicly available information and standard security testing methodologies

Prohibited Conduct

You must NOT:

Scan domains you do not own or have authorization to scan
Attempt to gain unauthorized access to the Platform, its infrastructure, or other users' data
Use the Platform to facilitate attacks, harassment, or unauthorized surveillance of third parties
Upload viruses, malware, or harmful code to the Platform
Attempt to reverse engineer, decompile, or extract our proprietary scanning technology or ML models
Use automated tools to scrape, crawl, or extract data from the Platform beyond normal API usage
Resell, sublicense, or redistribute our Services or Reports without written authorization
Use the Platform in violation of any applicable local, state, national, or international law
5

Subscriptions & Payment

Service Tiers

AuditROI offers multiple subscription tiers (Free, Starter, Professional, Enterprise) with varying capabilities, scan limits, monitoring features, and data retention periods as described on our Pricing page.

Billing

Paid subscriptions are billed monthly or annually in advance via Stripe. All prices are in USD unless otherwise stated. You authorize us to charge your payment method on a recurring basis until you cancel.

Cancellation

You may cancel your subscription at any time through your account settings. Cancellation takes effect at the end of the current billing period. No pro-rata refunds are provided for partial periods. The Free tier remains available after cancellation.

Price Changes

We may change subscription prices with 30 days' advance notice. Price changes take effect at the start of your next billing period. If you do not agree to a price change, you may cancel before it takes effect.

Asset Packs

Additional monitored asset capacity can be purchased as add-on packs. Asset packs are billed on the same cycle as your subscription and are non-refundable.

6

Scan Accuracy and Limitations

Accuracy Notice

While we use 266 specialized scanners, 184 ML models, and 507M+ threat intelligence records to provide comprehensive assessments, our findings are informational and do not constitute professional security, legal, or compliance advice. Always consult qualified professionals before making critical security decisions based on our Reports.

Our scans and Reports are subject to the following limitations:

  • - Scans are based on externally observable information and automated analysis. They cannot detect vulnerabilities that require internal access
  • - We cannot guarantee the identification of all vulnerabilities, especially zero-day exploits or application-logic flaws requiring authenticated access
  • - Security posture may change after the scan date; results represent a point-in-time assessment
  • - ML model predictions (including exploit forecast and risk scoring) are probabilistic and should be interpreted as guidance, not certainty
  • - Threat intelligence data is aggregated from third-party sources and may contain inaccuracies or gaps
  • - Compliance mapping is automated and does not replace a formal compliance audit by a qualified assessor
7

Intellectual Property

The Platform and its original content, features, and functionality are owned by QuestFeed Pty Ltd and protected by international intellectual property laws. This includes:

  • - The AuditROI name, logo, and branding
  • - Platform design, layout, and user interface
  • - Scanning technology, ML models, and proprietary algorithms
  • - Threat intelligence database structure and enrichment methodology
  • - Report formats, scoring frameworks, and assessment methodology

Report License

Reports generated from your Scans are licensed to you for your internal business purposes only. You may share Reports within your organization and with your authorized security consultants. You may not resell, publicly redistribute, or use our Reports or methodology to create competing services without prior written consent.

8

Disclaimers and Limitations

Disclaimer of Warranties

To the maximum extent permitted by law, the Platform and Services are provided "AS IS" and "AS AVAILABLE" without warranties of any kind, whether express or implied, including but not limited to:

  • - Implied warranties of merchantability or fitness for a particular purpose
  • - Warranties that the Platform will be uninterrupted, error-free, or free of harmful components
  • - Warranties regarding the accuracy, completeness, or reliability of scan results
  • - Warranties that our Services will detect all vulnerabilities or prevent security incidents

Limitation of Liability

To the maximum extent permitted by Australian law:

  • - We shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, data, business opportunities, or goodwill
  • - Our total aggregate liability for all claims arising from or relating to the Services shall not exceed the total amount you paid to us in the twelve (12) months preceding the claim
  • - We are not liable for any security incidents, data breaches, or losses arising from actions taken or not taken based on our Reports or recommendations
  • - We are not liable for damages arising from the use of third-party services or content referenced in our Reports

Consumer Guarantees

Nothing in these Terms excludes, restricts, or modifies any consumer guarantee, right, or remedy conferred by the Australian Consumer Law (Schedule 2 of the Competition and Consumer Act 2010) that cannot be excluded, restricted, or modified by agreement.

9

Additional Terms

a Confidentiality

We treat all scan results and vulnerability data as confidential. We will not disclose your findings to third parties except: (i) with your explicit consent, (ii) to our service providers under confidentiality obligations, (iii) when required by law or valid legal process, or (iv) in anonymized, aggregated form that cannot be attributed to you.

b Indemnification

You agree to indemnify, defend, and hold harmless QuestFeed Pty Ltd, its officers, directors, and employees from and against any claims, damages, losses, or expenses (including reasonable legal fees) arising from: (i) your violation of these Terms, (ii) your unauthorized scanning of third-party domains, or (iii) your use of the Services in violation of applicable law.

c Termination

We may suspend or terminate your access immediately and without prior notice if you: breach these Terms, engage in fraudulent or unlawful activity, scan domains without authorization, or at our sole discretion. Upon termination, your right to use the Platform ceases immediately. We may retain your data as required by law or our data retention policy.

d Force Majeure

We shall not be liable for any failure or delay in performing our obligations where such failure or delay results from events beyond our reasonable control, including but not limited to natural disasters, pandemics, war, government actions, internet outages, or third-party service failures.

e Governing Law

These Terms are governed by and construed in accordance with the laws of Queensland, Australia. You submit to the exclusive jurisdiction of the courts of Queensland and the Federal Court of Australia for any disputes arising from these Terms.

f General Provisions

  • Entire Agreement: These Terms, together with our Privacy Policy, constitute the entire agreement between you and AuditROI regarding the Services.
  • Severability: If any provision of these Terms is found to be unenforceable, the remaining provisions shall remain in full force and effect.
  • Waiver: Our failure to enforce any right or provision of these Terms does not constitute a waiver of such right or provision.
  • Assignment: You may not assign or transfer these Terms without our prior written consent. We may assign our rights and obligations without restriction.

Contact Us

For questions about these Terms of Service, please contact:

QuestFeed Pty Ltd

ABN: 58 632 013 855

Email: hello@auditroi.com

Web: auditroi.com

Location: Queensland, Australia

Document Version: 3.0 | Effective: March 2026