1The authorization box
1.1The scan request form has one required authorization box. You tick it yourself. An agent never ticks it.
1.2The box is required. It is not ticked by default. It is separate from the marketing-consent box.
2What you confirm
2.1This text has the version id [version id to be added]. By ticking the box, you confirm it in full:
I am a person, not an automated agent, and I am ticking this box myself. I own or control the AI agent at the address I entered, or its owner has given me authority to approve security testing of it. I authorize [company name to be added] to send test messages to that address through its chat interface, using the test key I provided, to check how the agent responds. I understand the testing is chat-only, non-destructive, rate-limited and capped, and that only one free scan is allowed per domain per week. I understand my agent's replies will be processed and stored as the Privacy Policy describes, including by a hosted AI model provider. I have read and accept the Terms of Service.
3In short
- Only test an agent you own or control.
- We send a limited set of chat messages to it. Nothing destructive. Rate-limited and capped.
- One free scan per domain per week.
- Use a throwaway test key. Revoke it after the scan.
- We check you control the address first, with a DNS record or a file.
- The result is automated. It is not a guarantee or a certification.
- Replies are stored and processed as the Privacy Policy says, including by an AI model provider.
3.1The summary does not replace the authorization text or the terms. If they differ, the terms win.
4How the box is shown and recorded
4.1The box is unticked when the page loads.
4.2The form cannot be sent unless the box is ticked.
4.3For each scan request we store: the version id of this text, the version id of the Terms of Service, the timestamp, and the request id.
4.4If this text or the summary changes in any way, including an input value, the version id changes.
4.5No scan job is created until the email is confirmed and ownership is proved. Ticking the box does not replace either step (Terms of Service, clause 4.6).