Legal and assessment information
Terms of Service
Effective November 14, 2026. SHIPWREKT is a Toasty Media venture. These terms govern use of SHIPWREKT's free website assessment tools and related reports. Paid assessments are subject to an agreed written scope and any additional terms provided before purchase.
1. Authorized use
You may assess only websites, systems, and repositories you own or are expressly authorized to test. You are responsible for ensuring your authorization covers the target and requested checks. Do not use the service for unauthorized access, harassment, disruption, or unlawful purposes.
2. What The Lookout actually checks
The free Lookout is a limited, passive, point-in-time assessment of a publicly accessible HTTPS page and a small number of standard same-origin paths. It may inspect public HTTP responses, TLS validation, selected security headers, visible website metadata, privacy and terms links, and basic discoverability indicators. It does not perform authenticated testing, database inspection, source-code review, exploitation, penetration testing, or a comprehensive security audit.
3. Findings and limitations
Findings are observations based on the information available when a scan runs. A missing header or inaccessible path does not by itself establish a vulnerability, breach, legal violation, or the absence of a feature elsewhere on a site. Search visibility and answer-engine readiness checks are on-page indicators, not verified rankings, traffic measurements, search-engine endorsements, or evidence that an AI assistant will cite your content. Website copy heuristics cannot reliably establish whether content was written by AI. Short text samples, translated writing, templated material, and human-authored text can produce misleading patterns. No model-based perplexity analysis is performed. The free assessment does not certify security, regulatory compliance, or fitness for any particular purpose.
4. Repository assessments
Where available, repository assessments use read-only GitHub metadata and permissions supplied for the request. They are not a full source-code, dependency, secret, infrastructure, or organizational audit. Commit and deployment timestamps alone do not establish causation. Some checks require repository or organization permissions and may be unavailable.
5. Reports and delivery
Reports may be generated or delivered electronically. Email delivery may require address confirmation, and successful delivery is subject to email-provider availability and filtering. Reports are intended for the requesting authorized user and should be reviewed by a qualified professional before making consequential security, legal, or financial decisions.
6. Privacy and retention
Information submitted to run a scan or request a report is processed to provide that service, including temporary storage where necessary for email confirmation and delivery. Do not submit secrets or personal data that are unnecessary for the assessment. See the privacy notice for further information.
7. No guarantee; professional services
The service is provided on an as-available basis. No assessment can identify every vulnerability or guarantee that a website cannot be compromised. Recommendations are informational and may require validation against your architecture, applicable law, and operational constraints. For a deeper assessment, SHIPWREKT can agree a specific scope and deliverables before work begins.
8. Changes and contact
We may update these terms as the service evolves. The current version is published here. Questions about these terms or an assessment can be sent to hello@toasty.media.