Legal
Effective July 2026
Decloak (decloak.dev) is operated by Sparrow Technology Ltd, a company registered in England and Wales under company number 15676284 (“Sparrow Technology”, “we”, “us”, “our”). These Terms of Service (“Terms”) govern your access to and use of Decloak. By using the service you agree to these Terms. If you do not agree, do not use the service.
Decloak scans a URL you submit and produces a report covering HTTP/TLS configuration, page content, network behaviour, JavaScript library vulnerabilities, tag manager and third-party domain activity, and an AI-generated summary. A free tier runs a single-page scan with no account required. Paid tiers (Starter, Pro) run a multi-page AI agent investigation and require a registered account and active subscription.
By default, Decloak performs passive, non-intrusive analysis of information a normal page load and its associated network requests already expose. It does not attempt to exploit vulnerabilities, bypass authentication, or access non-public systems.
Enterprise scans may additionally run limited active testing (forced browsing of common paths, CORS and HTTP method probing, reflected-input checks) where you have explicitly enabled it for that scan. This still does not include exploitation, credential bypass, or access to systems you have not authorised us to test.
You agree that you will only submit URLs for scanning where you:
You are solely responsible for having the right to scan any target you submit. We reserve the right to suspend or terminate accounts used to scan targets without authorisation, or to abuse, overload, or attempt to circumvent the service's rate limits or infrastructure.
A free account may be created at no cost. Paid plans (Starter, Pro) are billed monthly via Stripe. By subscribing you authorise recurring charges to your payment method until you cancel. Subscriptions can be upgraded, downgraded, or cancelled at any time via the self-service billing portal in Account Settings; cancellation takes effect at the end of the current billing period unless otherwise stated at checkout.
You are responsible for keeping your account credentials secure and for all activity under your account.
Decloak is provided on an “as is” and “as available” basis. Findings are generated by automated scanning and, for the executive summary, an AI model - both can produce incomplete results, false positives, or miss issues entirely. A high or low score is not a guarantee of a site's actual security posture, and a Decloak report is not a certified penetration test, compliance audit, or legal attestation of any kind. Any compliance control mapping (e.g. ISO 27001, SOC 2) shown in a report is an indicative reference, not a certified assessment.
You are responsible for independently verifying any finding before acting on it, and for any decisions made based on a Decloak report.
To the maximum extent permitted by law, Sparrow Technology Ltd shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits, revenue, data, or business opportunity, arising from your use of or inability to use the service, including reliance on any scan result. Our total liability for any claim arising from these Terms or the service is limited to the amount you paid us in the 12 months preceding the claim.
Decloak's software, design, and branding are owned by Sparrow Technology Ltd. Reports generated from your own scans are yours to use, share, and export. You may not resell, sublicense, or scrape the service to build a competing product.
We may suspend or terminate access to the service for any account that violates these Terms, including the acceptable use provisions in Section 2, without prior notice where necessary to protect the service or other users.
We may update these Terms from time to time. Material changes will be reflected by updating the effective date at the top of this page. Continued use of the service after a change constitutes acceptance of the updated Terms.
These Terms are governed by the laws of England and Wales, and any disputes arising from them are subject to the exclusive jurisdiction of the courts of England and Wales.
Questions about these Terms can be sent to support@decloak.dev.