Terms of Service

These Terms of Service are an agreement between you and CERES BASE LLC, a New Jersey limited liability company doing business as Fast Pen Tests ("Fast Pen Tests," "we," "us"). By accessing or using the services provided by Fast Pen Tests, you agree to be bound by these Terms of Service. If you do not agree to all the terms and conditions, you must not use our services.

Fast Pen Tests provides penetration testing services for web applications. Our service is designed to identify potential vulnerabilities in your specified domain. While we strive to provide comprehensive and accurate results, we cannot guarantee the identification of all possible vulnerabilities or the complete security of your system.

Fast Pen Tests and its employees, agents, and affiliates shall not be liable for any direct, indirect, incidental, special, consequential, or exemplary damages resulting from your use of our services. This includes, but is not limited to, damages for loss of profits, goodwill, use, data, or other intangible losses.

Our services are provided on an "as is" and "as available" basis. Fast Pen Tests makes no warranties, expressed or implied, and hereby disclaims and negates all other warranties including, without limitation, without limitation, implied warranties or conditions of merchantability, fitness for a particular purpose, or non-infringement of intellectual property or other violation of rights.

You agree to use our services only for lawful purposes and in accordance with these Terms of Service. You must not use our services in any way that could damage, disable, overburden, or impair our servers or networks, or interfere with any other party's use and enjoyment of our services.

The content, features, and functionality of our services are owned by Fast Pen Tests and are protected by international copyright, trademark, patent, trade secret, and other intellectual property or proprietary rights laws.

Fast Pen Tests reserves the right to modify or discontinue, temporarily or permanently, the service (or any part thereof) with or without notice. You agree that Fast Pen Tests shall not be liable to you or to any third party for any modification, suspension, or discontinuance of the service.

These Terms shall be governed and construed in accordance with the laws of New Jersey, without regard to its conflict of law provisions.

When you run a free security scan with your email address or place an order, CERES BASE LLC d/b/a Fast Pen Tests emails you about your scan, order or report (service messages).

Fix This Week, our weekly security newsletter, which may mention our services, goes only to people who subscribe: you tick the consent box on our signup form and then confirm by clicking the link we email you. A scan or an order never signs you up.

You can opt out of the newsletter and any other marketing email at any time with the unsubscribe link in every message, or by emailing info@fastpentests.com. We honor opt-outs right away and always within 10 business days, and an opt-out covers all of our marketing email. Opting out does not stop service messages about an order you placed. We do not sell or rent your email address. Details are in our Privacy Policy.

Continuous External Monitoring is a recurring service: weekly unauthenticated external scans of up to three hostnames you list at checkout, with reviewed results, a monthly report and alerts as described on the product page. These additional terms apply to it.

• Minimum term and first payment. The subscription has a minimum term of two months. The fee for the first two months ($750) is charged in full at signup and is non-refundable, including if you cancel, fail to complete domain verification, or no scan has yet run when you cancel.
• Renewal. After the minimum term the subscription renews monthly at the then-current monthly price until cancelled. Each renewal payment covers the following month and is non-refundable once charged.
• Cancellation. You may cancel at any time through the Stripe customer portal linked from your receipt or by emailing info@fastpentests.com. Cancellation takes effect at the end of the period already paid for; scanning continues until then. We do not prorate partial periods.
• Ownership verification and authorization. We scan a hostname only after you publish the DNS record we provide, and we check that record again before every scan. By listing a hostname you represent that you own it or are authorized by its owner to have it tested. If the record is removed, scans for that hostname pause until it is restored; the subscription and its fees continue.
• Scope. Scans are unauthenticated and non-intrusive: no denial-of-service, brute-force or intrusive templates. Internal networks, IP addresses, hosts you cannot verify and logged-in testing are not included. Results identify potential issues and are not a guarantee of security or a compliance certification.
• Failed payments and changes. If a renewal payment fails, scanning continues during Stripe's retry period and stops if the subscription is cancelled for non-payment. We may change the monthly price or the service with at least 30 days' notice; changes apply from your next renewal.
• Annual plan. The annual plan is $3,750 paid upfront for 12 months of the same service. It does not renew automatically; it continues only if you opt in before the year ends. The annual fee is non-refundable; if you want the option to cancel, the monthly plan is the flexible choice. The minimum-term and monthly renewal terms above do not apply to it.

Authenticated (gray-box) penetration tests are quoted per engagement and governed by a written statement of work and a signed authorization letter from the asset owner. Testing is limited to the assets, roles and test accounts named there, is non-destructive, and excludes third-party platforms, denial-of-service, social engineering and any use of a vulnerability beyond demonstrating it. Where a statement of work conflicts with these Terms, the statement of work controls for that engagement. Pricing, scope and the plain-English terms for these engagements (authorization, payment, retest, data retention and rescheduling) are on the authenticated testing pricing and terms page.

The free scan checks your site's security headers only. It is not a penetration test. The form is protected by Cloudflare Turnstile, and you can run up to 10 scans per network per day (and up to 3 per email address when you add one).

Your email address is optional. Without it you see your results on the page, we keep no email address for you, and you are not signed up for any email. If you add your email, we store it with the domain so we can send you a copy of the report and follow up. Running a scan does not sign you up for Fix This Week, our weekly security email; that takes a separate signup and a confirmation click (section 9). Details are in our Privacy Policy.

We reserve the right, at our sole discretion, to modify or replace these Terms at any time. If a revision is material, we will try to provide at least 30 days' notice prior to any new terms taking effect.