Terms of use
Last updated 31 October 2026
These terms apply to the website security scan at web-security.mecanik.dev, run by Mecanik Dev Ltd. By using the scanner you accept them. If you do not accept them, do not use it.
Who may scan a website
Only scan websites you own or have permission to check. Do not use the scanner to harm, overload or attack any website, or to break the law.
We may block scans, limit use or refuse service if we suspect misuse. We may report unlawful use to the authorities.
What the scan does
The scanner looks up public DNS and email records, requests the homepage over HTTPS and plain HTTP, follows up to five redirects, reads security.txt and loads the homepage once in a browser. It does not log in, submit forms, test for exploits or scan ports.
Every request identifies itself as MecanikSecurityCheck with a link to this website.
Results are information, not advice
Results describe public settings at the moment of the scan. They can be incomplete or wrong, for example when a website blocks automated visits or changes its setup. A result is not a security certificate, an audit or proof that a website is safe or unsafe.
Do not rely on the results alone. Ask a qualified professional before making changes.
Our liability
The scanner is free and provided as it is, without any promise that it is accurate, complete or available.
As far as the law allows, Mecanik Dev Ltd is not liable for any loss or damage arising from the use of the scanner or its results, including loss of profit, data or business. Nothing in these terms limits liability that cannot be limited by law, such as liability for death or personal injury caused by negligence, or for fraud.
Public reports
Scans are private. A report only becomes public when the owner of the website publishes it after proving they control the site with a DNS record or a file.
Public reports show the website, the scan time and the findings. They are kept for up to 90 days, and the public reports page lists the latest report for each website.
Removing a public report
If you control the website, scan it again, open Publish report and choose Remove from public reports. This needs the same DNS record or file.
If you cannot do that, or you have a legal reason to ask for removal, contact us with the address of the report and your reason. We aim to reply within five working days and we remove reports that are inaccurate, unlawful or published without the owner's permission.
Your data
Each scan records your IP address, browser and device details and approximate location for 30 days, to prevent abuse and to answer complaints or legal requests. We only share these records when the law requires it. The privacy notice explains this in full.
Changes to these terms
We may update these terms. The date at the top shows the latest version. If you use the scanner after a change, you accept the updated terms.
Governing law
These terms are governed by the law of England and Wales, and the courts of England and Wales have jurisdiction. If you are a consumer, you also keep any rights the law of your own country gives you.