Terms of use

Hajes is in preview and free. It may change, pause or end; these terms will be updated with it, and the date above will say when.

You may add a domain only if you own it or its owner has authorised you to test it. The DNS record proves control technically; by adding a domain you also affirm it here. Scanning a system without authorisation is unlawful in most places, Saudi Arabia included. Hajes exists to make the authorised case easy and the other case impossible.

Hajes matches the software a host runs against public vulnerability data, grades headers, TLS and cookies, checks for files that should not be reachable, and reads the zone’s DNS and email records. It does not exploit, brute-force, stress or alter anything, and it never scans a host whose proof is missing or whose name resolves to a private network.

Keep the DNS record for as long as you want scans; remove it, and scans stop. Do not try to bypass verification, rate limits or another team’s data. You are responsible for the people you invite to your team and for what they do with it.

The service is provided as it is. A report describes what Hajes could observe at the time, against the data it had: it is not a certification, a clean report does not mean a site is secure, and a finding labelled potential may not apply to you. Decide what to fix with your own judgement.

To the extent the law allows, the operator is not liable for indirect or consequential loss arising from the service or from acting on a report. A scan sends requests to your servers; they are polite and rate-limited, and you accept them by adding the domain.

An account that tries to scan what it has not proven, or otherwise abuses the service, may be suspended without notice.

These terms are governed by the laws of the Kingdom of Saudi Arabia.

Questions about these terms: [contact address to be added]