Terms of Service

Last updated: June 25, 2026

These Terms govern your use of whack.sh (the “Service”), a defensive security tool that loads a URL through multiple network vantage points (datacenter, residential, mobile, and bring-your-own egress) and diffs the results to expose cloaking, redirect chains, and hidden payloads. By creating an account or using the Service you agree to these Terms.

1. Acceptable use

The Service is for authorized security research, threat investigation, and defensive analysis. You agree to:

• Only submit URLs you are authorized to investigate, and use results for defensive or research purposes.
• Not use the Service to attack, overload, gain unauthorized access to, or disrupt any system, or to harvest data you are not entitled to.
• Exercise extra care with sensitive targets (e.g. government, military, or financial institutions); these may be subject to additional safeguards or refusal.
• Not resell or abuse egress capacity (residential, mobile, or your enrolled BYO device), and not route traffic through any IP or device you are not authorized to use.
• Comply with all applicable laws and the acceptable-use expectations you agree to at signup.

Executable payloads are never fetched over residential or mobile egress; suspected malware is analyzed in an isolated environment.

2. Accounts & API keys

You are responsible for activity under your account and API keys. Keep your credentials secret and notify us promptly of any compromise. One account per person or organization unless otherwise agreed.

3. Credits, plans & billing

Datacenter scans are offered on a free tier subject to rate limits. Residential, mobile, and certain premium egress consume credits. Credits and paid plans are described on pricing; prices and limits may change with notice. Except where required by law, purchased credits are non-refundable.

4. Bring-your-own egress (BYO)

If you enroll a device as a BYO egress, you confirm you own or are authorized to use that device and its network, and you are responsible for traffic routed through it. You may disable or delete a BYO agent at any time from your account.

5. Service “as is”; no warranty

Scan results are best-effort and provided for informational purposes only. They are not a guarantee that a URL is safe or malicious, and are not legal or professional security advice. The Service is provided “as is” and “as available” without warranties of any kind.

6. Limitation of liability

To the maximum extent permitted by law, whack.sh and its operators are not liable for any indirect, incidental, or consequential damages, or for losses arising from your use of (or inability to use) the Service. Our total liability is limited to the amount you paid us in the three months preceding the claim.

7. Suspension & termination

We may suspend or terminate access for violation of these Terms or the acceptable-use policy, for abuse, or to comply with law. You may stop using the Service and request account deletion at any time via contact.

8. Changes

We may update these Terms; material changes are reflected by the “last updated” date. Continued use after changes constitutes acceptance.

9. Contact

Questions about these Terms? Get in touch.