TGG / TERMS OF USE

Terms of Use

Updated 3 November 2026. Terms revision: terms-2026-11-03-email-v1. TGG’s website security-check service is operated by JULC Limited, registered in the British Virgin Islands (BVI). Contact: dev@tgg.group.

01The website and service

These terms cover the TGG public website and its website security baseline. JULC Limited operates the security-check service under the TGG name. Deeper penetration tests, consulting and other professional services require a separate written agreement and scope. Website information and an automated configuration report do not themselves create such an engagement.

02Authority and company email

You must own the exact hostname or have documented permission from its owner and any other parties whose authorization is required. You must also have authority under your hosting and service-provider agreements. Before a limited baseline, you must sign in with a verified primary email on your organization’s own domain, explicitly confirm your authority and accept these terms and the stated scope. The requested hostname must be that email domain or one explicitly selected subdomain. Shared and disposable email providers are not eligible. Email verification confirms mailbox access; it does not establish domain ownership, your role in the organization or lawful authority. Do not submit a third party’s hostname without permission, even if it is publicly accessible. A subdomain or another hostname requires its own authorization.

03What you authorize

Each accepted request authorizes one unauthenticated HTTPS HEAD request to the exact hostname’s root on port 443, after a fresh account/email eligibility check and public-address validation, and a report based on certificate validation and selected response policies. The service does not follow redirects, test other ports or hosts, authenticate, exploit vulnerabilities, crawl the site or execute model-generated commands. We record your verified requesting email, account identifier, exact hostname, scope, terms revision and acceptance time for accountability. The outbound request carries an opaque TGG request reference; your email is not sent to the target server. If you select email delivery, you also request a short summary and private report link at your verified primary address. This delivery is not a marketing subscription.

04Coverage and professional use

A report records a limited observation at a particular time. A missing response policy is a configuration review item, not proof that an application is exploitable. A present policy does not prove that it is effective or that an application is secure. Redirects, unsupported targets, verification expiry, capacity limits or technical failures may produce a partial report or no report. Professionals should validate observations and obtain an appropriate assessment before relying on them for risk, compliance or certification decisions.

05Acceptable use and accounts

Keep your sign-in credentials secure and provide accurate authorization information. Do not attempt to bypass company-email eligibility, authorization, quotas, isolation or access controls; probe private or internal destinations; misuse another account; automate abusive submissions; or use the service for unlawful testing. We may pause, reject or limit requests and suspend access to protect users and systems. Checks have limited capacity and are not guaranteed to finish within a particular time.

06Reports and content

You may download and share the report for the hostname you are authorized to assess, subject to your own confidentiality obligations. A report is not an endorsement, security certificate or permission to publish another party’s information. TGG’s branding, website design and other materials remain subject to their owners’ intellectual property rights.

07Availability and responsibility

The free baseline is provided as available. We take reasonable precautions but cannot promise uninterrupted availability, complete vulnerability coverage or the absence of all security risk. Any limitations apply only to the extent permitted by applicable law and do not exclude responsibilities that cannot lawfully be excluded. You remain responsible for obtaining authority and deciding how to validate and act on a report. The privacy notice explains how service information is processed.

08Questions and changes

Contact dev@tgg.group about these terms, authorization, privacy or an assessment. Material scope changes require a new authorization revision before a new check. Updated terms carry an updated date; separately signed engagement terms govern those engagements.