Last updated 16 July 2026
These terms govern your use of achsecurity.com, our customer console, and the VAPT and DPDP-compliance services ACH Security ("we", "us") provides. By using our site or console, you agree to these terms.
We provide DPDP compliance scanning, VAPT (vulnerability assessment and penetration testing) engagements, and related reporting. Free tools on our site (the DPDP gap report, security header checker, and attack-surface lookup) are provided as-is for informational purposes and don't constitute a substitute for a full engagement or legal advice.
Before we run any active scan or VAPT engagement against a target, you confirm you own the domain or have written authorization from its owner to test it. All engagements are additionally covered by a signed Authorization Letter, NDA, and Rules of Engagement before testing begins.
You're responsible for keeping your console account credentials confidential and for activity under your account. Notify us immediately at support@achsecurity.com if you suspect unauthorized access.
Paid engagements are scoped, priced, and scheduled individually and confirmed in writing before work begins. Free trial usage (e.g. the free XOS request) is limited as described on the relevant page and may change at our discretion.
Free tools and reports are provided without warranty of completeness or fitness for a particular purpose. Security scanning and testing, by nature, cannot guarantee the discovery of every vulnerability. Our liability for paid engagements is governed by the signed agreement for that engagement.
Our handling of personal data is described in our Privacy Policy.
We may update these terms from time to time; continued use of our site or console after a change constitutes acceptance of the updated terms.
Questions about these terms: support@achsecurity.com.