Terms of use
Scan only what you may scan
Use Lycan only on domains you own or have written permission to test. Starting a scan is your confirmation of this, and you are responsible for the scans you start.
What a scan does
A scan is passive. Lycan reads what any visitor can see: three page requests to the site and a handful of DNS lookups. It does not log in, send attack payloads or try to exploit anything.
Fair use
- Do not automate scans or try to get around the rate limits.
- Do not attack, overload or probe Lycan itself.
- Found a weakness in Lycan? Report it to security@lycansoc.com. Good-faith reports are welcome.
No guarantee
Lycan is in development and free while it is. Results are for information, may be incomplete and can change as checks improve. A good score does not mean a site is secure. The service is provided as is, without warranty, and to the extent the law allows we are not liable for decisions made from its results.
Lycan CLI
The command-line tool runs on your own device and is released under the MIT license, provided as is, without warranty. Use lycan hunt only on machines you own or have written permission to test; it refuses public internet addresses, but you remain responsible for what you scan inside your network.
Changes and contact
We may update these terms; the date at the top shows the latest version. Questions: hello@lycansoc.com.