By accessing or using SecurityScore.me ("we", "our", "us"), you agree to these Terms of Service. If you do not agree, do not use the service.

SecurityScore.me provides security posture monitoring for managed service providers and organizations. The platform includes Microsoft 365 posture assessment, customer workspaces, monitored assets, findings, alert routing, activity logs, and customer-ready reports.

Reports and findings are informational. They help prioritize remediation but do not guarantee complete security or compliance.

Users may belong to an organization workspace. Organization owners and administrators can invite members, assign roles, and manage customers, assets, notification policies, reports, and related settings within assigned quotas.

You are responsible for keeping login credentials secure and for activity under your account. Provide accurate account information and notify us promptly of unauthorized use.

You may only connect, scan, or monitor environments, domains, websites, Microsoft tenants, or other assets that you are authorized to assess on behalf of your organization or customers.

Microsoft 365 connections use Microsoft Graph and delegated OAuth consent with read-only permissions. SecurityScore.me is designed for assessment, monitoring, and reporting. It does not change Microsoft tenant configuration.

When a customer or organization is deleted, we delete the stored Microsoft 365 tokens. The consent for our application stays in the customer's Microsoft Entra ID until an administrator of that tenant removes it.

Findings, scores, and reports reflect information available at the time of assessment or monitoring. Data may be incomplete when permissions, licenses, or third-party APIs limit visibility. You remain responsible for validating results and implementing remediation in customer environments.

Data is deleted automatically on the schedule in our Privacy Policy. Deleting a customer removes its data immediately. When an organization owner requests deletion of the organization, access ends immediately and all its data is permanently deleted after 7 days; until then an owner or administrator can cancel.

You agree not to:

• Abuse scanning, monitoring, or reporting functionality.
• Attempt unauthorized access to the service, other accounts, or customer data.
• Bypass organization quotas, rate limits, or access controls.
• Upload malicious content or interfere with service operation.
• Use the service against assets you do not own or manage without authorization.
• Reverse engineer, disrupt, or misuse the platform or its infrastructure.

Access is organization-based. Quotas may apply to assets, seats, customers, and other usage limits assigned during onboarding.

Commercial terms are handled directly with SecurityScore.me. There is no public self-service checkout at this time unless we announce otherwise.

The service may change over time. Features may be added, modified, or removed. Maintenance, updates, or outages may occur. We may update these Terms by posting a revised version on this page.

If you suspect a security issue affecting SecurityScore.me or your organization workspace, report it promptly to info@securityscore.me. Do not publicly disclose sensitive details before we can investigate.

To the maximum extent permitted by applicable law, SecurityScore.me is provided on an "as is" and "as available" basis. We disclaim warranties to the extent allowed by law.

To the maximum extent permitted by law, we are not liable for indirect, incidental, special, consequential, or punitive damages, or for loss of data, profits, or business interruption arising from use of the service.

Some jurisdictions do not allow certain limitations, so parts of this section may not apply to you.

Questions about these Terms: info@securityscore.me. Related policies: Privacy Policy and Cookie Policy.