By creating an account, calling the Scan API, or using the dashboard, you agree to these Terms of Service (the “Terms”) with the operator of trythreatless.com (“Threatless”, “we”, “us”). If you use the Service on behalf of an organization, you represent that you have authority to bind that organization.
Related policies: Privacy Policy, Cookie Policy, Data Processing Addendum, Legal notice. Questions: contact@trythreatless.com.
1. The Service
Threatless provides a ClamAV-backed malware scanning API and a web dashboard. You send a file or a public URL; we return a JSON verdict and enforce an hourly quota that matches your plan. File bytes are scanned in memory and are not stored as a product feature.
The Service is provided as a developer tool. A “clean” result means ClamAV did not match a known signature at scan time. It is not a warranty that a file is safe, free of novel malware, or fit for any particular purpose.
2. Accounts and API keys
- You must provide accurate registration information and keep credentials confidential.
- Email sign-up requires confirmation before login.
- API keys are secrets. Anyone who holds a key can consume your hourly quota. You are responsible for use of your keys and sessions.
- You may revoke keys and sessions from the dashboard. Revocation takes effect on the next request.
- We may suspend an account that we reasonably believe is compromised, abusive, or in breach of these Terms.
3. Acceptable use
You agree not to:
- Probe, scan, or attack the Service except through documented API usage on your own account
- Bypass SSRF protections, quotas, authentication, or payment
- Use URL scanning to fetch internal, loopback, or cloud-metadata resources
- Resell the Service without a written agreement
- Submit content solely to disrupt ClamAV, the API, or other customers
- Use the Service in violation of export, sanctions, or other applicable law
Scanning files you are authorized to handle — including using the official EICAR test file from eicar.org — is expected use. You must not use Threatless to distribute malware or to harm third parties.
4. Plans, quotas, and payment
Public plans and hourly limits are described on the pricing page. The Free plan includes a limited number of scans per clock hour. Paid plans are billed by Stripe. Taxes may apply.
- Quota is per account, per clock hour, shared across every API key and the dashboard scanner.
- Exceeding the limit returns HTTP 429 until the window resets or you upgrade.
- The maximum payload size is 10 MB unless a custom agreement says otherwise.
- Upgrades take effect after Stripe confirms the subscription and Threatless syncs your plan.
- Cancellations are handled in the Stripe customer portal. Access to paid quota ends at the close of the paid period Stripe reports, unless we state otherwise.
- Fees are generally non-refundable except where required by law or where we choose to issue a goodwill credit.
5. Self-hosting
Docker images and documentation are provided so you can run Threatless on your own infrastructure. Self-hosted instances are your responsibility, including ClamAV signature updates, PostgreSQL, secrets, and compliance. Hosted plan fees do not include support for unmodified self-hosted forks unless we agree in writing.
6. Intellectual property
Threatless, the wordmark, and the Service software remain our intellectual property or that of our licensors. You retain rights in files you submit. You grant us a limited licence to process those files solely to provide the scan and operate the Service.
Feedback you send to contact@trythreatless.com may be used to improve the product without obligation to you.
7. Privacy and data processing
Personal data is handled as described in the Privacy Policy. If you scan files that contain personal data of your users, you are the controller of that content and must have a lawful basis to send it. The DPA applies to that processing on the hosted Service.
8. Availability and changes
We aim to keep the hosted API available but do not guarantee uninterrupted operation, particular latency, or detection of every threat. We may modify features, limits, or these Terms. Continued use after a change you were given a reasonable chance to review constitutes acceptance where permitted by law. If you do not agree, stop using the Service and cancel any paid subscription.
9. Disclaimers
THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE”. TO THE MAXIMUM EXTENT PERMITTED BY LAW, THREATLESS DISCLAIMS WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT SCANS WILL DETECT EVERY MALICIOUS FILE OR THAT RESULTS WILL BE ERROR-FREE.
10. Limitation of liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW, THREATLESS WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, DATA, OR GOODWILL, ARISING FROM USE OF THE SERVICE. OUR TOTAL LIABILITY FOR ALL CLAIMS IN ANY TWELVE-MONTH PERIOD IS LIMITED TO THE AMOUNTS YOU PAID US FOR THE SERVICE IN THAT PERIOD, OR FIFTY EUROS (EUR 50) IF YOU ARE ON THE FREE PLAN.
Nothing in these Terms limits liability that cannot be limited under applicable law, including liability for fraud or for death or personal injury caused by negligence where such a limit is prohibited.
11. Indemnity
You will defend and indemnify Threatless against claims arising from your content, your use of the Service in breach of these Terms, or your violation of law, except to the extent caused by our wilful misconduct.
12. Governing law
These Terms are governed by the laws of France, without regard to conflict-of-law rules, unless a mandatory consumer protection law in your country of residence applies and cannot be waived. Courts located in France have exclusive jurisdiction, except where the law gives you the right to sue in your place of residence.