Terms of Service
These Terms govern your use of OrgRecon’s defensive, owner-authorized Salesforce assessment service.
1. Agreement and eligibility
These Terms are an agreement between you and Nir Alon, doing business as OrgRecon (“OrgRecon,” “we,” or “us”). You may use the service only if you can form a binding agreement and use it for legitimate security, compliance, or remediation work on behalf of yourself or an organization you represent.
2. Customer-authorized use
You represent and warrant that you own, control, or have explicit authorization to assess every Salesforce host you submit to OrgRecon. Your authorization must cover the requested bounded assessment and remain valid for its duration. Approval of one host does not authorize a related hostname, another customer tenant, a provider-controlled domain, Salesforce shared infrastructure, or a system outside the exact approved host.
OrgRecon is a defensive assessment service. It validates externally observable guest or unauthenticated access using supported, read-only and non-mutating methods. It does not grant you authorization to assess Salesforce infrastructure or any third-party system.
3. Customer responsibilities
You are responsible for your account, sign-in session, submitted scope, authorization evidence, and the lawful use of reports. You must provide accurate account and organization information, protect access to your account, and promptly tell us about suspected unauthorized use. You must not use a finding as permission to access, copy, alter, or disclose data.
4. Acceptable use
The Acceptable Use Policy is incorporated into these Terms. You must not use OrgRecon for unauthorized third-party scanning, destructive or mutating testing, form submissions, credential or data harvesting, exploitation, disruption, or attempts to evade authorization and safety controls.
5. Beta access, subscriptions, and payment
OrgRecon is currently provided as a free beta. No subscription fee is charged for beta access. OrgRecon may offer paid plans or services in the future, but no customer will be charged unless applicable pricing and payment terms are presented and agreed to before charges begin.
6. Intellectual property and confidentiality
OrgRecon and its licensors retain all rights in the service, software, documentation, and branding. Subject to these Terms, you receive a limited, non-transferable right to use the service during your authorized access period. Each party will use the other party’s non-public information only to provide, receive, secure, or support the service and will protect it with reasonable care.
7. Disclaimers
THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE.” TO THE MAXIMUM EXTENT PERMITTED BY LAW, ORGRECON DISCLAIMS ALL WARRANTIES, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. A completed assessment is not a guarantee that any host, Salesforce organization, tenant, application, or system is secure or free from exposure.
8. Limitation of liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW, ORGRECON’S TOTAL LIABILITY ARISING OUT OF OR RELATED TO THE SERVICE WILL NOT EXCEED THE GREATER OF $100 OR THE FEES YOU PAID TO ORGRECON FOR THE SERVICE IN THE TWELVE MONTHS BEFORE THE EVENT GIVING RISE TO LIABILITY. ORGRECON WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, DATA, OR GOODWILL.
9. Indemnification
You will defend, indemnify, and hold harmless OrgRecon and its operator from third-party claims, losses, and reasonable expenses arising from your unauthorized use of the service, breach of these Terms, or violation of applicable law or another party’s rights.
10. Suspension and termination
We may suspend or terminate access, cancel an assessment, or preserve relevant audit records when use appears unsafe, unauthorized, unlawful, or inconsistent with these Terms or the Acceptable Use Policy. You may stop using the service at any time. Provisions that should survive termination, including authorization, confidentiality, disclaimers, liability limits, indemnification, and governing law, will survive.
11. Governing law
These Terms are governed by the laws of the State of Arizona, without regard to conflict-of-law principles.
12. Changes and contact
We may update these Terms as the service evolves. Material changes will be posted here with an updated effective date and, when appropriate, communicated to active users. Questions about these Terms or permitted use may be sent to [email protected].