Terms

Working translation of the canonical Arabic page at /terms/. The Arabic version governs on any conflict.

By using zmam.ai and its external-scan service, you acknowledge that you have read and agreed to these terms.

Authorised use

• You confirm that you own the domain you ask us to scan, or that you have clear authorisation from its owner.
• You confirm that the email address you provide is valid and under your control, and that you will click the verification link yourself.
• You agree not to abuse the verification mechanism, not to impersonate the domain owner, and not to use scan results for exploitation, harassment, or unauthorised access.

Nature of the report

The report is informational and limited to what is externally visible at scan time. It is not a substitute for a penetration test or a comprehensive security review, and it does not guarantee that the domain is free of risk. A report may not cover every aspect, and findings may change over time as configurations change.

Service limits

• zmam.ai may refuse, delay, cancel, or suppress any request that appears high-risk, that violates the responsible-use policy, or that exceeds daily usage limits.
• When the submitted email is from a different domain than the scan target, the request requires operator approval before the scan starts. We may decline the request without giving a detailed reason.
• Per-IP and per-domain daily limits apply, using Asia/Riyadh calendar time. Exceeding the limit causes the request to be refused until the window resets.

Email verification and approval

• No scan starts before the verification link sent to the submitted email is clicked. The link is valid for 24 hours.
• Cross-domain requests are subject to an additional operator review before the scan starts, to reduce abuse.

Sensitive findings

• Sensitive details are not delivered in normal email. We may withhold them from the current report until the secure routing mechanism to a verified security contact ships (planned for v0.1).
• When findings appear that are not suitable for email, we mention their presence in aggregate without revealing specifics.

Privacy and data protection

Processing of your data is governed by the Privacy Policy , which is aligned with the Saudi Personal Data Protection Law.

Reporting and takedown

• To report suspected abuse of our service, email [email protected] or use the contact page .
• For the security disclosure channel, see security.txt .

Changes

We may revise these terms to reflect changes in the service or applicable law. The last-updated date appears at the bottom of the page. Continued use after a change constitutes acceptance of the revised terms.

Version 0.0.1 — Last updated: 2026-05-28