Security Check Terms

These terms cover the 24-hour website security check sold at landmconsultinginc.com/security-check/. The public check is $349. The authenticated check is $599 and uses one low-privilege test account you create and provide. Payment is due before any check starts. Results follow within 24 hours of payment and a complete intake.

What you authorize

You confirm you own the domain or have written permission. The check is findings and evidence only: TLS, security headers, exposed files, known CMS or plugin issues, and obvious misconfigurations. No exploit attempts, no data extraction, no persistence, no scanning of other hosts, and no account creation by L&M.

Out of scope unless a separate written engagement: payment-card environments, internal networks, other domains, admin takeover, and social engineering.

What this is not

This is not a penetration test, not a complete vulnerability assessment, not a certification, and not a guarantee the site is secure. The check can miss vulnerabilities. A missed issue may later be exploited.

An AI tool runs the 24-hour check only. These terms do not name that tool. A person at L&M reviews the report before it is sent. The full in-person assessment is a separate service, done by people only.

Responsibility

L&M Consulting, Inc. is not responsible for missed security vulnerabilities, or for any loss, damage, unauthorized access, or other harm that results if a missed issue is exploited. You decide what to fix and remain responsible for securing the site after the report. Liability for a paid check is limited to the fee paid for that check.

Assessment credit

If you continue with a full in-person assessment within 90 days of the report, the fee paid for the 24-hour check is credited toward that assessment. The credit is not cash and is not transferable.

Law

Washington law governs these terms. Venue is King County, Washington.