Terms of Use

ecdsa.com is operated by KeepFlow L.L.C-FZ, Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E. (“we”, “us”). By using the site you accept these terms. If you use it for an organisation, you accept them on its behalf and confirm that you may do so. If you do not accept them, do not use the site.

• Free tools that run in your browser, and a few that send public data to our server or to public services when you ask; the Privacy Policy lists them.
• Checks that run on our server: domain reports, README badges, downloads of public files and the email analysis.
• A public API and an MCP server, usable without a key within the published limits.
• The newsletter, certificate expiry alerts and the waitlist of paid plans.
• Optional accounts with API keys, monitoring and webhooks, once they open.

We may change, add or withdraw features at any time.

The tools, reports, articles and the API are free and provided “as is” and “as available”. To the extent the law allows, we give no warranty of any kind, including that results are correct, complete or fit for a particular purpose, or that the service is available without interruption.

Results are technical information, not a security audit, legal advice or a certification. A signature that verifies here, a good grade or a key that passes a check does not prove that a system is secure. Check important results independently before you rely on them, especially before you deploy, sign, pay or revoke anything.

When you use the site, you agree not to:

• get around rate limits, quotas or the scan budget — for example by rotating IP addresses, keys or accounts — or send automated traffic beyond the limits published on the pricing page and in the developer documentation;
• use our server-side checks (domain reports, badges, the JWKS checker, downloads of certificates and BIMI files, the email analysis, monitors and webhooks) to scan, probe or load systems you are not entitled to test, to map networks, or to reach internal or private addresses;
• put the site or the services it contacts under excessive load, or interfere with its operation or its security;
• subscribe other people’s addresses, or send us messages, documents or data you are not allowed to share, in particular through the email analysis;
• use the site for anything unlawful, or to harm, deceive or impersonate others;
• present our results, badges or reports as something they are not, or suggest that we endorse you or your product.

We may block requests, revoke API keys, refuse sign-ups and suspend or close accounts that break these rules, without notice where the misuse harms others.

• Plans, limits and quotas are those on the pricing page and in the developer documentation; requests beyond them are refused.
• An API key belongs to the account that created it. Keep it secret: you are responsible for what is done with it. If a key leaks, revoke it on the account page.
• We may revoke a key that is used in breach of these terms, that has been published (for example in a public repository) or that endangers the service.
• Changes to the API are described in its changelog.

An account is optional and belongs to the person who controls its email address. Keep that mailbox and any GitHub account you connect secure: whoever can open a sign-in link can use the account. You can delete the account at any time on the account page; the Privacy Policy describes what deletion removes.

Paid plans are not offered yet. Joining the waitlist is free and commits you to nothing. When a plan opens, its price and terms will be shown before you subscribe, and nothing is charged before you accept them.

• Texts, research, illustrations and the design of the site belong to us or to their authors, unless a page or file states otherwise. You may link to any page and quote reasonable excerpts with a link to the source.
• Code samples on the site may be used in your own projects.
• The site is built with open-source software. The packages it ships, with their licenses and notices, are listed on the open-source licenses page. Our SDKs, command-line tools and extensions come with the license stated in each package, and that license governs their use.
• Names and logos of other companies and projects belong to their owners and are used only to identify them.

You keep all rights in what you enter or send. You allow us to process it only as far as needed to give you the result, to deliver your alerts and webhooks, and to protect the service, as the Privacy Policy describes. You confirm that you are allowed to send it.

Some tools contact public services for you — DNS resolvers, blockchain nodes, identity providers, certificate authorities — and some pages link to other sites. Those services have their own terms; we are not responsible for their content, their availability or their answers.

To the extent permitted by the law that applies, we are not liable for indirect or consequential loss, lost profits, lost data or business interruption, or for loss caused by relying on a result of the tools, and our total liability for the service is limited to the amount you paid us for it in the twelve months before the claim.

Nothing in these terms excludes or limits liability that cannot be excluded or limited by law, such as liability for wilful misconduct, gross negligence, or death or personal injury caused by negligence, nor your mandatory rights as a consumer.

You may stop using the site at any time and delete your account. We may suspend or end access — for everyone, or for one account or key — if these terms are broken, or to protect the service or others. The sections on content, liability and applicable law continue to apply.

We may update these terms. The new text is published here with a new date at the top and applies to the use of the site from then on. If you do not agree with a change, stop using the site and delete your account.

These terms are governed by the laws of the United Arab Emirates as applied in the Emirate of Dubai, and the courts of Dubai have jurisdiction over disputes about them.

If you use the site as a consumer and live in the European Union or another country whose law gives consumers mandatory protection, that protection still applies, and you may also bring proceedings in the courts of the country where you live where that law allows it.

Email: privacy@ecdsa.com. Post: KeepFlow L.L.C-FZ, Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E.