Terms

In force from 21 August 2026. Last updated: 21 August 2026.

1. Who provides the service

The services described here are provided by Grzegorz Jaworek, operating the Anat Secure project, contact: verify@anatsecure.com. A company for the Anat Secure brand is being registered - once that is complete we will add full registration details here.

2. What the free check is

The free check is a surface-level analysis of what is visible from the outside at the address you give us, carried out by hand. It is not a security audit: it includes no code review and no tests that require access to the system. We send the result back within one working day.

By requesting it you confirm that you own the website in question or have the owner's permission to have it checked. We do not check other people's systems without a basis for doing so.

We may decline to run a check without giving a reason - in particular where the address does not belong to the requester, where requests repeat, or where the check could infringe third-party rights.

3. Paid services

The scope, timing and price of paid services (core audit, full audit) are agreed in a separate contract or confirmed order before work starts. Prices shown on the site are net of VAT and are indicative - they do not constitute an offer within the meaning of Article 66 of the Polish Civil Code.

The core audit and the full audit are both carried out by a person and both include a code review - what differs is the scope of the system covered, agreed before we start and recorded on the certificate. The price of a full audit depends on the size and complexity of the system; we give you the number after an initial conversation, before anything begins. The automated scan and the ongoing care service are not available yet.

4. Conditions for security testing

Before any testing we require written authorisation from someone entitled to represent the system owner, specifying the scope, the time window and the addresses covered. Without it we do not test.

We test in a way that does not disrupt day-to-day operations. Heavier attempts are run against a copy of the environment or in an agreed maintenance window. Even with due care, security testing carries a risk of transient disruption - so we recommend taking a backup before work starts.

5. What we do not promise

This section exists because being honest about the limits of the service is part of the service. Anyone promising absolute security is not telling the truth.

An audit confirms the state of a system on the day of testing and within the scope agreed in the contract. It does not mean the system is free of all vulnerabilities - it means we checked what we agreed to check, using the methods described, and reported the result.

We are not liable for incidents arising from changes made to the system after the audit ends, from areas excluded from scope, or from your not acting on the recommendations in the report.

6. Certificate and seal

We issue a certificate after an audit - core or full - once findings of critical and high severity have been fixed and re-checked. Both variants are carried out by a person and include a code review; they differ in the scope of the system covered.
The scope of the audit is recorded on the certificate and shown on the verification page. The certificate confirms security within that scope only - it does not extend to parts of the system we did not examine.
You may place the seal on the website covered by the certificate. The seal must link to its verification address, and its colours, proportions and content must not be altered.
The right to use the seal ends when the certificate expires. After that date it must be removed from the site.
We may revoke a certificate where a serious vulnerability comes to light and is not remedied within the agreed time, where the scope of the system changes materially without re-testing, or where the seal is used contrary to the rules above. A revocation is visible immediately on the verification page.
The status of any certificate can be checked at anatsecure.com/verify.

7. Confidentiality

Audit results, vulnerability descriptions and anything else we learn about your system are treated as confidential. We do not disclose them to third parties or use them in marketing material without your explicit prior consent. On request we will sign a separate non-disclosure agreement.

8. Complaints

Send complaints to verify@anatsecure.com. We reply within 14 days of receiving one. Describe what the complaint concerns and what you expect.

9. Consumers

Our services are aimed at businesses. If you nonetheless enter into a contract as a consumer, or as a sole trader with consumer rights, you have the right to withdraw within 14 days. If you ask us to start before that period ends and the service is performed in full, the right to withdraw expires.

10. Final provisions

Matters not covered here are governed by Polish law. We may amend these terms; an amendment does not affect contracts concluded before it takes effect. The current version is always available at this address, with the last-updated date at the top.