Terms of Service

Last updated: 6 October 2026

These terms govern your use of secureweb.ma, its free tools, our professional security services, and the hosted website firewall and security dashboard at app.secureweb.ma (the “Platform”), all provided by Secureweb SARL (“SecureWeb”, “we”, “us”). By creating an account, installing our agent, submitting a form or ordering a service, you accept these terms. If you accept them for a company, you confirm you are allowed to bind it. How we handle personal data is explained in our Privacy Policy.

1. Who we are

2. Only test and protect what you are allowed to

Security tools can harm systems that belong to someone else, so this rule applies to everything we offer. You may only add a website to the Platform, install our agent on a server, scan a URL, submit source code, or order a security test for websites, servers and code that you own or are authorised in writing to manage. You confirm this every time you do so. We may ask for proof of authorisation and may refuse, pause or stop any work until we receive it. You are responsible for any claim that results from using our services on systems you were not authorised to use them on.

3. Your Platform account

• You sign in with a Google account. Keep that account secure. We recommend enabling two-factor authentication on the Platform as well.
• You are responsible for everything done through your account and for the accuracy of the information you give us.
• Tell us at contact@secureweb.ma straight away if you think someone else has accessed your account.
• When you ask for help, our staff may open your dashboard to investigate, as described in our Privacy Policy. Each visit is shown to you and recorded.

4. How the Platform works

The Platform protects a website through a SecureWeb agent that you install on your own server with one command. The agent runs in front of your web server, inspects incoming requests, enforces the settings you choose in the dashboard, and reports security events, health checks and scan results to us. By installing it, you authorise it to change your web server configuration for this purpose, to run on your server, and to update itself with releases signed by us.

• Every new website starts in monitor-only mode. It records what it would have blocked and blocks nobody until you turn enforcement on. Reviewing that log and choosing when to enforce is your decision.
• You choose the settings. Sensitivity levels, block lists, restricted areas and other settings are yours to set. A stricter setting stops more attacks and may also turn away more real visitors.
• Leaving is one command. The uninstall command shown on your Subscription page restores your web server’s original configuration. You can remove a website, or ask us to close your account, at any time.

5. Free trial, plans and payment

• Creem is the seller of record. Plans are sold through Creem (Armitage Labs OÜ, Estonia), which processes the payment, calculates and collects any sales tax or VAT due where you are, and issues your receipt. Your card statement shows Creem. Creem’s own buyer terms also apply to the payment. The service itself is provided by SecureWeb under these terms.
• A trial and any paid time belong to the website, not the account. Removing a website and adding it back again continues where it stood. It does not start a new trial.
• A plan chosen during the trial starts when the trial ends, and you are not charged before then. Choosing early loses nothing.
• Each renewal is charged at the start of the new period. If a renewal payment fails and is not resolved, the plan ends as described in section 6.
• Payments are not refundable for a period that has already started, except where the law requires a refund or where we end the service under section 12 for reasons that are not your fault. In those cases we refund the unused part of the period. To ask for a refund, contact contact@secureweb.ma.
• We may change our prices. A new price never applies to a period you have already paid for. We email you at least 30 days before it applies to your next renewal, so you can cancel first if you prefer.

6. When a trial or plan ends

A trial ends after 30 days unless you choose a plan. A plan ends at the end of its period if you cancel it, or if a renewal payment fails. Either way, your website keeps working. The agent stays in place and keeps enforcing the rules you set yourself: restricted areas, your block list and blocked file types. Automatic attack detection switches to monitor-only, which means it records attacks instead of blocking them. Rate limiting, download limiting and automatic blocking of repeat attackers are switched off. Your settings are kept, and blocking resumes once you pay for a plan. You can also remove the agent at any time with one command.

7. What we promise, and what no one can promise

We provide the Platform and our services with professional care and skill, and we keep the attack rules current. However:

• No security product stops every attack. SecureWeb reduces risk. It does not guarantee that your website will never be breached, defaced or taken offline, and it does not replace updating your software, using strong passwords, or keeping backups.
• False positives can happen. A legitimate request may sometimes be blocked. You can review every block in your dashboard and adjust your settings.
• Your website does not depend on our Platform being reachable. If our service is unavailable, the agent continues with its last policy. If the agent cannot run at all, it removes itself from the request path and restores your web server’s configuration, which leaves your website online but unprotected. We will tell you if this happens.
• We aim for high availability of the dashboard, alerts and health checks, but we do not offer a service-level guarantee unless one is agreed in writing.
• Scan results, health checks and free tools give information about your website’s state at one point in time. They are not a complete security audit.

8. Your responsibilities

• Keep your own backups of your website and server. We do not back up your website.
• Keep your server, website software and plugins up to date, and give the agent the access it needs to run.
• Do not modify, disable or tamper with the agent, except to uninstall it with the command we provide.
• Mention in your own privacy policy that your website’s visitors’ requests are inspected for security. For that data, you are the controller and we are your processor. A data processing agreement is available from Privacy@secureweb.ma.

9. Acceptable use

You must not:

• use any of our services against systems you are not authorised to test or protect (section 2);
• use the Platform to host, protect or hide phishing, malware, fraud, or any other activity that is illegal in Morocco or where the website is aimed;
• attack, overload, probe or try to bypass the security of the Platform, our websites or other customers, except as allowed by our vulnerability disclosure rules (section 11);
• abuse our free tools, for example through automated mass scanning or to collect data about third parties;
• resell or sublicense the Platform, or reverse engineer the agent beyond what the law allows, without our written agreement.

10. Professional services and free tools

Professional services such as source code reviews, penetration tests, incident response and clean-ups are performed under a quote or engagement letter. That document sets the scope, dates, price and deliverables, and it prevails over these terms where they differ. Testing starts only after the scope and your written authorisation are agreed. Code and files you send us are treated as confidential and are used only to perform the service, as described in our Privacy Policy. Findings reflect what we could test within the agreed scope and time.

Free tools on secureweb.ma, including the Website Scanner, Website Safety Checker and Password Strength Checker, are provided free of charge and “as is”. They are for information only and may be changed or withdrawn at any time. The public demo at app.secureweb.ma/demo is read-only and shows a made-up website. Nothing in it is real customer data.

11. Reporting vulnerabilities to us

We welcome reports of security issues in our own websites and Platform. Test in good faith: only use your own accounts, do not access, change or keep other people’s data, do not degrade the service, and give us reasonable time to fix the issue before you disclose it publicly. We will not take legal action against research that follows these rules. Reporting does not entitle you to payment unless we have agreed to it in writing.

12. Suspension and termination

• You may stop using SecureWeb at any time by uninstalling the agent, removing your websites, or asking us to close your account. Uninstalling the agent does not stop billing by itself, so cancel the website’s plan as well (section 5).
• We may suspend or end your access, or refuse a website, if you seriously or repeatedly breach these terms, if you break section 2 or 9, if the law requires it, or if continuing would put our Platform or other customers at risk. When we can, we warn you first and give you time to fix the problem.
• We may stop offering the Platform altogether with at least 60 days’ notice, and we will refund any paid time that has not been used.
• When an account is closed, its data is deleted as described in our Privacy Policy. Sections 2 and 13 to 17 survive termination.

13. Intellectual property

The Platform, the agent, our websites, reports templates and our brand belong to SecureWeb or its licensors. While you use the service, we grant you a non-exclusive, non-transferable right to use them for protecting and managing your own websites. Your websites, data and code remain yours. Reports we deliver to you under a professional service are yours to use within your organisation. If you send us suggestions, we may use them freely.

14. Confidentiality

Each of us keeps the other’s non-public information confidential and uses it only to perform these terms. This includes your website configuration, security events, code and the findings we report to you, as well as our non-public technical information. This does not apply to information that is already public, that was lawfully obtained from someone else, or that must be disclosed by law. In that last case, the disclosing party will tell the other one first where allowed.

15. Liability

• We are not liable for indirect losses, such as lost profits, revenue, data or business opportunities, or for damage caused by attackers, third-party software, your hosting provider, or settings you chose.
• Our total liability for all claims relating to the Platform in any 12-month period is limited to the amount you paid us for the Platform in that period. For a professional service, it is limited to the price of that service.
• Nothing in these terms limits liability for fraud, intentional misconduct or gross negligence, or any liability or consumer right that cannot be limited under Moroccan law, including the Dahir of Obligations and Contracts and Law No. 31-08 on consumer protection.

16. Events outside our control

Neither of us is liable for a delay or failure caused by events beyond reasonable control, such as a natural disaster, war, government action, a widespread internet or power outage, or a large-scale attack on internet infrastructure. This does not include an attack on a website we protect, which is the service itself.

17. Law and disputes

These terms are governed by Moroccan law. If a dispute arises, please contact us first at contact@secureweb.ma. We will try to settle it amicably within 30 days. If that fails, the dispute goes to the competent courts of the place where Secureweb SARL has its registered office, unless consumer law gives you the right to go to another court. Electronic records, including account logs and emails, are accepted as evidence under Law No. 53-05 on the electronic exchange of legal data.

18. Changes to these terms

We may update these terms as our services or the law change. The date at the top shows the current version. We email Platform customers about material changes at least 30 days before they take effect. If you do not accept a change, you may stop using the service before it applies, and we will refund any paid time that has not been used. If you keep using the service after that date, you accept the new terms.