Bugnexa — Terms & Conditions
Last Updated: Oct 19, 2026
These Terms & Conditions ("Terms") govern the access to and use of BugNexa, an automated cybersecurity testing and vulnerability assessment platform operated by SysINet InfoSolutions LLP ("Company," "BugNexa," "we," "our," or "us").
By registering an account, purchasing subscriptions or scan credits, initiating security assessments, or otherwise using the BugNexa platform, users ("User," "Customer," or "you") agree to these Terms.
Users accessing BugNexa on behalf of an organization confirm that they are authorized to accept these Terms on behalf of that organization.
If you do not agree to these Terms, you should not access or use the platform.
1. Authorized Use
BugNexa is intended exclusively for lawful and authorized cybersecurity testing.
Users may assess only domains, IP addresses, servers, networks, security appliances, applications, or other assets that they own or are legally authorized to assess.
Users are solely responsible for obtaining and maintaining valid authorization from the relevant asset owner before initiating any assessment.
BugNexa may request proof of ownership or authorization and may restrict, suspend, or terminate assessments where authorization cannot be established or where unauthorized activity is suspected.
Users must ensure that all testing activities comply with applicable laws, contractual obligations, and third-party rights.
2. Scope of Services
BugNexa provides automated black-box cybersecurity assessment services, which may include:
Domain reconnaissance and external attack surface discovery.
Vulnerability assessment of supported internet-facing infrastructure.
Public IP address, server, and network service assessments.
Security appliance and network device vulnerability assessments.
Identification of exposed services and detectable security weaknesses.
Vulnerability reporting and remediation recommendations.
On-demand and scheduled security assessments.
Re-scanning and remediation verification.
User, team, account, and scan-credit management.
Other features made available under applicable plans.
The availability of services and features depends on the selected subscription, supported assessment scope, account permissions, and technical capabilities of the platform.
BugNexa's automated services currently focus on supported external infrastructure and network security assessments.
Manual penetration testing, application security testing, API security testing, mobile application testing, and other professional security services, where offered, are subject to separately agreed engagement terms.
BugNexa may introduce, modify, or discontinue features in accordance with these Terms and applicable contractual obligations.
3. Automated Security Testing
BugNexa primarily performs automated black-box security assessments using supported scanning technologies and assessment methodologies.
Users acknowledge that:
Automated assessments have technical limitations.
Results may contain false positives, false negatives, or duplicate findings.
Certain vulnerabilities may require additional investigation or manual verification.
The accuracy and completeness of results depend on the target environment, accessibility, assessment scope, and available detection capabilities.
Scanning does not guarantee the identification of every vulnerability.
The absence of reported vulnerabilities does not establish that a system is completely secure.
BugNexa provides technical findings and recommendations to support cybersecurity risk management.
Users remain responsible for evaluating findings, implementing remediation measures, and making operational security decisions.
4. Scan Credits, Payments and Refunds
BugNexa operates a subscription and scan-credit-based service model.
Scan Credit Usage
Each applicable scan or re-scan consumes the number of credits associated with the selected assessment.
The required credits are displayed before scan confirmation.
Credit consumption depends on the selected scan type and applicable plan.
Additional assessments, including remediation re-testing, require the applicable credits.
Users are responsible for maintaining sufficient credits for their intended assessments.
Credit Validity and Expiry
Scan-credit validity and expiry are determined by the applicable purchase, subscription, or commercial plan.
Applicable validity and expiry information will be communicated at the time of purchase or made available through the account.
Unused credits may expire on the specified expiry date.
Expired credits are not automatically carried forward, renewed, or refunded unless expressly permitted under the applicable plan or required by law.
Credit expiry does not automatically result in deletion of user accounts, assessment history, or reports.
Free Domain Recon
BugNexa may offer limited complimentary Domain Recon assessments.
Currently, eligible users may perform up to three free Domain Recon scans per email address, subject to applicable platform restrictions.
After the complimentary allowance is exhausted, further Domain Recon assessments require the applicable scan credits.
BugNexa may modify promotional or complimentary scan allowances for future use, subject to applicable legal and contractual requirements.
Free assessments remain subject to the authorization requirements and acceptable-use restrictions stated in these Terms.
Payments and Billing
Subscription fees, credit purchases, and other applicable charges will be communicated before purchase or through an agreed commercial arrangement.
Users are responsible for applicable fees, taxes, and other charges associated with their purchases.
Payment transactions may be processed through authorized third-party payment service providers.
Failed Scans and Credit Adjustments
If an assessment fails due to a suspected BugNexa platform-side technical issue, the user may request a review by contacting support@bugnexa.com.
Where a platform-side technical failure is confirmed, BugNexa will assess the circumstances and determine an appropriate credit adjustment, restoration, or other remedy consistent with applicable law and contractual obligations.
Scans affected by target unavailability, firewall restrictions, connectivity problems, incorrect target information, or other conditions outside BugNexa's reasonable control may not qualify for credit restoration.
A scan producing no vulnerability findings does not, by itself, constitute a failed assessment.
Refunds
Purchased or consumed scan credits and subscription charges are generally non-refundable, except where required by applicable law or expressly agreed under applicable commercial terms.
Requests concerning incorrect charges, duplicate payments, failed assessments, or credit deductions may be submitted to support@bugnexa.com.
Requests will be reviewed according to the circumstances, applicable service terms, and legal requirements.
Nothing in this section limits any refund or other remedy that cannot legally be excluded.
5. Scheduled and Recurring Assessments
BugNexa may allow users to configure scheduled or recurring security assessments.
By enabling scheduled scanning, users authorize BugNexa to assess the selected assets according to the configured schedule.
Users are responsible for:
Maintaining valid testing authorization.
Ensuring target information remains accurate.
Maintaining sufficient available scan credits.
Selecting appropriate testing windows.
Coordinating testing with relevant asset owners and service providers.
Scheduled assessments are subject to platform availability, supported functionality, and sufficient credits.
Where required credits are unavailable, the scheduled assessment may not execute until the applicable requirements are satisfied.
Each successfully initiated scheduled assessment is subject to the applicable credit-consumption rules.
BugNexa does not guarantee uninterrupted or continuous execution of scheduled scans.
6. Account, Enterprise and Partner Responsibilities
Users are responsible for maintaining the confidentiality of their account credentials and ensuring that their accounts are used only by authorized individuals.
Users must promptly notify BugNexa of suspected unauthorized account access or security incidents involving their accounts.
Enterprise administrators, vendors, cybersecurity consultants, MSSPs, MSPs, and B2B partners are responsible for managing their authorized users and customer-related activities.
Applicable responsibilities include:
Managing user permissions and account access.
Maintaining proper authorization for client assessments.
Allocating and tracking scan credits.
Managing assessment scopes.
Protecting customer assessment information.
Ensuring lawful use of the platform.
Partners must obtain appropriate authorization before initiating assessments against customer infrastructure.
BugNexa may restrict account activities that exceed authorized permissions or violate these Terms.
7. Prohibited Activities
Users must not use BugNexa for:
Unauthorized security scanning or system access.
Testing third-party infrastructure without valid authorization.
Denial-of-service attacks or intentional service disruption.
Malware deployment, credential theft, or data destruction.
Malicious exploitation of identified vulnerabilities.
Unauthorized access to sensitive information.
Misuse of BugNexa infrastructure, APIs, or services.
Circumvention of account restrictions or usage controls.
Any activity violating applicable laws or third-party rights.
BugNexa reserves the right to investigate suspected misuse and restrict or suspend relevant activities or accounts.
Where legally required, BugNexa may cooperate with competent authorities investigating unlawful activity.
8. Security Testing Risks
Users acknowledge that cybersecurity assessments may generate network traffic and interact with target systems.
Depending on the target environment and assessment type, scanning activities may result in:
Security alerts or monitoring notifications.
Temporary access restrictions or automated blocking.
Increased network or system resource utilization.
Performance degradation.
Unexpected service interruptions.
Users are responsible for assessing the suitability of their environments before initiating scans.
Users should maintain appropriate backups, coordinate testing windows, and obtain necessary operational approvals.
BugNexa does not guarantee that every assessment will be free from operational impact.
9. Vulnerability Reports and Compliance
BugNexa generates security assessment reports based on the scope, methodology, technical observations, and findings of the assessment performed.
Reports may include identified vulnerabilities, severity information, supporting technical evidence, and remediation recommendations.
Users acknowledge that:
Reports represent the assessment results available at the time of testing.
Automated reports may require additional technical verification.
Vulnerability findings may change as systems or threat information change.
Reports do not guarantee complete system security.
Reports do not automatically establish regulatory compliance.
BugNexa reports may support internal security reviews, vulnerability management, and relevant audit or compliance activities.
However, they do not constitute statutory audit certificates, regulatory approvals, independent compliance certifications, or legal opinions unless such services are expressly covered under a separate professional engagement.
Customers may use and share their reports for legitimate internal, remediation, audit-support, and authorized business purposes, subject to applicable confidentiality obligations.
10. AI-Assisted Recommendations
BugNexa may use automated analysis or AI-assisted technologies to support vulnerability analysis, reporting, risk prioritization, and remediation recommendations.
AI-assisted outputs are provided to support technical decision-making and may require additional validation.
Users should review recommendations before making changes to production infrastructure or implementing security controls.
BugNexa does not guarantee the accuracy, completeness, or suitability of every automated or AI-assisted recommendation.
Where external technology providers are involved in processing information, the applicable data handling practices are governed by the BugNexa Privacy Policy and relevant service-provider arrangements.
11. Data Privacy and Confidentiality
BugNexa takes reasonable technical and organizational measures designed to protect customer information, assessment data, and vulnerability reports.
Personal information is collected and processed according to the BugNexa Privacy Policy available at:
Access to customer information may be provided to authorized personnel, service providers, and permitted account administrators where necessary for service delivery and account management.
Users are responsible for protecting downloaded reports, maintaining account security, and sharing sensitive assessment information only with authorized parties.
BugNexa may retain or disclose information where necessary to comply with applicable legal obligations or valid legal processes.
12. Intellectual Property and Customer Reports
All intellectual property rights relating to the BugNexa platform, software, scanning technologies, dashboards, interfaces, branding, and report templates remain with SysINet InfoSolutions LLP or its respective licensors.
Users receive a limited, non-exclusive, non-transferable right to access and use the platform according to their applicable subscription, account permissions, and these Terms.
Customers retain their existing rights in the information, assets, and business data submitted for assessment.
Customers may download, retain, and share their generated security assessment reports for legitimate internal security, remediation, audit-support, and authorized business purposes.
The right to use generated reports does not transfer ownership of BugNexa's underlying software, scanning technologies, or proprietary report templates.
Users may not reproduce, reverse-engineer, resell, or commercially redistribute proprietary platform technology except where expressly permitted or legally authorized.
13. Third-Party Services
BugNexa may rely on third-party service providers and technologies, including:
Cloud hosting and infrastructure services.
Payment processing providers.
Security scanning technologies.
Vulnerability databases and threat intelligence sources.
APIs and open-source components.
Reporting and AI-assisted services.
The availability, performance, or functionality of certain services may depend on these providers.
BugNexa is not responsible for interruptions or failures caused by third-party systems beyond its reasonable control, subject to applicable law and contractual obligations.
Information processed through third-party services will be handled in accordance with applicable confidentiality, security, and data protection requirements.
14. Service Availability and Modifications
BugNexa aims to maintain reliable access to its platform and services.
However, temporary interruptions may occur due to:
Scheduled maintenance.
Software updates.
Security improvements.
Infrastructure failures.
Third-party service interruptions.
Circumstances beyond reasonable operational control.
BugNexa may improve, update, modify, or discontinue platform features, scanning options, or service offerings.
Material changes affecting existing customers will be handled according to applicable contractual obligations and legal requirements.
Unless expressly agreed under a separate service-level agreement, BugNexa does not guarantee uninterrupted platform availability.
15. Indemnification
To the extent permitted by applicable law, users agree to indemnify and hold harmless SysINet InfoSolutions LLP against third-party claims, damages, losses, liabilities, and reasonable expenses arising from:
Unauthorized security assessments.
Unlawful use of the platform.
Violation of third-party rights.
Material breaches of these Terms.
Misuse of BugNexa services or assessment capabilities.
This obligation does not apply to losses attributable to BugNexa's own wrongful conduct to the extent such liability cannot legally be excluded.
16. Limitation of Liability
To the maximum extent permitted by applicable law, SysINet InfoSolutions LLP shall not be liable for indirect, incidental, consequential, reputational, business interruption, or revenue losses arising from the use of BugNexa.
The aggregate liability of SysINet InfoSolutions LLP arising from the services shall not exceed the fees paid by the affected customer for the relevant services during the preceding 12 months.
This limitation does not apply to fraud, intentional misconduct, or any liability that cannot legally be excluded or limited.
The 12-month period relates only to the calculation of the contractual liability limit and does not determine the expiry period of scan credits or subscriptions.
Nothing in these Terms excludes rights or remedies that cannot lawfully be excluded.
17. Account Suspension and Termination
BugNexa may suspend, restrict, or terminate access to the platform where reasonably necessary due to:
Unauthorized scanning or prohibited activities.
Material violations of these Terms.
Non-payment of applicable charges.
Suspected fraud or account misuse.
Security threats affecting the platform or other users.
Applicable legal or regulatory requirements.
Where appropriate and legally permissible, BugNexa may provide notice or an opportunity to resolve the issue before termination.
Following account suspension or termination:
Access to platform features may be restricted.
Scheduled assessments may cease.
Unused credits will be handled according to applicable commercial terms and legal requirements.
Access to historical reports and assessment information may be affected.
Eligible personal information will be retained or deleted according to the Privacy Policy and applicable legal obligations.
Outstanding payment obligations may remain enforceable.
Users seeking account closure or information about their remaining credits and reports may contact support@bugnexa.com.
Suspension or termination does not affect rights or obligations that accrued before the effective termination date.
18. Changes to Terms & Conditions
BugNexa may revise these Terms to reflect changes in its services, platform functionality, business operations, commercial arrangements, or applicable legal requirements.
Updated Terms will be published on the BugNexa website with the applicable revision date.
Where required by law or contractual obligations, BugNexa will provide notice of material changes or request renewed acceptance.
Continued use of the platform following valid notification of updated Terms may constitute acceptance where permitted by applicable law.
19. Governing Law and Jurisdiction
These Terms & Conditions shall be governed by the applicable laws of India.
Subject to applicable law and any mandatory statutory remedies or jurisdictional requirements, disputes arising from these Terms shall fall under the jurisdiction of competent courts in Mumbai, Maharashtra, unless otherwise agreed in writing.
Nothing in these Terms limits statutory rights or remedies that cannot legally be excluded.
20. Contact Information
For questions, complaints, billing disputes, scan-credit enquiries, or concerns regarding these Terms & Conditions, please contact:
Company: SysINet InfoSolutions LLP
Platform: BugNexa
Website: https://bugnexa.com
Email: support@bugnexa.com
We will review and respond to enquiries according to their nature and applicable legal requirements.
© 2026 SysINet InfoSolutions LLP. All Rights Reserved.