Terms of Service

1. Acceptance

By using Djoji Ghost Protocol ("Djoji", "we", "us"), you agree to these Terms. If you do not agree, do not use the service.

2. What Djoji does

Djoji performs external security assessment in two modes. By default, scans are passive: they read publicly available data — the same information visible to any internet user. For domains whose ownership has been verified through our DNS verification process, which constitutes the owner's authorization for those checks (given directly, or through an Authorized Provider under section 3A), Djoji additionally performs active external scanning (for example, port scanning and web configuration checks). Neither mode involves accessing private systems, bypassing authentication, or exploiting vulnerabilities.

3. Permitted use

You may use Djoji to:

• Scan domains you own or have explicit written permission to assess
• Run free passive scans on any domain (passive checks use only public data)
• Share reports for domains you have verified, including with your own clients and through Djoji share links, and share Ghost Echo reports for informational and marketing purposes
• Scan, monitor, and share reports for domains belonging to a client you are authorized to manage as its IT or security service provider ("Authorized Provider"), as set out in section 3A

3A. Scanning on behalf of a client

If you add or scan a domain you do not own, you represent and warrant that (a) you have a current written agreement or written authorization from the domain's owner permitting you to manage its IT or security and to commission external security scans of it; (b) by completing DNS verification for that domain you are acting under that authorization, and the verification record is published with the owner's knowledge; and (c) you will stop scanning, and remove the domain from your account, when that authorization ends. You may share reports for those domains with that client. You are responsible for your clients' authorization; on request you will provide us with evidence of it, and we may suspend scanning of any domain where it is not provided. When you start a scan, we record your authorization attestation with it.

4. Prohibited use

You must not:

• Use Djoji to facilitate unauthorized access to any system
• Abuse the service to perform denial-of-service or bulk harassment scanning
• Resell access to Djoji itself, or republish scan results for domains you don't own or aren't authorized to assess (including as an Authorized Provider under section 3A), without our written permission
• Automate scans beyond the rate limits provided in your tier
• Submit domains for active (non-passive) scanning unless you own them or are an Authorized Provider for them under section 3A

5. Disclaimer of warranties

Ghost Reports are provided "as is" based on publicly available information at the time of scanning. Djoji does not guarantee that reports are complete, error-free, or that acting on them will eliminate all security risks. Security is a continuous process — Djoji is a tool to assist, not a guarantee of safety.

6. Limitation of liability

To the maximum extent permitted by law, Djoji is not liable for any indirect, incidental, or consequential damages arising from use of or reliance on the service. Our total liability for any claim shall not exceed the amount you paid us in the 12 months preceding the claim.

7. Changes to terms

We may update these Terms. When we do, we'll post the updated date here. Continued use after changes constitutes acceptance.

8. Contact

Djoji Ghost Protocol · hello@djoji.com