Terms of service

1. Who you're agreeing with

These terms are an agreement between you and Novator Technologies (SMC-Private) Limited, a single-member private limited company registered in Karachi, Pakistan ("Novator", "we", "us"). By using SpeedAudit at speedaudit.org, you agree to these terms. If you don't agree, please don't use SpeedAudit.

2. What SpeedAudit is

SpeedAudit is a free, browser-based collection of web diagnostic tools. You can run Lighthouse performance audits, DNS lookups, WHOIS queries, SPF/DMARC checks, SSL certificate inspections, HTTP security header grading, blacklist checks, DNS propagation comparisons, and IP geolocation, all without signing up or paying anything.

The tools are an interface onto public infrastructure data. We don't generate the data ourselves; we forward your queries to the relevant authoritative source (DNS resolvers, registries, certificate transparency logs, etc.) and present what comes back.

3. No accounts, no signup

SpeedAudit currently has no user accounts or authentication. You don't need to sign up to use any tool. There's nothing to log into, nothing to log out of, and no password to keep secure. If we ever add accounts (for example, for a paid tier), the addition will be clearly disclosed and these terms will be updated.

4. Your inputs and intended use

You're responsible for the URLs, domain names, and IP addresses you enter into SpeedAudit. By using the service, you confirm that:

• You have a legitimate reason to query the system you're querying. Running diagnostics against infrastructure you own, or that you've been authorized to inspect, is fine. Running them as part of unauthorized reconnaissance against someone else's system is not.
• You won't use SpeedAudit's API endpoints to evade rate limits on the underlying services we rely on (Google PageSpeed Insights, WhoisXML, Cert Spotter, etc.), to mass-enumerate WHOIS data, or to scrape large lists of IPs.
• You won't use SpeedAudit as part of an attack pipeline, including for reconnaissance, vulnerability scanning of third parties without their authorization, or building lists of targets.

If we have a credible report or detect a pattern indicating misuse, we may rate-limit or block requests from the originating IP without notice.

5. Acceptable use

In addition to the above, please don't:

• Probe, scan, or test the security of SpeedAudit itself without our written permission (see the security page for our coordinated disclosure process)
• Run automated tools that hit our endpoints at a rate inconsistent with normal interactive use
• Resell or rebrand SpeedAudit as your own product without a written license from us
• Misrepresent SpeedAudit's output (for example, presenting our SSL or DNS check as authoritative when the relevant section of our docs explicitly notes data freshness limits)

6. What we provide, and what we don't

SpeedAudit is provided "as is" and "as available". We work hard to keep the service running, but we make no guarantees that it will be uninterrupted, error-free, or that the data we return is current or accurate.

Data freshness disclaimers worth knowing:

• Lighthouse scores have natural ±5 point variance between runs. Re-run for confidence.
• SSL certificate data comes from Certificate Transparency logs and may lag the actual deployed certificate by minutes after a renewal.
• WHOIS data is cached at our edge for 24 hours to preserve API credits. For minute-to-minute accuracy, query the relevant registry directly.
• DNS propagation results reflect each resolver's cache state at the moment we asked, not a permanent assertion.

To the maximum extent allowed by law, Novator Technologies disclaims all warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, and non-infringement. Don't make business-critical decisions based on SpeedAudit output without verifying at the authoritative source.

7. Limitation of liability

To the maximum extent allowed by law, Novator Technologies' total liability to you for any claim arising from your use of SpeedAudit is limited to the amount you paid us in the twelve months before the claim, which, since SpeedAudit is free, is zero. We are not liable for indirect, incidental, consequential, or punitive damages, including lost profits, lost data, or business interruption.

This isn't us trying to be hostile, it's a standard limitation that lets us offer a free service without taking on unlimited risk.

8. Pricing and paid features

SpeedAudit is currently free. We may introduce paid features in the future (for example, deeper Lighthouse audits, monitoring, or AI-generated insights). When we do, the pricing and terms for paid features will be clearly disclosed at the point of upgrade. The free tier features that exist today won't be moved behind a paywall without notice.

9. Third-party services

SpeedAudit forwards your queries to a number of third-party services to produce its results. By using each tool, you agree that the input you provide will be sent to the corresponding upstream provider. The current list:

• Google PageSpeed Insights — receives the URL you audit
• WhoisXML API — receives domains and IPs from the WHOIS and IP geolocation tools
• SSLMate Cert Spotter — receives domains from the SSL check
• Public DoH resolvers (Cloudflare, Google, Quad9, AdGuard, NextDNS, OpenDNS) — receive domains from DNS lookup and propagation tools
• Public DNSBLs (SpamCop, SORBS, CBL, Mailspike, PSBL, s5h.net) — receive IP addresses from the blacklist check
• Per-TLD RDAP servers — receive domains from WHOIS (used as fallback)
• Target web servers — the security headers check fetches the URL you submit, so the target server's logs will see SpeedAudit's request originating from Cloudflare
• OpenStreetMap — your browser loads map tiles when the IP geolocation tool renders results
• Cloudflare — runs our Workers, database, and serves all static assets

If any of these providers change their terms, pricing, or availability in a way that affects what SpeedAudit can do, we'll do our best to adapt and communicate the change.

10. Discontinuing your use

You can stop using SpeedAudit at any time, with no action needed on our end. Since there's no account, there's nothing to delete. If you've used the Lighthouse audit tool and want the audit history rows for your IP address removed, see the deletion process in our privacy policy.

We may suspend access from specific IP addresses or networks if they violate these terms, attempt to abuse the underlying services, or if continued operation poses a security or legal risk.

11. Changes to these terms

We may update these terms occasionally. We'll change the "Last updated" date at the top. For material changes, we'll try to surface a notice on the site. Continuing to use SpeedAudit after a change means you accept it; if you don't accept a change, please stop using SpeedAudit.

12. Governing law and disputes

These terms are governed by the laws of Pakistan, and disputes arising from them will be subject to the exclusive jurisdiction of the courts in Karachi. If you're a consumer in a jurisdiction that gives you mandatory rights regardless of choice of law (for example, in the EU or UK), nothing in these terms takes those rights away.

13. Contact

Questions about these terms: hello@novator.co. For privacy-specific questions: privacy@novator.co. For security disclosures: security@novator.co.