Terms and Conditions

1. Company Information

FrameLock is owned and operated by:

SysINet Infosolutions LLP
Thane, Maharashtra, 401107
India

Privacy: privacy@framelock.in

Security: security@framelock.in

2. About FrameLock

FrameLock is a responsible web security platform that helps website owners and ethical security researchers identify and report potential web security misconfigurations and vulnerabilities.

FrameLock currently focuses on clickjacking testing and reporting. In the future, FrameLock may support additional non-destructive website security checks, including but not limited to missing HTTP security headers, SPF/DNS-related checks, information disclosure checks, and other website security misconfiguration checks.

FrameLock may allow users to test publicly accessible websites for supported security checks and may allow ethical security researchers to submit potential vulnerability reports to website owners through our platform.

FrameLock does not exploit vulnerabilities, bypass authentication, steal data, damage websites, disrupt services, install malware, conduct phishing, access private systems, or perform unauthorized attacks. FrameLock acts only as a platform for testing, reporting, communication, and responsible disclosure.

3. Eligibility

You may use FrameLock only if you are legally able to enter into these Terms and comply with applicable laws. By using FrameLock, you confirm that:

• You are at least 18 years old, or you are using the platform with appropriate legal consent and supervision.
• You will use FrameLock only for lawful, ethical, and responsible purposes.
• You will not use FrameLock for unauthorized, harmful, abusive, or illegal activity.

4. Platform Role

FrameLock is a technology platform. We provide tools that may help identify and report potential security misconfigurations and vulnerabilities.

We do not guarantee that:

• A scan result is complete, accurate, or current.
• A website is vulnerable, safe, secure, or compliant.
• A reported issue is valid, accepted, or exploitable.
• A website owner will respond to a report.
• A report will qualify for reward, bounty, certificate, credit, or recognition.
• Any vulnerability or misconfiguration will be fixed.

Website owners are responsible for reviewing, validating, accepting, rejecting, prioritizing, and fixing reports. Security researchers are responsible for ensuring that their testing and reporting activities are lawful, ethical, non-destructive, and authorized where required.

5. Authorized and Ethical Use Only

You agree to use FrameLock only for lawful, ethical, and responsible security testing.

You must not use FrameLock to:

• Access any system, account, server, database, or network without authorization.
• Exploit, weaponize, or abuse any vulnerability.
• Steal, collect, expose, sell, or misuse data.
• Bypass login, authentication, payment, rate limits, or access controls.
• Damage, disrupt, overload, or interfere with any website, service, or network.
• Conduct phishing, malware distribution, spam, credential harvesting, or social engineering.
• Threaten, blackmail, extort, harass, shame, or pressure website owners.
• Submit fake, misleading, abusive, defamatory, irrelevant, or malicious reports.
• Upload malware, exploit payloads, stolen data, or illegal content.
• Use automated abuse, scraping, bots, or excessive scanning.
• Misrepresent your identity, authority, authorization, or relationship with a website owner.
• Violate any applicable law, regulation, policy, contract, or third-party right.

Where authorization is legally, contractually, or programmatically required, you are responsible for obtaining it before testing or reporting.

6. Website Security Scanner

FrameLock's scanner is intended to perform non-destructive checks related to supported website security issues.

The scanner may analyze publicly accessible website information such as:

• URLs or domains submitted by users
• HTTP response headers
• Frame protection settings
• Content Security Policy behavior
• Redirect behavior
• Status codes
• Browser-visible configuration signals
• Missing HTTP security headers
• SPF/DNS-related information, where supported
• Information disclosure indicators, where supported
• Other non-destructive website security signals

The scanner is not intended to perform exploitation, intrusive testing, credential attacks, denial-of-service activity, data extraction, malware activity, or unauthorized access.

7. Security Researcher Reports

Security researchers may use FrameLock to submit potential vulnerability or misconfiguration reports to website owners. By submitting a report, you confirm that:

• The report is submitted in good faith.
• The report is based on lawful, ethical, and non-destructive testing.
• You have not accessed, copied, modified, deleted, leaked, or exposed private data.
• You have not disrupted the website or service.
• The information you provide is accurate to the best of your knowledge.
• You are not using the report to harass, threaten, extort, blackmail, or pressure the website owner.
• You have the right to submit the information included in the report.
• Your report does not include malware, harmful code, stolen data, credentials, private keys, or unauthorized personal data.

FrameLock may review, reject, remove, limit, or moderate reports that appear abusive, false, unlawful, irrelevant, spammy, harmful, defamatory, threatening, exploitative, or inconsistent with responsible disclosure.

8. Website Owner Reports

If you are a website owner or authorized representative, FrameLock may allow you to receive, review, manage, or respond to reports submitted through the platform.

You are responsible for:

• Verifying your authority over the website or domain.
• Reviewing reports carefully.
• Validating whether a reported issue is real.
• Communicating professionally with researchers.
• Fixing accepted vulnerabilities or misconfigurations.
• Complying with your own legal, security, privacy, and disclosure obligations.

FrameLock does not guarantee that every report is accurate, valid, complete, relevant, or submitted by an authorized researcher.

9. Responsible Disclosure

Users must follow responsible disclosure principles.

Researchers should:

• Report issues privately through proper channels.
• Give website owners a reasonable opportunity to review and fix issues.
• Avoid public disclosure before the website owner has had reasonable time to respond.
• Avoid publishing sensitive details, exploit steps, private data, or harmful proof-of-concept material.
• Avoid demanding payment, reward, employment, or any benefit in exchange for silence.

FrameLock may restrict or remove users who misuse the platform for threats, pressure, extortion, blackmail, harassment, or public shaming.

10. No Bug Bounty Guarantee

FrameLock is not a bug bounty program unless clearly stated otherwise. Submitting a report through FrameLock does not guarantee:

• Payment
• Reward
• Certificate
• Recognition
• Hall of Fame listing
• Employment opportunity
• Acceptance by the website owner
• Any response from the website owner

Any reward, credit, or recognition is entirely subject to the relevant website owner's decision or the specific program rules, if any.

11. User Accounts

Some features of FrameLock may require an account. You are responsible for:

• Providing accurate account information.
• Keeping your login credentials secure.
• All activity under your account.
• Not sharing, selling, or transferring your account without permission.
• Immediately notifying us of unauthorized account access.

We may suspend, restrict, or terminate accounts that violate these Terms or create risk for FrameLock, SysINet Infosolutions LLP, users, website owners, or third parties.

12. OTP and Password Authentication

FrameLock may use OTP and password-based authentication to verify users and protect accounts. You agree not to:

• Share OTPs or passwords with others.
• Attempt to access another user's account.
• Bypass authentication controls.
• Use fake, disposable, unauthorized, or misleading account information.
• Interfere with authentication, verification, or security systems.

13. User Content

You may submit URLs, reports, messages, notes, screenshots, evidence, profile details, comments, or other content through FrameLock. You retain ownership of your content, but you grant SysINet Infosolutions LLP a limited, worldwide, non-exclusive, royalty-free license to use, host, store, copy, process, display, transmit, and share your content as necessary to operate, secure, improve, and provide FrameLock.

You must not submit content that:

• You do not have the right to share.
• Contains confidential, private, or personal data you are not authorized to disclose.
• Contains passwords, OTPs, tokens, API keys, private keys, or credentials.
• Contains malware, exploit code, payloads, or harmful scripts.
• Is defamatory, abusive, illegal, misleading, threatening, or harassing.
• Violates intellectual property, privacy, confidentiality, or other third-party rights.

14. Privacy and Data

Your use of FrameLock is also governed by our Privacy Policy. FrameLock is designed to minimize collection of user-related data. We do not sell personal information and do not use vulnerability reports, scan data, or researcher activity for advertising purposes.

When you use FrameLock, we may process limited information such as account details, authentication data, submitted URLs, scan results, vulnerability reports, technical metadata, contact details, communication records, IP addresses, browser information, and security logs.

You should not submit sensitive, confidential, personal, regulated, or proprietary information unless you are authorized to do so and it is necessary for responsible disclosure.

15. Abuse Prevention and Monitoring

To protect FrameLock and others, we may monitor platform activity for abuse, fraud, spam, unauthorized testing, excessive scanning, fake reports, extortion, harassment, malware submission, or platform misuse.

We may take actions including:

• Rate limiting
• Blocking scans
• Removing reports
• Suspending accounts
• Restricting access
• Contacting affected parties
• Preserving evidence
• Reporting unlawful activity to appropriate authorities where necessary

16. Intellectual Property

FrameLock, including its name, logo, design, website, software, scanner logic, reports, text, graphics, workflows, databases, and platform features, is owned by SysINet Infosolutions LLP or its licensors.

You may not copy, modify, sell, license, distribute, reverse engineer, scrape, mirror, or create derivative works from FrameLock unless permitted by law or with our written permission. You may use FrameLock only as intended through the normal platform interface.

17. Third-Party Websites

FrameLock may scan, reference, link to, or facilitate reports about third-party websites. We do not control third-party websites and are not responsible for their content, security, availability, policies, actions, responses, vulnerability handling, or privacy practices. Your interaction with third-party websites is at your own risk and subject to their own terms and policies.

18. Forum and Community Features

FrameLock may provide forum, community, or communication features. You agree not to post or share:

• Illegal, abusive, hateful, defamatory, or threatening content.
• Spam, scams, advertisements, or misleading content.
• Malware, exploit payloads, stolen data, or credentials.
• Private information of others without authorization.
• Content that encourages unauthorized hacking, exploitation, or abuse.

We may moderate, edit, remove, restrict, or delete forum content that violates these Terms or creates risk for FrameLock or others.

19. Service Availability

FrameLock may be modified, updated, suspended, limited, or discontinued at any time. We do not guarantee that FrameLock will be:

• Always available
• Error-free
• Uninterrupted
• Fully secure
• Compatible with every website
• Free from false positives or false negatives
• Available without limits or delays

20. Disclaimers

FrameLock is provided on an "as is" and "as available" basis. To the fullest extent permitted by law, SysINet Infosolutions LLP disclaims all warranties, express or implied, including warranties of accuracy, completeness, reliability, security, availability, fitness for a particular purpose, merchantability, non-infringement, and error-free operation.

FrameLock does not guarantee that it will detect every vulnerability, prevent attacks, confirm exploitability, satisfy compliance requirements, or replace professional security testing.

21. Limitation of Liability

To the fullest extent permitted by law, SysINet Infosolutions LLP, its partners, employees, contractors, affiliates, licensors, and service providers will not be liable for any indirect, incidental, special, consequential, punitive, or exemplary damages. This includes damages for:

• Loss of profits
• Loss of revenue
• Loss of data
• Loss of business
• Loss of goodwill
• Loss of reputation
• Security incidents
• Website downtime
• Incorrect scan results
• Missed vulnerabilities
• User misuse
• Third-party claims
• Unauthorized testing by users

Our total liability for any claim related to FrameLock will not exceed the greater of:

• The amount you paid to FrameLock in the previous three months; or
• INR 10,000.

Some jurisdictions do not allow certain limitations of liability, so some limitations may not apply to you.

22. Indemnification

You agree to defend, indemnify, and hold harmless SysINet Infosolutions LLP, its partners, employees, contractors, affiliates, licensors, and service providers from claims, damages, losses, liabilities, costs, and expenses arising from:

• Your use or misuse of FrameLock.
• Your violation of these Terms.
• Your violation of law.
• Your violation of third-party rights.
• Your unauthorized testing or scanning.
• Your vulnerability reports.
• Your submitted content.
• Your interaction with website owners or researchers.
• Any harm caused by your actions through or related to FrameLock.

23. Suspension and Termination

We may suspend, restrict, or terminate your access to FrameLock at any time if we believe that:

• You violated these Terms.
• You misused the platform.
• You submitted abusive or false reports.
• You attempted unauthorized access.
• You created legal, security, operational, or reputational risk.
• Your activity may harm FrameLock, SysINet Infosolutions LLP, users, website owners, or third parties.

You may stop using FrameLock at any time. Sections that by nature should survive termination will continue to apply, including intellectual property, privacy, disclaimers, limitation of liability, indemnification, governing law, and dispute provisions.

24. Changes to These Terms

We may update these Terms from time to time. When we update the Terms, we will change the "Last updated" date above. Your continued use of FrameLock after changes become effective means you accept the updated Terms. If you do not agree with the updated Terms, you must stop using FrameLock.

25. Governing Law and Jurisdiction

These Terms are governed by the laws of India. Subject to applicable law, the courts located in Thane, Maharashtra, India shall have exclusive jurisdiction over disputes arising from or relating to these Terms, FrameLock, or your use of the platform.

26. Contact Us

For questions about these Terms, contact:

SysINet Infosolutions LLP
Thane, Maharashtra, 401107
India

Privacy: privacy@framelock.in

Security: security@framelock.in