Company details have been checked and approved. The production service’s data handling and legal terms still need review. This page is not the final published policy.
Who provides rootscan
rootscan is a product of Shiprocket Limited, CIN U72900DL2011PLC225614, with its registered office at Plot No. B, Khasra No. 360, M.G. Road, Sultanpur, Gadaipur, Mehrauli, South Delhi 110030, India. These proposed terms describe the service relationship with Shiprocket Limited. They require approval before customers are asked to accept them.
Authorized testing only
Only submit systems you own or have explicit permission to test. Define the allowed hosts, accounts, environments, and actions before testing. A rootscan account does not grant permission to test third-party infrastructure, Shopify’s core platform, or another customer’s records.
Do not use the service to steal data, disrupt systems, bypass another person’s access controls without authorization, or deploy harmful code.
Your account and application
Provide accurate information, protect your account, and use dedicated test identities where possible. Review scope and possible side effects before testing production. You remain responsible for backups, the operation of your application, and the permissions you grant.
Only enable autonomous remediation for the actions you have reviewed and approved. Some findings need a person’s judgment. Review a suggested change before deployment and verify that the intended user flow still works after a fix.
What a result means
Testing is bounded by access, scope, environment, and time. A scan cannot guarantee that every vulnerability will be found. A report is not a security certification or a guarantee of compliance.
Dashboard artwork and sample findings on this website use illustrative data. They are not reports about a real customer. Products marked “Early access” describe a planned offering and a signup opportunity, not a generally available service.
Plans and payment
Free has no monthly seat fee. Pro is $19 per user per month. Business is $29 per user per month. Enterprise pricing and requirements are agreed in a custom contract. Prices are in USD; scans and pentests are billed separately.
The order or checkout must state usage pricing, taxes, renewal, cancellation, refunds, and applicable limits before payment is collected. Store-security products have separate coverage and commercial terms. The preview’s plan buttons do not purchase a subscription.
Data and confidentiality
Credentials, source code, application responses, and vulnerability evidence can be sensitive. The approved privacy notice, service agreement, and any data processing agreement must describe permitted processing, access, confidentiality, retention, and deletion.
Where applicable, Shiprocket Limited acts as controller or data fiduciary for processing it determines, and processes customer testing data in the role established by the applicable agreement. See the privacy notice for that distinction and applicable rights.
Support, complaints, and disclosure
Use the contact page for a product question and the responsible disclosure page for a security issue. In this preview, the contact form prepares a message; it does not deliver it.
A dedicated privacy contact and grievance process must be published in the final service policy before live collection begins.
Before these terms take effect
The operating team must approve the effective date, contact roles, governing law, dispute process, suspension and termination rules, warranty language, and liability provisions. No jurisdiction, liability cap, service-level commitment, or refund policy is created by this review copy.