Terms of Service

Last updated: August 13, 2026

No legal entity has been registered. Headergrade is a product name for a security diagnostics tool. The operator has not yet registered a company, appointed a legal representative, or designated a registered address. The operator must supply an entity name, address and jurisdiction before these terms can bind anyone. These terms are presented as an operating statement of how the tool is intended to be used, not as a legally binding contract.

What the tool does

Headergrade is a diagnostics tool that fetches a URL you provide, reads the HTTP response headers that the target server sends, and returns a plain-language analysis of the security headers it found. It does not store, log, or share the URLs you check or the analysis results.

No accounts, no stored data

Headergrade does not create user accounts, set cookies, or retain any data between sessions. Every scan is independent. There is no history, no saved reports, and no way to retrieve a previous scan result.

Acceptable use

You agree to use Headergrade only to check URLs that you own or have permission to check. You may not:

Use the tool to probe or scan infrastructure you do not own or have authorisation to test.
Submit URLs at a rate that would constitute a denial-of-service attack on the tool or on the target servers.
Use the tool for any unlawful purpose or in violation of applicable law.

No guarantee of accuracy

Headergrade reports what it receives from the target server. A header that is absent or misconfigured may reflect a server-side setting, a CDN or edge-proxy configuration, or a limitation of the checker platform itself. The tool is provided as a diagnostics aid, not as a security audit. It does not replace a professional security review.

Platform limitation: The checker runs on the Cloudflare Workers runtime. It cannot open a connection to hosts that are themselves behind Cloudflare. Such hosts may report as unreachable. This is a limitation of the checker platform, not a statement about the target server's firewall or network configuration. The tool will note this in the report when it occurs.

No compliance certification

Headergrade does not claim compliance with any security standard, certification, or regulation (including but not limited to PCI DSS, SOC 2, ISO 27001, HIPAA, or GDPR). A report from Headergrade is not a compliance audit.

Service availability

Headergrade is provided as-is, without warranty of any kind. The operator makes no guarantees about uptime, response time, or continued availability of the service. The tool may be modified, suspended, or discontinued at any time without notice.

Limitation of liability

To the maximum extent permitted by applicable law, the operator shall not be liable for any damages arising from the use or inability to use Headergrade, including but not limited to reliance on the tool's output for security decisions.

Billing

Current status: All features of Headergrade are free. No payment is required, no credit card is requested, and no subscription is created when you use the tool.

Pro plan (in development): A paid Pro plan is under development. When it launches, it will be offered as a recurring subscription at $9 per month or $90 per year. The Pro plan is not yet available for purchase.

No payment processor connected: Headergrade does not currently have a payment processor connected. No payment can be taken from any user at this time. Any checkout forms on the site are demonstrations only and do not process real transactions.

Failed payments (future): When subscription billing is active, if a payment fails the subscription will be suspended after a grace period of 7 days. During this period the account holder will be notified and asked to update their payment method. If payment is not resolved within the grace period, access to Pro features will be suspended until a successful payment is processed.

Refund policy (future): When subscription billing is active, refunds for the most recent billing period will be considered on a case-by-case basis. No refund policy is in effect until a payment processor is connected and real payments are accepted.

No automatic renewals today: Because no subscriptions exist, nothing renews automatically. This policy will be updated when the Pro plan launches.

Changes to these terms

These terms may be updated at any time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the tool after a revision constitutes acceptance of the updated terms.

Governing law

No governing law or jurisdiction is specified because no legal entity has been registered. The operator must register an entity and designate a jurisdiction before these terms can be enforceable.

Contact

There is no email address, contact form, or support channel for this tool yet. The operator has not designated a point of contact. If you have a question about these terms, the operator must first register a contact method.