# Terms of service

DefenceLevel

The terms governing the use of DefenceLevel: free trial, subscription, cancellation, liability. They apply both to private customers (consumers) and to businesses and professionals; where the rules differ, we say so.

Last updated: 23 October 2026

## 1. Who we are

The service is provided by **SCARAFILE Consulting S.R.L.**, Piața Victoriei 4, ap. 9C, 300006 Timișoara, Romania, VAT RO42858116, Trade register J35/2040/2020 ("we"). Contact: info@defencelevel.com.

## 2. The service

DefenceLevel is a cyber threat information service. With the subscription you receive:

- a **daily briefing** by email, every day at 05:00 UTC, with the DEFCON level of the day and a selection of the most relevant vulnerabilities, with impact, exploitation status and recommended actions;
- **immediate alerts** by email when a vulnerability reaches level 1, always, or level 2, unless you chose in My Defence to receive them only for your products; with that choice you also receive the level 3 alerts that concern your products; at levels 4 and 5 there are no alerts: the vulnerabilities are in the briefing;
- access to the **dashboard** with the briefing archive.

The DefenceLevel Index (the public daily level) can be consulted free of charge by anyone. The method by which we calculate the levels is described in the [methodology](https://defencelevel.com/index/methodology) page.

## 3. Nature of the information

The service is **informational**. We select and explain public information on vulnerabilities using a declared and validated method, but:

- we cannot guarantee that every relevant threat will be identified, nor that it will be identified at the moment it becomes relevant to you;
- our recommendations are general and do not take into account your systems, your configurations or your exposure;
- the service does not replace security measures, patch management, professional advice or checking the official guidance of vendors.

Decisions on how and when to act on your systems remain yours.

## 4. Account and sign-in

A valid email address is required to use the service. Sign-in works through personal links sent by email, without passwords: you are responsible for the security of the mailbox you use and must not forward sign-in links to others. An account is personal; several people in the same organisation need several subscriptions.

The service is not intended for people under 18.

## 5. Free trial

Confirming your email address starts a **7-day free trial**, with no payment card. There is one trial per email address. At the end of the trial, if you have not added a payment method, access to the briefing and alerts stops without any charge.

## 6. Subscription and payments

To continue after the trial, add a payment method in the dashboard. The subscription costs **€49 per month, VAT included** where due, unless a different price is shown at the time of purchase. It renews automatically every month, charged in advance to the registered payment method.

Payments are handled by Stripe. For each payment we send you the invoice by email; if you buy for a company, enter the company name and VAT number at checkout. If a payment fails, Stripe retries it over the following days and we let you know; in the meantime the service stays active. If the payment still fails after the retries, the subscription ends.

We may change the price for future periods, with at least 30 days' notice by email. If you do not accept the new price, you can cancel before it applies.

## 7. Cancellation

You can cancel at any time in the dashboard. Cancellation takes effect at the end of the monthly period already paid: until then the service stays active, and after that we charge you nothing more. Except as provided in section 8, we do not refund unused parts of a month.

You can also delete your account from the dashboard: in that case the subscription or the trial ends immediately, with no further charges. Except as provided in section 8, days already paid for are not refunded.

## 8. Consumers' right of withdrawal

If you are a consumer resident in the European Union, you have the right to withdraw from the subscription contract within **14 days** of the first payment, without giving any reason. To exercise it, write to info@defencelevel.com from your account's address, or use the model form below (provided by Directive 2011/83/EU). We refund the first payment in full within 14 days of receiving the request, using the same payment method.

**Model withdrawal form**\
(complete and return this form only if you wish to withdraw from the contract)

— To: SCARAFILE Consulting S.R.L., Piața Victoriei 4, ap. 9C, 300006 Timișoara, Romania, info@defencelevel.com\
— I/We (*) hereby give notice that I/We (*) withdraw from my/our (*) contract for the provision of the following service: DefenceLevel subscription\
— Ordered on (*) / received on (*)\
— Name of consumer(s)\
— Address of consumer(s)\
— Signature of consumer(s) (only if this form is notified on paper)\
— Date\
(*) Delete as appropriate.

The right of withdrawal does not apply to customers who purchase for professional or business purposes.

## 9. Permitted use

You may use the briefing and alerts for your own needs and those of your organisation, including sharing them internally with colleagues who look after the systems. You may not republish, resell or distribute them externally, in whole or in part, without our written consent. You may not attempt to access our systems or other users' data without authorisation, or to circumvent the limits of the service; if you find a vulnerability, follow the [Security reports](https://defencelevel.com/security) page.

The public data of the DefenceLevel Index (current level, daily levels, badge and the interfaces described in [Embed the Index](https://defencelevel.com/index/api)) are, by contrast, freely reusable, including for commercial purposes, under the CC BY 4.0 licence, with attribution to “DefenceLevel Index (defencelevel.com)” and a link. They are provided as they are, with no guarantee of availability; in case of excessive or abusive use we may limit or block automated access.

## 10. Availability of the service

We do our best to keep the service running without interruption, but we cannot guarantee it: it may depend on external providers, on the sources we read, on maintenance or on causes beyond our control. The system checks every day that the briefing has been sent and alerts us if something is not working, so that we can step in and recover as soon as possible.

## 11. Liability

For customers who purchase for professional or business purposes, and to the extent permitted by law, our total liability for any damage related to the service is limited to the amount paid in the 12 months preceding the event, and is excluded for indirect damage, loss of profits or data, and for damage resulting from cyber attacks that the service did not report or reported late.

For consumers, the protections provided by law remain unaffected. In no case do we limit our liability for wilful misconduct, gross negligence, or where the law does not allow it.

As a consumer you also benefit from the legal guarantee of conformity for digital services (Directive (EU) 2019/770 and the national laws implementing it): if the service does not conform to the contract, you can ask us to bring it into conformity; if that is not possible within a reasonable time, you are entitled to a proportionate price reduction or to terminate the contract.

## 12. Changes to the terms

We may update these terms, for example if the service changes or the law requires it. Significant changes are notified to you by email at least 30 days before they apply; if you do not accept them, you can cancel before that date.

## 13. Governing law and disputes

These terms are governed by Romanian law. For customers who purchase for professional or business purposes, the court of Timișoara has exclusive jurisdiction. For consumers, the mandatory protective rules of their country of residence continue to apply, and consumers may bring proceedings before the courts of their place of residence.

Before going to court, write to us at info@defencelevel.com: we always try to resolve any problem directly. Consumers can also use alternative dispute resolution: the details are in the [Legal notice](https://defencelevel.com/legal#disputes).

These terms are published in English, German, Spanish, French and Italian; in case of discrepancies between the versions, the English version prevails.

---

Web page: https://defencelevel.com/terms
