Terms of Use

These Terms of Use regulate the contractual relationship between pwndr («we») and any individual or legal entity («User», «you») who accesses or uses the pwndr platform, available at atalayasec.com.

Access and use of the service implies full and unconditional acceptance of these Terms. If you do not agree with any provision, you must refrain from using the service.

pwndr is a threat intelligence platform that allows users and organizations to check whether credentials associated with their domains have been exposed on public dark web sources, underground forums, cybercriminal Telegram channels, and paste sites.

The service includes:

• Free consultation of the number of exposed credentials associated with a domain.
• Viewing a partial sample of detected credentials (up to 5 records per type).
• Full access to the leaked credentials report, CSV export, and bulk record unlock, via single payment per domain.

pwndr depends on the availability and updates of the external sources it indexes. We do not guarantee that the index is complete or that it captures all existing leaks on the Internet.

The information provided by pwndr is exclusively informational and for early warning purposes. The User is solely responsible for validating and acting on such information. pwndr assumes no responsibility for decisions made based on the data provided.

pwndr does not access, breach, or extract information from any external computer systems. The indexed information comes from publications made by third parties on open or semi-public sources. pwndr's activity is strictly defensive and informational in nature, in accordance with Article 197 et seq. of the Spanish Penal Code and the EU legal framework for cybersecurity.

The full credential access service is offered for a single payment of €9.95 per domain (VAT included when applicable).

• Payment is processed securely through our payment provider. pwndr does not store credit card data.
• Payment grants permanent access to the purchased domain report, within the limits described in section 3.
• Payments are non-refundable once the credential unlock has been processed, unless the service was not provided due to causes attributable to pwndr.
• Prices may vary for future queried domains. The applicable price is the one in effect at the time of purchase.

The User commits to:

• Using the service exclusively for legitimate defensive security purposes, protection of own assets or of organizations for which you are authorized.
• Not using the information obtained for unlawful activities, unauthorized system access, extortion, fraud, or any activity that causes harm to third parties.
• Not attempting to extract, scrape, or bulk download the pwndr index through unauthorized automated means.
• Providing truthful registration data and keeping it up to date.
• Querying only domains for which you have legitimacy (your own or of organizations you represent).
• Notifying immediately of any unauthorized access to your account.

pwndr reserves the right to suspend or cancel accounts that breach these obligations, without prejudice to exercising applicable legal actions.

Access to the service requires creating an account. The User is responsible for maintaining the confidentiality of their login credentials and all activities conducted through their account.

pwndr will not be responsible for damages arising from unauthorized account use when the User has not notified such access within a reasonable period.

The User may request deletion of their account at any time by sending an email to hello@atalayasec.com. Account deletion does not entitle a refund of payments already processed.

All intellectual property rights on the pwndr platform (including design, source code, trademark, indexing methodology, and results presentation) belong to pwndr or its licensors.

Access to the service does not grant the User any intellectual property rights over the platform. The User may download and use the reports obtained exclusively for their internal security purposes, without commercially redistributing or publishing them without authorization.

The processing of User personal data is governed by our Privacy Policy, which is an integral part of these Terms. By accepting these Terms, the User confirms having read and accepted the Privacy Policy.

pwndr makes reasonable efforts to keep the service continuously available, but does not guarantee 100% availability. The service may be temporarily interrupted for maintenance, updates, or circumstances beyond our control.

Reports of already purchased domains are permanently recorded in the User's account and will remain accessible except for account cancellation or service termination, in which case at least 30 days' notice will be provided.

To the maximum extent permitted by applicable law, pwndr shall not be liable for:

• Damages arising from use or inability to use the service.
• Inaccuracy, incompleteness, or obsolescence of indexed credentials.
• Decisions made by the User based on the information provided.
• Loss of business, lost profits, loss of data, or indirect damages.
• Service interruptions caused by third parties, network failures, or force majeure events.

In no event shall pwndr's total liability to the User exceed the amount paid by the User in the twelve months preceding the damaging event.

pwndr may modify these Terms of Use at any time. Material changes will be communicated by email or notice in the service at least 15 days in advance. Continued use of the service after the changes take effect implies acceptance.

These Terms are governed by Spanish law. For the resolution of any dispute arising from these Terms, the parties submit to the Courts and Tribunals of the city of Madrid, with express waiver of any other jurisdiction that might apply.

For consumer users of the European Union, the European Commission provides an online dispute resolution platform accessible at ec.europa.eu/consumers/odr.

For any questions about these Terms, please contact us at hello@atalayasec.com.