Terms of use
Last updated: 15 October 2026
Only scan apps you own
You may only scan websites and apps that you own or have written permission to test. Deep and logged-in scans require ownership verification. Using NordKiln against systems you are not authorized to test is prohibited, and we will block such use.
Test accounts
Only provide test accounts you created for testing. Never provide real users' credentials.
Read-only checks
Our probes are designed to be read-only and low-volume. Still, you use the service at your own risk, and we recommend scanning a staging environment where possible.
No guarantee
A scan reduces risk but cannot prove an app is fully secure. A "verified safe to launch" badge covers only the checks listed in the report, at the time of the scan.