General Terms and Conditions (GTC) for CheckFix

1. Scope and provider These General Terms and Conditions (GTC) apply to all products of the CheckFix family: CheckFix (external security assessment), CheckFix Risk Manager and the AI Pentest. The provider is secinto GmbH, Poststraße 3, 8530 Deutschlandsberg, Austria, company register number FN 476823k, Regional Court for Civil Matters Graz (hereinafter “secinto”). By registering for or using a service, you agree to these GTC.

• Our services are offered exclusively to businesses.

2. Description of services CheckFix analyses publicly accessible servers and web services for security vulnerabilities and rates the security status on a scale from A to F.

• Users receive a free Security-Check with a rating.
• From a rating of C onwards, action is recommended.
• The detailed ToDo CheckList with security issues and suggested fixes is available to paying customers only.
• CheckFix (Basic & Premium) performs automated external security tests based on the domain(s) provided. We do not intrude into the systems. We provide ToDos and all technical details so that the vulnerabilities can be closed by the technicians in charge (system administrators, IT service providers, internal IT staff).
• Security consulting or closing the vulnerabilities is NOT included. Security vulnerabilities can only be closed by the technicians in charge. A security consultation for the technicians in charge can be booked for € 150. It takes place online via Teams and lasts a maximum of 1 hour.
• CheckFix Risk Manager assesses the external security posture of the suppliers and partners named by the customer and combines this assessment with compliance questionnaires.
• The AI Pentest is an add-on to CheckFix. It requires a completed CheckFix, is booked in packages of test runs (“Runs”) and runs on secinto’s own infrastructure. The system is continuously monitored by secinto pentesters.
• For the AI Pentest, one re-check is included per purchased Run and can be requested within 4 weeks of the respective Run.
• Pentest debriefings or consulting by secinto GmbH are not included automatically but can be booked in addition.

3. Conditions of use

• CheckFix Risk Manager uses the same system as CheckFix for the external security assessment. Only publicly accessible systems of the suppliers and partners named by the customer are analysed, without intruding into these systems. With PartnerCheck, the customer sees the ratings; with PartnerFix, the customer sees all results, just as with their own CheckFix.
• The AI Pentest is carried out only on systems that the customer has approved as test scope in advance. By approving the scope, the customer confirms that they are authorised to commission the test for these systems.
• Use for illegal or harmful purposes is prohibited.
• CheckFix collects and stores data solely for the purpose of security analysis.

4. Disclaimer

• secinto does not guarantee complete security or protection against attacks.
• The analysis results are used at your own risk.
• secinto is not liable for damage resulting from improper implementation of recommendations.

5. Fees and payment terms

• The Security-Check is free of charge.
• The CheckFix packages with ToDo CheckList and all technical details, CheckFix Risk Manager and the AI Pentest are subject to a fee.
• Prices and billing terms are stated transparently before the contract is concluded.
• CheckFix and CheckFix Risk Manager are booked as an annual subscription. The scope of services, such as the number of CheckFix runs per year, depends on the selected package.
• The AI Pentest is purchased as a one-off package of Runs. The Runs can be used without time limit, including after the CheckFix subscription has ended. The package does not expire and is not renewed automatically.

6. Support

• Technical support by email and phone is available during business hours for the entire term of the contract.

7. Data protection

• All data collected is used solely for security analysis.
• Data is processed on servers in the European Union.
• CheckFix does not require or store passwords or credentials for your systems.
• Contact details collected during the Security-Check may be used to send information on cybersecurity topics, product updates and offers from CheckFix. You can object to this at any time with one click.
• Detailed information can be found in the privacy policy.

8. Term and termination

• A free Security-Check does not require a contract.
• CheckFix and CheckFix Risk Manager are booked annually.
• The subscriptions for CheckFix and CheckFix Risk Manager can be cancelled up to one month before the start of the new subscription year.
• The AI Pentest is not a subscription and does not need to be cancelled.

9. Final provisions

• secinto reserves the right to amend these GTC at any time.
• These GTC are governed exclusively by Austrian law, excluding its conflict-of-law rules and the UN Convention on Contracts for the International Sale of Goods (CISG).
• The exclusive place of jurisdiction for all disputes arising from or in connection with this contract is the competent court in Graz, Austria.
• Should any provision of these GTC be invalid, the remaining provisions shall remain unaffected.
• In case of discrepancies between the German and the English version, the German version prevails.

Last updated: October 2026