PHP SITE AUDIT · TERMS VERSION 2026-10-23-v2 · EFFECTIVE OCTOBER 23, 2026

Service terms

PHP Site Audit is a service provided by Synorb Inc. Synorb Inc. is the seller shown at checkout. Questions: reports@phpsiteaudit.com.

1. The service and price

The one-time price is $19.99 USD for one automated external website assessment and a private developer report for the domain shown in your scope. It is not a subscription. The service does not install fixes, provide ongoing monitoring, or include additional domains. Payment is processed by Stripe; checkout displays the seller and payment details before you confirm.

2. Your authorization

You must own the website or have the owner's permission to request the checks. By checking the separate authorization box, you confirm that you have that authority. Do not submit a third-party domain without permission. We may decline a domain or stop a check that is unsafe, unavailable, outside scope, or unsuitable for this service.

3. Scope and material limitations

The assessment is an automated, limited, point-in-time review of publicly available HTTP and HTTPS responses for the domain shown at checkout. It starts from the supplied website and uses public same-host links plus robots.txt or same-host sitemap files as discovery hints. It attempts up to 100 unique public same-host HTML pages with a shared limit of 140 HTTP requests, including redirects and discovery requests, and a 90-second scan budget. The report lists the paths and checks actually completed; it may cover fewer pages because of site structure, blocked or unavailable responses, or those limits.

It does not use exploit payloads, attempt login or password guessing, submit forms, modify your website, inspect private source code or server files, verify an installed PHP runtime or its patch state, fix issues, or monitor changes after delivery. Public responses can be incomplete or change by path, configuration, user, region, or time. Checks can produce false positives or false negatives. Version banners do not establish the actual runtime or vendor backports. A score summarizes only the applicable completed checks in this limited scope; it is not a security rating of the whole website. No report, score, or absence of findings certifies security, compliance, or absence of compromise.

4. Your review of recommendations

Recommendations are a starting point for you and your developer, not instructions tailored to every hosting environment. Independently confirm a finding and its relevance before making a change. Your developer or hosting provider should assess changes for your system, test them in a suitable staging environment where available, and keep a current backup before applying changes. Synorb Inc. does not make changes to your website.

5. Payment, access, and delivery

The paid assessment is queued only after Stripe confirms payment. We send the PDF report and a private report link to the email address you provide. Anyone with that link can view the online report. Our target is to complete a report within five minutes after payment, but that is a target, not a guarantee; availability, queue conditions, and the target website can affect delivery. Online report access expires after 30 days.

6. Refund policy

All sales are final once the PDF report has been delivered. We do not offer refunds after PDF delivery, except where required by applicable law. This includes a change of mind, findings you already knew about, or a report with no failed checks. The purchase is for the described assessment and report; it does not promise that a vulnerability will be found.

If the service cannot complete the purchased assessment, we initiate a refund to the original payment method. Your payment provider may take additional time to post it. If you cannot access your delivered report, contact us for delivery assistance. Contact reports@phpsiteaudit.com with your checkout reference if the report is unavailable, a payment was duplicated, or a refund does not appear. Do not email card details. Nothing in this policy limits any refund, cancellation, or other consumer right that applicable law gives you.

7. Service availability and liability

To the extent permitted by applicable law, the service and report are provided “as is” and “as available,” without a promise that every check will complete or identify every issue. To the extent permitted by law, Synorb Inc. is not liable for indirect, incidental, special, consequential, exemplary, or punitive loss, including lost profits, lost business, or business interruption, arising from this limited assessment. To the extent permitted by law, Synorb Inc.'s total liability arising from this assessment is capped at the amount you paid for it.

Nothing in these terms excludes or limits liability or a consumer right that cannot lawfully be excluded or limited, including liability for fraud or willful misconduct where the law does not permit that limitation. These terms do not waive non-waivable statutory rights.

8. No third-party endorsement

References to PHP, government agencies, hosting providers, and publishers provide context and attribution only. Those parties do not sponsor, certify, or endorse this service.