Ultorn is a defensive security scanning and findings-management platform. Scanning is limited to targets you explicitly add as a scan scope for a client you control or are contractually authorized to test. You are responsible for obtaining authorization before adding a target.
The platform finds and reports exposures only: port/service enumeration, template-based vulnerability matching, and HTTP/banner evidence capture. It performs no exploitation, no lateral movement, and no data exfiltration beyond that evidence.
Critical and high-severity findings are flagged for named analyst review inside the product. Remediation decisions and any resulting action against a client’s environment remain the responsibility of the reviewing analyst and the client relationship, not the platform.
You are responsible for the credentials and API keys issued under your account. Admins can revoke access at any time from the Admin panel. Revoked API keys and disabled users lose access immediately.
This is an MVP self-hosted platform provided as-is, without uptime guarantees, run on infrastructure you control.
This is a plain-language description of how the current Ultorn codebase behaves. It is not a substitute for a lawyer-drafted service agreement or master services agreement with your clients, and should be reviewed before commercial use.