Terms of Service

These Terms of Service (the "Terms") govern access to and use of Periphery, the search console at console.periphery.exposed, the API at api.periphery.exposed and the MCP server at mcp.periphery.exposed (the "Service"), operated by GG Labs, a SASU registered in France under number 131 679 789, with its registered office at 138 avenue Victor Hugo, 75016 Paris ("we", "us"). By creating an account or using the Service you agree to these Terms. If you do not agree, do not use the Service.

1. What the Service is

Periphery indexes web applications that are publicly reachable on hosting and platform providers, records what those applications expose to any visitor (page titles, text, screenshots, HTTP status, favicons, email addresses, and strings that match the shape of credentials or API keys), and lets you search that index. Everything in the index was retrieved from publicly accessible URLs without authentication, bypassing of access controls, or exploitation of any vulnerability. Periphery does not host, run, or control the indexed applications.

2. Accounts

You log in with a Google account or an emailed magic link. You are responsible for everything done under your account, including by the AI assistants and other apps you connect to it, and for keeping your API keys secret. Tell us at contact@periphery.exposed immediately if you suspect unauthorised use. You must be at least 18 years old and able to enter into a binding contract to use the Service.

3. Plans, quotas and billing

The Service is offered in tiers described on the pricing page. Each tier carries a monthly search quota and, on some tiers, API and MCP access and the credentials filter. Quotas reset monthly and unused searches do not carry over. Plus is billed in advance, monthly or yearly, through our payment provider, Stripe, and renews for the same period until cancelled. The first Plus subscription of an account starts with a 14-day free trial, one per account; a payment method is required to start it. Unless you cancel before the trial ends, the first period is charged when it ends; a reminder is emailed 7 days before. Cancelling during the trial costs nothing. Yearly subscribers are emailed a reminder before each renewal. Switching between monthly and yearly billing is prorated. You can cancel at any time from your account page; the cancellation takes effect at the end of the trial or of the period already paid. Prices are shown excluding applicable taxes, which are added at checkout, and may change with 30 days' notice by email. Fees already paid are not refundable except where the law requires it.

4. Acceptable use

The Service exists so that security teams, researchers, and platform operators can see what is exposed on the public web. You may use it only for lawful purposes. In particular you must not:

• use any credential, token, key, or secret surfaced by the Service to access, modify, or disrupt a system, account, or data you are not authorised to access;
• use information from the Service to harass, defraud, impersonate, or harm any person or organisation, or to send unsolicited communications;
• resell, sublicense, or redistribute the index or information obtained from the Service, in whole or in part, unless we have agreed otherwise in writing, or build a competing dataset from it;
• scrape or bulk-export the Service outside the documented API and MCP server and your plan's quota, share API keys, or circumvent rate limits, quotas, or access controls;
• attempt to identify natural persons from indexed data beyond what is necessary for a legitimate security notification.

Legitimate security research means, at minimum, that you either own or are authorised to test the system concerned, or that you limit yourself to notifying its owner of the exposure. We may suspend or terminate accounts that breach this section without notice and without refund, and we cooperate with lawful requests from authorities.

5. Removal requests

If you operate an application that appears in the index and want it removed, email contact@periphery.exposed from an address at the domain concerned, or otherwise demonstrate control of the host, and we will de-index it within 7 days and exclude it from future crawls. We also honour removal for indexed email addresses on request from their holder. Fixing the exposure at the source is, of course, the actual remedy.

6. Intellectual property

The Service, its software, design, and the structure of the index are ours or our licensors'. Indexed content belongs to whoever published it; we display excerpts, metadata, and screenshots for the purpose of identifying exposed applications. You receive a limited, revocable, non-exclusive, non-transferable right to use the Service according to your plan.

7. No warranty

The index reflects what a crawler observed at a point in time. Applications change, go offline, or are misclassified, and credential detections are heuristic and may be false positives or expired. The Service is provided "as is" and "as available" without warranties of any kind, express or implied, including accuracy, completeness, fitness for a particular purpose, or uninterrupted availability.

8. Liability

To the extent permitted by law, we are not liable for indirect, consequential, or special damages, loss of profits, or loss of data arising from the Service, and our total liability for any claim is limited to the fees you paid us in the 12 months before the event giving rise to the claim. Nothing in these Terms excludes liability that cannot be excluded under French law, including for gross negligence, wilful misconduct, or personal injury. You indemnify us against claims arising from your breach of section 4.

9. Termination

You may stop using the Service and ask us to delete your account at any time by emailing contact@periphery.exposed. We may suspend or terminate access for breach of these Terms, for non-payment, or if we discontinue the Service, in which case we will give paying customers reasonable notice where practicable. Sections 4, 6, 7, 8, and 10 survive termination.

10. Governing law and disputes

These Terms are governed by French law. Any dispute that cannot be resolved amicably will be submitted to the competent courts of the jurisdiction of our registered office, without prejudice to mandatory consumer protection rules that may apply to you. If you are a consumer in the European Union you may also use the European Commission's online dispute resolution platform.

11. Changes to these Terms

We may update these Terms. Material changes are announced by email or on the Service at least 15 days before they take effect. Continued use after that date constitutes acceptance. The current version is always available at this address.

Mentions légales

Questions about these Terms: contact@periphery.exposed. Our Privacy Policy explains how we handle personal data.