security-txt.eu

Terms and conditions for security.txt monitoring

WDM Webdesign München GmbH, as of 10 October 2026. This English version is a translation; the German version prevails.

1. Scope and contracting party

These terms apply to the paid monitoring of security.txt files ("monitoring") offered by WDM Webdesign München GmbH, Deisenhofener Str. 45, 81539 München, Germany ("we") via security-txt.de and security-txt.eu. The free tools generator and checker are not part of this contract. Monitoring is offered exclusively to businesses (entrepreneurs within the meaning of § 14 of the German Civil Code), legal entities under public law and special funds under public law. Deviating terms of the customer do not apply.

2. Conclusion of contract

By submitting the order and paying via our payment service provider Stripe, the customer makes an offer. The contract is concluded with our confirmation by e-mail. As long as online payment is not enabled, an order is a non-binding request; the contract is then concluded only with our order confirmation.

3. Service

  1. Once a day we automatically fetch the file at https://domain/.well-known/security.txt for every domain stated by the customer and check it according to the rules of the free checker, under RFC 9116 or under BSI TR-03183-3 in the version described on the website at the time.
  2. We notify the customer by e-mail at the address given of new errors or warnings, when all findings have been fixed, before the expiry date of the file (30, 14, 7 and 1 day before) and before a key linked in the file expires (30, 14 and 7 days before), and every three months with a check report.
  3. Monitoring checks only what can be retrieved technically. It does not check whether mailboxes are read, whether information is correct in substance or whether legal obligations are met. It is neither legal advice nor a security assessment of the customer's website or products.
  4. We strive for uninterrupted operation but do not owe any particular availability. If a check fails for technical reasons, we repeat it in the next run. We may adapt the check rules to changes in the underlying standards.

4. Customer obligations

The customer states only domains it owns or is authorised to have monitored. It keeps the e-mail address for reports up to date and ensures that our messages reach it. It may not deliberately obstruct our requests by technical measures; if it does, the checks are deemed performed.

5. Price and payment

Monitoring costs EUR 60 per domain per year plus statutory VAT, payable in advance for each contract year. Billing and collection are handled by Stripe. If the customer changes the number of domains during the term, the price is adjusted and billed pro rata. If the customer is in default of payment, we may suspend monitoring after giving notice.

6. Term and cancellation

The contract runs for one year from conclusion and renews for a further year each time unless cancelled before expiry. The customer may cancel at any time with effect from the end of the current contract year, in particular via the Stripe customer portal reachable through the management link. We may cancel with one month's notice to the end of the contract year. The right to terminate for good cause remains unaffected.

7. Liability

We are liable without limitation for intent and gross negligence, for injury to life, body or health and under the German Product Liability Act. In cases of slight negligence we are liable only for breach of an essential contractual obligation, whose fulfilment makes the proper performance of the contract possible in the first place and on whose observance the customer may regularly rely, and limited to the typical, foreseeable damage, at most to the price paid for the current contract year. Liability is otherwise excluded.

8. Data protection

How we process personal data is described in the privacy policy.

9. Changes to these terms

We may change these terms with effect for the future. We announce changes by e-mail at least six weeks before they take effect. If the customer does not object before they take effect, the changes are deemed accepted; we point out this consequence in the notice. If the customer objects, either party may cancel with effect from the date the changes take effect. Price changes apply from the next contract year only.

10. Final provisions

The law of the Federal Republic of Germany applies, excluding the UN Convention on Contracts for the International Sale of Goods. Place of jurisdiction for all disputes is Munich, provided the customer is a merchant, a legal entity under public law or a special fund under public law. Should a provision be invalid, the remainder of the contract remains valid.