The deal, in plain language
Last updated 9 September 2026.
What the service is
TTLZero reads public and third-party data about domains and reports what it finds. It is passive monitoring. It is not a penetration test, an audit, or a guarantee that a domain is secure. A high score means the public record looks good, not that nothing can go wrong.
Acceptable use
Use the service to understand and improve the security of domains you own, manage, or are evaluating in good faith. Do not use it to target, harass, or attack anyone, to build or sell lists of exposed organisations, or to overload the service or the public data sources it relies on. We may suspend accounts that do. Scheduled monitoring on paid plans runs only for domains you have shown you control, by adding a record we give you.
What we fix for you
On Business and Partner, we manage four email security records for each domain you set up: your DMARC policy, your SPF sender list, your MTA-STS policy ID, and your TLS reporting record. You point those records at TTLZero once, and we publish their contents from then on. We only move your DMARC policy to a stricter setting when you choose it. We never log in to your DNS provider, registrar, or mail provider, and we do not change any other record. Every other finding comes with instructions for you to make the change yourself. When you turn managed records on, we start from your current SPF and DMARC records; anything we cannot carry over is listed for you before you change your DNS. If you cancel or remove a domain, we leave its DMARC, SPF and TLS reporting records published as they were but stop updating them, and hosted MTA-STS stops on the free plan. For a domain still on your account, its page in your dashboard lists the values to copy into your own DNS; a removed domain shows them again when you add it back.
Accounts and billing
Paid plans bill monthly through Stripe and renew until cancelled. Cancel any time from your account; access continues to the end of the paid period. Plan limits (domains, scan frequency, which checks run) are enforced by the current plan.
Accuracy
Findings come from public DNS, certificate logs, and third-party providers. Those sources can be stale, incomplete, or temporarily unavailable, and we say so in the report when a check could not run. We work hard to be accurate but we cannot promise it, and you should verify anything before acting on it in a way that is hard to undo.
Liability
The service is provided as is. To the extent the law allows, our liability for anything arising from it is limited to the fees you paid us in the twelve months before the claim.
Changes
We may update these terms. Material changes are announced by email to account holders before they take effect.
Contact
legal@ttlzero.io. TTLZero is operated by Opshero Technologies LLC, an Illinois limited liability company, and these terms are governed by the laws of the State of Illinois.