Specula

Last updated: 17 September 2026

Terms of Service

These Terms of Service govern your use of the service operated by Krest Yazılım San. Tic. A.Ş. under the Specula brand (the "Service"). By using the Service you agree to these terms.

1. Service description

Specula provides monitoring and automation services including domain monitoring, DNS backup, automated SSL management, uptime checks, port scanning, email security, source code / malware scanning, asset discovery, blocklist checks, and data leak detection. The scope of the Service depends on the plan you select. The Service is a detection and notification tool: it gathers checks that otherwise sit apart into one screen and makes potential risks visible early.

2. How we scan, and its limits

Specula works from the outside, without privileged access. The sources we use are open to everyone on the internet: DNS records, WHOIS records, Certificate Transparency logs, the externally visible port state of your domain, the source code of your published pages, app store listings, public code repositories, and publicly disclosed breach datasets. We use no source obtained through unauthorised access. What we do not do is equally clear: we do not exploit vulnerabilities, we do not try or crack passwords, we do not attempt to bypass authentication or access controls, and we neither inject code into your systems nor place deliberate load on them. A scan goes no further than an ordinary internet user could reach. Cloud storage scanning measures only whether a bucket is publicly reachable; contents are never downloaded or read. Leak scanning reports matches; the contents of leaked passwords are neither stored nor shown. If you connect an account such as Cloudflare to Specula, our access is limited to the scope of the API token you created. You can revoke that token or narrow its scope at any time. Specula is not an attack tool or a penetration testing tool. Its purpose is to gather scattered checks into one screen and make potential risks visible before you run into them.

3. Account responsibility

You are responsible for the security of your account. Keep your password confidential and report suspicious access immediately. We recommend enabling two-factor authentication.

4. Acceptable use

You may use the Service only for domains and systems that you own or have been explicitly authorised to scan. By adding an asset to the console you represent that you hold that authority; legal responsibility for scanning assets you are not authorised for rests with you. You may not use the Service unlawfully, to damage third-party systems, to gain unauthorised access, or to degrade the service quality of other users. Breaching these rules is grounds for suspending or closing the account.

5. Billing

Paid plans are billed in advance for the selected period (monthly/yearly). Prices are shown excluding VAT. Subscriptions renew automatically unless cancelled. Contact us for refund inquiries.

6. Service level

The Business plan includes a 99.9% SLA. Other plans operate on a best-effort basis. Scheduled maintenance windows are announced at least 48 hours in advance.

7. Limitation of liability

The Service is provided "as is". We are not liable for indirect, consequential, or punitive damages. Our total liability is limited to the amount you paid in the 12 months preceding the claim.

8. Termination

You may close your account at any time from the dashboard. We reserve the right to suspend or terminate accounts that breach these terms.

9. Governing law

These terms are governed by the laws of the Republic of Türkiye. Courts and enforcement offices of Istanbul shall have jurisdiction over any disputes.