Terms of Service

1. Service description

6WAF is an automated tool that audits your AWS account across two dimensions: cost optimization and security configuration. The basic scan is provided free of charge.

2. Nature of the results

Scan results are the output of AUTOMATED checks based on your configuration at scan time. They are NOT a formal audit, a compliance certification, or an in-depth security assessment.

Results do not replace assessment by a certified professional (penetration testing, PCI QSA auditor, SOC2 auditor). False positives or findings requiring additional context for correct interpretation may exist.

3. No guarantee

Any cost savings estimates are projections based on algorithms and industry-average data — NOT a commitment or guarantee. Actual results depend on your specific AWS configuration.

You are solely responsible for any decisions and actions taken based on scan results. Evaluate carefully before changing production infrastructure.

4. AWS access and responsibility

• You grant us access via an IAM Role, and may revoke it at any time by deleting the CloudFormation stack.
• You are fully responsible for your AWS account, including incurred costs and security configuration.
• Any configuration changes (via Scheduler, Cleanup, or manual) are your decision and action. Always run DRY_RUN mode before deleting resources.

5. Limitation of liability

To the maximum extent permitted by law, 6WAF is not liable for any indirect, incidental, or consequential damages (including data loss, service disruption, lost revenue) arising from use of the service.

Our total liability, if any, is limited to the fees you paid for the service in the most recent 12 months (for the free tier, this limit is zero).

6. Consulting is a separate agreement

Consultation sessions and in-depth consulting engagements are governed by a separate agreement between the parties and fall outside the scope of these terms.

7. Acceptable use

• Do not use the service for unlawful purposes or to access another party's AWS account without authorization.
• Do not reverse engineer, interfere with, or disrupt the service infrastructure.

8. Changes to these terms

We may update these terms. The new version takes effect when posted on this page. Continued use of the service means you accept the new terms.

9. Governing law

These terms are governed by the laws of Vietnam.