Terms of use

The PULSHEX service is provided by Dionysis Karamitopoulos (“we”). You enter into a contract with Dionysis Karamitopoulos. Communication takes place exclusively through the form on the home page. By using the service, you accept these terms.

1. The service

PULSHEX is a software-as-a-service (SaaS) cyber incident intelligence tool. It detects publicly reported cybersecurity incidents affecting organisations and infrastructure, verifies and correlates the facts, and produces its own original records and analyses. It provides a subscription feed, an archive with search and filters, and an analysis page for each incident. The analysis distinguishes information from sources from the PULSHEX analytical assessment, which may include recommended measures and a PULSHEX Security Takeaway. The recommendations constitute general resilience measures and do not imply that the organisation did not have them in place. AI can make mistakes. The content is informational in nature and does not constitute a security audit or incident response service.

Current availability. Available now: the archive of documented incidents with categorisation, search, filters and named source references, and access keys. Not yet active: full per-incident analyses (shown only where completed and reviewed), automated monitoring of new incidents, new-incident notifications. The Business Website Exposure Assessment is in development and is not included in the subscription.

Third-party content. PULSHEX does not sell, republish or distribute third-party articles, text, images or other content. Titles, summaries and analyses are written by PULSHEX in its own words, based on facts verified from public sources; the facts themselves are not what is sold. Sources are named and linked to the original publisher. Sources whose terms prohibit such use are excluded. The subscription covers PULSHEX's tools, organisation, analysis and notifications. Findings without sufficient supporting evidence are reviewed again or rejected, without being presented as facts.

We distinguish official confirmation through an announcement by an organisation or competent authority from substantiated journalistic reporting. Republications with a common origin are not considered independent confirmations. Additional sources may update or correct an entry, or lead to its withdrawal.

2. Purchase and access

Access is obtained through one of two annual plans: Basic (65€ per year), which includes the live feed, archive, incident analysis pages and notifications, and Full (95€ per year), which additionally includes an email for every new incident. The plan applies for the entire year of the key’s validity. There is no upgrade or payment of the difference: Full requires a new purchase at the full price, with a new key. Access is linked to the email address you provide. No account is required. Access is personal and non-transferable. Each key is valid for one year from purchase and does not renew automatically; continued access requires a new purchase, which issues a new key.

Taxes and the final amount are displayed before payment is completed. Following a confirmed purchase, a personal key is issued, displayed on screen and sent by email. Access to details is checked by the service, not merely controlled visually on the page.

Your access is recognised through the key, without an account. You do not need to enter it again on the same device and browser; you will only need to re-enter the key if you delete browser data or cookies, use private or incognito browsing, or open the service on another device or browser. In every case, simply paste the key you received again.

At the end of the year, the key is automatically deactivated. A confirmed refund or chargeback revokes access. Device notifications require an active subscription, a compatible browser and user permission; permission is not activated automatically upon purchase.

3. Payments

The order is processed by our reseller Paddle.com, which is the Merchant of Record for all orders and handles support relating to payments and refunds.

The price may change without prior notice for future purchases. The price of your order is the price displayed before payment. For keys already issued, Paddle’s terms and any notification obligations required by law apply.

4. Disclaimer

The Business Website Exposure Assessment is in development and is not currently included in any subscription plan, including Full. No score or index is provided as part of the subscription. When made available, it will concern only a business’s website/domain, never natural persons, and will not be a security guarantee or an examination of internal systems. AI can make mistakes; recommendations must be evaluated before implementation. No active scans are performed.

We make reasonable efforts to ensure accuracy, but do not guarantee that every record is complete or free of errors. Recording an incident does not constitute an allegation of fault on the part of any entity.

Coverage concerns selected accessible sources and is gradually expanded. Listing an organisation does not equate to active monitoring. We do not guarantee universal coverage, detection of every incident, a specific publication time or delivery of every notification. Access restrictions, source delays and technical failures may affect updates.

A service outage, a vulnerability announcement or an unconfirmed claim does not prove a cyber incident. We do not conduct unauthorised scans, bypass access restrictions or collect stolen credentials. Supporting-evidence links lead to third-party publishers, whose content may change or become unavailable. These terms do not limit mandatory consumer rights.

Use of Artificial Intelligence

Analyses produced with the help of artificial intelligence (AI) are purely informational and supportive. PULSHEX does not use AI for profiling, scoring or making decisions about natural persons, and makes no automated decisions with legal or similarly significant effects on individuals. Exposure indices concern only the digital infrastructure of businesses (website/domain). Incident analyses do not assess affected individuals. Results do not replace a professional security assessment.

5. Prohibited use

• Republication or resale of the content without permission.
• Automated data extraction (scraping).
• Sharing the personal access key with third parties.

Also prohibited are any unlawful use, fraud or sending of spam, infringement of intellectual property rights and any interference with the security of the service (malware, penetration testing or scans without permission, circumvention of technical restrictions, reverse engineering).

6. Intellectual property

Dionysis Karamitopoulos retains ownership of the service and all related intellectual property rights, including the software, documentation, analyses, reports and PULSHEX mark. Purchase grants a limited, non-exclusive and non-transferable right of personal use for the duration of the key’s validity. Content from third-party publishers belongs to its respective rights holders.

7. Service availability

We do not guarantee uninterrupted or error-free operation of the service. Interruptions may occur for maintenance, upgrades or reasons beyond our control.

8. Suspension and termination

We may suspend or terminate access by deactivating the key in the event of a material breach of the terms, non-payment or a chargeback, a security risk or fraud, or repeated or serious violations of the usage policy.

9. Payments through Paddle

The ordering process is handled by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides customer service for orders and handles refunds. The Paddle Buyer Terms also apply to payment, billing, taxes and refunds.

10. Applicable law

Greek law applies. The courts of Greece have jurisdiction, subject to mandatory provisions protecting consumers.