How Sound Is
Your Supply Chain’s Cyber Posture?

Score Interpretation

1. Service Description. Threat Monitor provides a free cyber crisis summary for up to three domains per registered email address. The service is operated by APRIO TECHNOLOGIES LIMITED.

2. One Free Request. Each email address is entitled to one free request. Circumvention of this limit is prohibited.

3. Data Sources. Scores reflect externally observable digital artefacts only. Internal security controls, policies, or compensating measures are not assessed.

4. No Warranty. This summary is a decision-support tool. It does not constitute a security audit, rating, financial advice, or legal opinion.

5. Acceptable Use. You may not use this service for unlawful purposes or to target systems you do not own or have authorisation to assess.

6. Governing Law. These terms are governed by the laws of England and Wales.

7. Scope of Assessment. Scores are calculated from externally observable digital signals only (DNS, SSL/TLS, open ports, web technologies, dark web exposure, etc.). The assessment does not access or test any internal systems, and no vulnerability scanning or penetration testing is performed.

8. Not a Rating or Certification. This service does not constitute a credit rating, cyber insurance underwriting assessment, or certification of any kind. Scores should be interpreted as one input among many in a broader risk management framework.

9. Third-Party Domains. You may submit domains belonging to third parties. By doing so, you confirm that the assessment is for legitimate business purposes such as supply chain due diligence or investment evaluation.

10. Intellectual Property. All scoring methodologies, algorithms, and report formats are the intellectual property of APRIO TECHNOLOGIES LIMITED. Redistribution of generated reports beyond your organisation requires prior written consent.

11. Limitation of Liability. To the maximum extent permitted by law, APRIO TECHNOLOGIES LIMITED shall not be liable for any indirect, incidental, or consequential damages arising from the use of this service, including decisions made in reliance on the generated scores.

Data Collected. We collect your email address, submitted domain names, and IP address for rate-limiting purposes.

Use of Data. Your data is used solely to generate and deliver your cyber crisis summary. We do not sell or share your personal data with third parties, except as required to deliver the service (email delivery via Resend).

Retention. Request data is retained for 90 days, after which it is automatically deleted.

Your Rights. You may request deletion of your data at any time by emailing our contact form.

Cookies. We use a single session cookie (tma_session) for OTP verification. No tracking cookies are used.

Lawful Basis. We process your personal data on the basis of legitimate interest (providing the requested cyber risk assessment) and your consent (indicated by agreeing to these terms before submission).

Data Processing. Domain scoring involves querying publicly available data sources (DNS records, certificate transparency logs, web technology fingerprints, and dark web intelligence feeds). No data is collected from the assessed domains’ internal systems.

International Transfers. Your data may be processed in the United Kingdom, the European Economic Area, and the United States (via Cloudflare infrastructure). Transfers outside the UK are subject to appropriate safeguards under UK GDPR.

Sub-processors. We use the following sub-processors: Cloudflare (hosting and CDN), Resend (email delivery), and ACLED (geopolitical data). Each operates under a data processing agreement consistent with UK GDPR requirements.

Controller. APRIO TECHNOLOGIES LIMITED, England & Wales.