Terms of Use & Security Services Agreement

Effective date: 27 August 2026.
Last updated: 27 August 2026.

1. Operator

Omega Security Pro is operated by Alpha & Omega Limited, New Zealand. References to "Alpha & Omega Limited", "we", "us" and "our" mean the operator of Omega Security Pro. "You", "your" and "user" mean the individual or legal entity using the Service.

2. Acceptance and Electronic Agreement

By accessing, launching, installing or using the Service, you indicate your acceptance of these Terms electronically. Electronic acceptance, records and communications may have legal effect under applicable law, including New Zealand law governing electronic transactions.

If you use Omega Security Pro on behalf of a business or other organisation, you represent that you have authority to bind that organisation to these Terms.

3. Eligibility and Legal Capacity

You may use the Service only if you have legal capacity to enter this Agreement or otherwise have the valid consent or authority required by applicable law.

You must not use Omega Security Pro where use would violate applicable law, sanctions, court orders, contractual restrictions or another binding legal obligation.

4. Nature of the Service

Omega Security Pro provides browser-safe diagnostic and security utilities. Depending on browser, device and network capability, functions include password strength analysis and generation, optional k-anonymity password-breach checks, encrypted local vault tools, phishing and suspicious-URL analysis, user-selected file hashing and heuristics, browser/privacy diagnostics, public website security-header audits, public email-domain SPF/DMARC/DKIM audits, browser/device performance diagnostics, application-safety guidance, security scores and locally stored reports.

5. Local-First Architecture

Many Omega Security Pro functions are designed to execute inside your browser rather than by transmitting sensitive contents to Alpha & Omega Limited. Local processing is an architectural privacy and security feature, but it does not eliminate all risks associated with a compromised browser, malicious extension, infected operating system, physical device compromise or insecure local storage.

6. Limited Licence to Use the Service

Subject to these Terms, Alpha & Omega Limited grants you a limited, revocable, non-exclusive, non-transferable and non-sublicensable licence to access and use the publicly provided Omega Security Pro Service for lawful personal, professional and legitimate commercial defensive-security purposes.

This licence permits use of the Service. It does not transfer ownership of the software, source code, website, interfaces, branding, architecture, documentation or other intellectual property.

7. Free Service

The core Omega Security Pro Service is currently offered free of charge. Free availability does not create a perpetual right to continued availability, require Alpha & Omega Limited to maintain every current feature, or transfer any intellectual-property right to users.

8. No Registration Requirement for Core Functions

The current core application does not require a conventional Omega Security Pro account. The absence of an account does not alter your responsibilities under these Terms.

9. Password Analysis

Password-strength analysis is designed to operate locally. Any strength score, estimate or warning is diagnostic only and does not establish that a password is unbreakable, uncompromised or suitable for every threat model.

10. Password Generation

Generated passwords are intended to assist users in creating stronger credentials. No generated password is guaranteed to be immune from theft, disclosure, compromise, implementation flaws, endpoint compromise or attack. You remain responsible for secure storage and appropriate use of generated credentials.

11. Optional Password Breach Check

When you deliberately use the optional breach-check function, Omega Security Pro may hash the password locally and transmit only a limited SHA-1 hash prefix to a compatible breach-range service using a k-anonymity model. Third-party service availability, databases, responses and policies are outside Alpha & Omega Limited's complete control.

A "not found" result does not prove that a password is secure or has never been compromised. A positive result does not establish the circumstances in which the password was exposed.

12. Encrypted Local Vault

The current vault is designed to encrypt vault content locally using AES-GCM and derive its encryption key from the master password using PBKDF2-SHA256. Encrypted vault data may be stored in browser local storage.

Encryption is a security control, not an absolute guarantee. Security depends in part on the strength of the master password, device security, browser security, software integrity, local access controls and the absence of endpoint compromise.

13. Master Password and No Guaranteed Recovery

The application is designed not to store the master password as a recoverable credential. Alpha & Omega Limited does not guarantee that a forgotten master password, lost local encryption information or inaccessible encrypted vault can be recovered.

You accept the risk that loss of the information required to decrypt the vault may result in permanent loss of access to stored vault data.

14. Vault Export, Import and Backups

If you export, import, copy, move, back up or share vault-related information, you are responsible for securing those files and destinations. Do not place sensitive exports in insecure storage or transmit them through untrusted channels.

15. Phishing, URL and Message Analysis

Omega Security Pro can identify structural or textual indicators associated with suspicious URLs and messages. Such analysis is heuristic and may produce false positives, false negatives or incomplete conclusions.

You must not interpret a low-risk result as a guarantee that a link, website, message or sender is trustworthy.

16. User-Selected File Scanner

Omega Security Pro's ordinary file inspection requires a user-selected file and may calculate SHA-256 hashes and inspect extensions, double extensions, executable indicators or other browser-safe characteristics.

It is not a full native malware-analysis engine and does not inspect every file on the device.

17. No Guarantee That a File Is Safe

A file receiving no warning may still be malicious, compromised, exploitable or unsafe. A file receiving a warning may be legitimate. You are solely responsible for decisions to open, execute, upload, retain, delete, distribute or otherwise use files.

18. Website Security Audits

The website-security function performs limited defensive inspection of public Internet websites, including HTTPS and public response/security headers. The current server-side audit is intentionally limited to HTTP/HTTPS public Internet hosts and is not a substitute for penetration testing, authenticated application testing, source-code review or a full professional security assessment.

19. Email-Domain Security Audits

Email-domain tools may inspect public DNS records such as SPF, DMARC, DKIM-related records and MX information. DNS results may be incomplete, cached, transient, misconfigured or dependent on selectors and external DNS infrastructure.

Scores and recommendations are informational and do not guarantee email deliverability, anti-spoofing effectiveness or protection against phishing.

20. Privacy and Permission Diagnostics

Browser privacy checks are limited to information and permission states the current browser exposes through permitted APIs. Omega Security Pro does not gain unrestricted device privileges merely because it is installed as a PWA.

21. Performance Diagnostics

Performance functions may measure browser/device capabilities, rendering, computation, browser storage and application/network timing accessible to web code. Results vary with browser state, device conditions, background activity, power management, network conditions and implementation differences.

22. Security Scores and Reports

Scores, labels, findings and reports are simplified diagnostic aids based on available browser-observable information. They are not certifications, warranties, professional opinions, compliance attestations or guarantees of security.

23. No Antivirus, EDR or Managed Security Service

Omega Security Pro is not native antivirus, endpoint detection and response, managed detection and response, a security operations centre, firewall replacement, intrusion-prevention system, continuous network monitor or enterprise threat-hunting service.

24. No Professional Cybersecurity Advice

Omega Security Pro provides general technical tools and informational diagnostics. It does not provide legal advice, regulated professional advice, certified penetration-testing services, incident-response services, forensic conclusions or a professional assurance engagement. Obtain qualified assistance when the risk or circumstances require it.

25. User Responsibility for Security

You remain responsible for your devices, accounts, backups, credentials, software updates, native antivirus/security tools, authentication methods, network protections, security policies, production systems and decisions made in reliance on Omega Security Pro results.

26. Authorised and Defensive Use Only

Security functionality must be used only for lawful defensive purposes and only against systems, domains, websites, accounts, networks, files or information that you own, control, are authorised to assess, or are otherwise legally permitted to inspect.

27. No Unauthorised Access or Testing

You must not use Omega Security Pro to obtain or attempt unauthorised access to a computer system, account, network, service, data or device. You must not use the Service to exceed granted authorisation, evade technical controls or conduct testing where you lack permission.

28. Public Information Does Not Automatically Mean Authorised Attack Testing

The fact that a website, hostname or DNS record is publicly reachable does not grant permission to exploit, disrupt, overload, bypass controls, authenticate without permission or conduct intrusive testing against the system.

29. Prohibited Security Uses

You must not use Omega Security Pro to:

• gain unauthorised access to systems or data;
• steal credentials, secrets or personal information;
• deploy malware, ransomware or destructive software;
• conduct denial-of-service or resource-exhaustion attacks;
• evade authentication or security controls;
• facilitate phishing, fraud, impersonation or credential theft;
• probe private/internal infrastructure without authority;
• interfere with another person's systems or services;
• use findings to exploit a vulnerability without permission;
• violate computer-misuse, cybercrime or other applicable law.

30. New Zealand Computer Misuse Law

Users must comply with New Zealand law where applicable, including provisions of the Crimes Act 1961 concerning dishonest or unauthorised access to computer systems and damaging or interfering with computer systems, together with other applicable legislation.

31. Responsibility for Submitted URLs and Domains

You are responsible for the URLs, hostnames and domains submitted to online audit functions. Do not submit credentials, API keys, access tokens, private secrets or sensitive query-string information as part of a URL.

32. Third-Party Services

Some optional functionality depends upon third-party or external infrastructure, including breach-range services, DNS infrastructure, public websites, browsers, operating systems, hosting systems and Internet networks.

Alpha & Omega Limited is not responsible for the accuracy, availability, security, content, policies or performance of independent third-party services.

33. Third-Party Terms and Policies

Your use of independent third-party services may be governed by their own terms, policies and legal requirements. You are responsible for complying with terms that apply to your interaction with those services.

34. Browser and Device Compatibility

WebCrypto, WebAuthn, permissions, storage, file APIs, service workers, PWA installation, downloads, performance APIs and other capabilities vary by browser, device and operating system. We do not guarantee that all functionality is available or identical everywhere.

35. Progressive Web App

Omega Security Pro may be installed as a PWA on supported browsers and devices. PWA installation depends on third-party browser and operating-system functionality. Installation does not confer additional ownership rights in the Service.

36. Offline Capability

The service worker may cache the application shell and static resources. Offline operation depends on successful installation, cached resources, browser storage and device behaviour. Online functions such as breach-range lookups, public website audits and DNS checks cannot necessarily operate without network connectivity.

37. Local Storage and Data Loss

Browser local storage, caches and application data may be deleted or evicted by the user, browser, operating system, storage policies, private-browsing behaviour, device reset or software failure. You are responsible for maintaining any backups you consider necessary.

38. PWA Installation Metrics

Omega Security Pro may send aggregate installation-related event signals to its own counter endpoint. This operational feature does not alter the diagnostic nature of the Service. Privacy handling is described in the Privacy Policy.

39. Privacy

Our handling of information is governed by the Omega Security Pro Privacy Policy. The Privacy Policy is incorporated into these Terms to the extent applicable to use of the Service.

40. Intellectual Property Ownership

Omega Security Pro and its original software, source code, executable code, application logic, HTML, CSS, user interface, workflows, architecture, documentation, graphics, branding, logos, text, compilations and other proprietary material are owned by or licensed to Alpha & Omega Limited, subject to identified third-party and open-source components.

41. No Transfer of Software Ownership

Nothing in these Terms sells, assigns or transfers Omega Security Pro or its intellectual property to you. You receive only the limited right to use the publicly provided Service in accordance with this Agreement.

42. Restrictions on Copying and Repackaging

Except where expressly authorised in writing or where applicable law provides a non-waivable right, you must not copy, republish, redistribute, sell, lease, sublicense, white-label, rebrand or package Omega Security Pro or substantial proprietary portions of it as your own product or service.

43. Reverse Engineering and Circumvention

To the maximum extent permitted by law, you must not reverse engineer, decompile, disassemble or circumvent protection measures for the purpose of reproducing proprietary non-public functionality, bypassing restrictions, compromising security or creating an unauthorised clone. This clause does not restrict rights that applicable law does not permit us to exclude.

44. Trade Marks and Branding

Omega Security Pro, OmegaSecurityPro.com, associated logos and branding may be protected by copyright, trade mark and other proprietary rights. You must not use them in a way that falsely suggests ownership, sponsorship, affiliation or endorsement.

45. Third-Party and Open-Source Components

Third-party or open-source components remain subject to their applicable licences. These Terms do not reduce rights granted by an applicable open-source licence.

46. User Content and User Data

Alpha & Omega Limited does not claim ownership of passwords, files, URLs, domains, reports, vault information or other material merely because you lawfully process it through Omega Security Pro.

You remain responsible for ensuring that you have lawful rights and authority to process any information you submit or select.

47. Feedback

If you voluntarily provide suggestions, feature ideas, bug reports or feedback, you grant Alpha & Omega Limited a worldwide, perpetual, irrevocable, royalty-free right to use, reproduce, adapt and incorporate that feedback for legitimate product and business purposes, without an obligation to compensate you for the feedback itself.

48. Acceptable Use

You must use the Service lawfully, responsibly and in a manner that does not damage, disable, overburden, disrupt or compromise Omega Security Pro, its infrastructure, its providers, third-party systems or other users.

49. Prohibited General Conduct

You must not:

• introduce malicious code into Omega Security Pro infrastructure;
• circumvent rate limits, validation, access restrictions or safety controls;
• attempt to access non-public server areas without permission;
• forge requests or source-identifying information for an unlawful purpose;
• scrape or automate the Service in an abusive manner;
• misrepresent your identity or affiliation;
• use the Service to violate privacy, copyright or other third-party rights;
• use the Service in violation of applicable law.

50. Automated Access

Search-engine indexing and normal browser access are permitted subject to applicable technical directives. Automated use that creates unreasonable load, bypasses controls, interferes with availability or facilitates prohibited conduct is not permitted.

51. Security Research and Vulnerability Disclosure

Good-faith security concerns concerning Omega Security Pro should be reported responsibly to legal@omegasecuritypro.com or support@omegasecuritypro.com. This provision does not itself grant permission to conduct intrusive testing against Omega Security Pro infrastructure.

52. Accuracy of Results

Diagnostic results may be incomplete, outdated, inaccurate, unavailable, affected by external systems or subject to false positives and false negatives. You must independently assess important security decisions.

53. No Certification or Compliance Attestation

Omega Security Pro does not certify that a website, password, file, device, browser, email domain, organisation or security programme complies with PCI DSS, ISO 27001, SOC 2, NIST, GDPR, HIPAA or any other regulatory or industry framework.

54. No Guarantee Against Breach or Attack

Use of Omega Security Pro does not guarantee that an account, file, website, domain, browser, device or network will not be hacked, phished, infected, breached or otherwise compromised.

55. No Reliance for Emergency or Critical Systems

Do not rely solely on Omega Security Pro for emergency response, safety-critical systems, high-risk infrastructure, incident containment, regulated security decisions or circumstances where an inaccurate result could create serious harm.

56. Availability

The Service is provided subject to availability. We do not guarantee uninterrupted or error-free access. Maintenance, browser changes, service-provider outages, DNS failures, third-party API changes, network faults, cyber incidents or other circumstances may affect availability.

57. Changes to Features

Alpha & Omega Limited may add, modify, replace or remove features, safety controls, integrations, APIs, output formats, scoring methods, browser support or other aspects of Omega Security Pro.

58. Suspension or Discontinuation

To the extent permitted by law, Alpha & Omega Limited may suspend, limit or discontinue all or part of the Service where reasonably necessary for security, maintenance, legal, operational or business reasons.

59. Updates

PWA and browser-cached versions may update as resources change. Users should keep browsers and devices current. Alpha & Omega Limited may cease supporting obsolete versions.

60. "As Is" and "As Available"

To the maximum extent permitted by law and subject to rights that cannot lawfully be excluded, Omega Security Pro is provided on an "as is" and "as available" basis.

61. Disclaimer of Warranties

To the maximum extent permitted by law, Alpha & Omega Limited disclaims warranties, representations and conditions, whether express, implied or statutory, concerning accuracy, completeness, security, fitness for a particular purpose, merchantability, non-infringement, uninterrupted availability, compatibility and error-free operation, except to the extent such rights cannot lawfully be excluded.

62. Limitation of Liability

Nothing in these Terms excludes or limits liability that applicable law prohibits us from excluding or limiting.

Subject to that qualification, to the maximum extent permitted by law, Alpha & Omega Limited and its directors, officers, employees, contractors and agents will not be liable for indirect, incidental, special, exemplary, punitive or consequential loss arising out of or relating to the Service.

63. Types of Loss Potentially Excluded

To the extent legally excludable, excluded loss includes loss of profits, revenue, business, goodwill, opportunity, anticipated savings, data, credentials, access to encrypted local data, files, website availability, production time or other consequential economic loss.

64. Free-Service Liability

Because the core Service is presently made available without charge, and subject to mandatory rights that cannot be excluded, Alpha & Omega Limited's aggregate liability arising solely from the free Service will be limited to the greatest extent permitted by applicable law.

65. Indemnity for User Misconduct

To the extent permitted by law, you agree to indemnify Alpha & Omega Limited and its officers, directors, employees, contractors and agents against third-party claims, losses, liabilities and reasonable costs arising from your unlawful use of the Service, material breach of these Terms, unauthorised security testing, infringement of third-party rights or malicious interference with systems.

This indemnity does not apply to the extent liability is caused by Alpha & Omega Limited's own conduct for which liability cannot lawfully be excluded.

66. Mandatory Consumer Rights

Nothing in these Terms is intended to exclude, restrict or modify a statutory guarantee, consumer right, remedy or liability where applicable law does not permit that exclusion, restriction or modification.

67. New Zealand Consumer Guarantees Act 1993

Where the Consumer Guarantees Act 1993 applies and its protections cannot lawfully be excluded, those protections continue to apply. Any contracting-out provision for a transaction in trade applies only where all statutory requirements for contracting out are actually satisfied, including applicable requirements concerning written agreement and fairness and reasonableness.

68. New Zealand Fair Trading Act 1986

Nothing in these Terms authorises misleading or deceptive conduct or other conduct prohibited by mandatory provisions of the Fair Trading Act 1986. Any permitted contracting-out arrangement between parties in trade applies only where the statutory requirements are satisfied.

69. International Consumer Rights

Users in other countries may have mandatory consumer rights that cannot be waived by contract. These Terms apply subject to those mandatory rights where applicable.

70. Business Users

Business and professional users are responsible for performing their own security assessment, quality assurance, backups, validation and deployment decisions and for determining whether Omega Security Pro is suitable for their security programme and regulatory obligations.

71. Force Majeure

To the extent permitted by law, Alpha & Omega Limited is not responsible for delay or failure resulting from circumstances beyond reasonable control, including Internet outages, hosting failures, telecommunications failures, cyberattacks, natural disasters, power failures, governmental action, industrial action, war, civil disturbance or failure of external services.

72. Termination by You

You may stop using the Service at any time. An installed PWA may be removed through browser or device application-management controls.

73. Restriction or Termination by Us

Alpha & Omega Limited may take reasonable action to block or restrict abusive, unlawful, malicious or technically harmful use, including where necessary to protect systems, users, providers or legal interests.

74. Effect of Termination

Provisions that by their nature should survive termination will continue, including intellectual property, ownership, disclaimers, limitations of liability, indemnities, dispute provisions, governing law and interpretation clauses.

75. Changes to These Terms

We may update these Terms to reflect changes in law, security requirements, product functionality, third-party services, business operations or technical architecture. Materially revised Terms will be published on this page with an updated effective or last-updated date where appropriate.

76. Continued Use After Changes

To the extent permitted by applicable law, continued use after revised Terms take effect constitutes acceptance of the revised Terms. Where applicable law requires a different form of notice or consent, that requirement will control.

77. Governing Law

Except where mandatory law requires otherwise, these Terms and disputes arising from or relating to Omega Security Pro are governed by the laws of New Zealand, without regard to conflict-of-laws rules.

78. Jurisdiction

Subject to mandatory consumer or other rights concerning venue or jurisdiction, the courts of New Zealand have jurisdiction over disputes arising from or relating to these Terms or Omega Security Pro.

79. Good-Faith Dispute Resolution

Before commencing formal proceedings, the parties are encouraged, where reasonable, to attempt to resolve disputes in good faith through direct communication. This does not prevent either party from seeking urgent interim, protective or injunctive relief where appropriate.

80. Electronic Communications

Notices and communications relating to Omega Security Pro may be delivered electronically where permitted by law, including by publication on the Service or by email where an email address is available.

81. Assignment

You may not assign rights that would purport to transfer ownership of Omega Security Pro or its intellectual property without written consent. Alpha & Omega Limited may assign or transfer its rights and obligations as part of a lawful merger, acquisition, restructuring or asset transfer, subject to applicable law.

82. No Partnership, Agency or Employment

Nothing in these Terms creates a partnership, joint venture, agency, franchise, fiduciary or employment relationship between you and Alpha & Omega Limited.

83. No Third-Party Beneficiaries

Except where expressly stated or required by law, these Terms do not create enforceable rights for persons who are not parties to this Agreement.

84. No Waiver

Failure or delay in enforcing a provision is not a waiver of that provision or another right.

85. Severability

If a provision is held invalid or unenforceable, it will be interpreted or modified to the minimum extent necessary where legally possible, or severed if necessary, without invalidating the remaining provisions.

86. Entire Agreement

These Terms, the Privacy Policy, and any additional terms expressly incorporated by reference constitute the agreement governing the matters they address concerning your use of Omega Security Pro, except where a separate written agreement executed by Alpha & Omega Limited expressly applies.

87. Interpretation

"Including" and similar words are illustrative rather than limiting. References to law include amendments and replacement legislation where appropriate. If these Terms conflict with a mandatory right that cannot lawfully be excluded, the mandatory right prevails to the extent of the conflict.

88. Headings

Headings are for convenience and do not control legal interpretation.

89. Legal Contact

Legal notices, intellectual-property matters and questions concerning these Terms may be sent to:

Alpha & Omega Limited
New Zealand
Legal & Privacy: legal@omegasecuritypro.com
General Contact: contact@omegasecuritypro.com
Support: support@omegasecuritypro.com

90. Final Acknowledgement

By accessing, installing or using Omega Security Pro, you acknowledge that you have had the opportunity to read these Terms, understand the important limitations of a browser/PWA security toolkit, and agree to comply with this Agreement.

If you do not agree to these Terms, do not access, install or use Omega Security Pro.