Terms of service
Last updated 18 October 2026.
What Hookgap does
Hookgap reads publicly available information about a domain (DNS records, public certificate logs, domain registration data and the public homepage) and summarises it in a report. It does not access, log in to or test any system.
Acceptable use
- Use reports to start honest conversations with businesses you want to help. Do not present them as proof that a business has been breached.
- Follow the email and privacy laws that apply to your outreach, such as CAN-SPAM, GDPR and PECR.
- Do not use Hookgap to harass anyone, to overload any service, or to try to get around its limits.
Accuracy
Reports reflect public data at the time of the check. Some settings, such as custom DKIM selectors, cannot be seen from outside, so a report can miss things or flag something that is configured differently. Reports are information, not a security audit or professional advice.
Plans and billing
Paid plans renew automatically until cancelled. You can cancel at any time and keep access until the end of the current period.