TesseraTerms of use
Version under legal review. Last updated: 6 October 2026.
This is a courtesy translation of the Italian terms of use. In case of any difference, the Italian version prevails.
The service
Tessera Quick Check is a service of Hyperion S.r.l. that runs an automated security check, from the outside and without credentials, on the site you specify, and delivers a report. It uses HTTP headers, TLS analysis, Nuclei and OWASP ZAP.
Authorisation to test
You may only analyse sites that you own or for which you have written authorisation from the owner. Before each scan you declare that you have it and, for each site, you prove that you control its domain with a DNS record or a file containing a code provided by Tessera. Technical verification does not replace the owner's authorisation. The scan sends test requests that may generate unusual traffic, alarms or load on the site being analysed: you are responsible for this.
Anyone who analyses a site without authorisation is personally liable for the consequences. Hyperion may suspend access and cooperate with the authorities in case of abuse.
What the report is and is not
- Results are produced by automated tools and are not manually verified by an operator.
- The Quick Check is not a penetration test and does not cover areas behind a login, business logic or source code. Every report lists the limits of the analysis.
- A report with no issues does not guarantee that the site is secure.
- The CVSS score of ZAP findings is an assessment by Hyperion, stated in the report.
Reports and access links
The report opens with a signed link, valid for 7 days, that anyone who has it can use: keep it safe. Files are deleted after 90 days.
Prices and payments
Tessera is designed for businesses and professionals using it in the course of their trade.
Purchases are made online through Stripe, which sells the scans as reseller (merchant of record) under the name Link, LLC: it calculates and collects VAT based on your country and, for businesses, the VAT number provided; it issues the receipt and invoice; it handles payment, refunds and disputes under its own terms, referenced on the payment page and in the receipt. Prices shown on the site are in euros, excluding VAT; at payment you can also choose your own currency, at the exchange rate shown by Stripe. Hyperion does not see or store card details.
Purchased scans are credited to your account once payment is confirmed and do not expire. A scan that fails because of our error is refunded automatically. For questions about the service write to info@hyperionsrl.cloud; for the payment you can also contact the support listed in your Stripe receipt.
Monthly check
The monthly check is a subscription for one site, sold by Stripe like the packs: €79 per month, excluding VAT. It can only be activated for a site whose control you have already proven. The first scan starts right after activation, then one a month; the result is emailed to your account address and stays in your history. Scheduled scans do not use up purchased scans.
If the domain verification is no longer valid or the site does not respond, the scan is paused, we let you know and we retry every day; if a scan fails because of our error, we repeat it. You can cancel at any time from the scan page: the subscription stays active until the end of the period already paid and then does not renew.
Liability
The service is provided as is. To the extent permitted by law, Hyperion is not liable for indirect damages, loss of profits or interruptions of the analysed site arising from the use of the service, and its total liability does not exceed what you paid for the scan concerned.
Governing law
These terms are governed by Italian law. For any request, write to info@hyperionsrl.cloud.