Frequently asked questions
The recurring questions we hear before, during, and after engagements. If your question is not here, the apply form is the right place to surface it.
- Which product is live today?
- AI-Readiness is the free monthly homepage audit. Marketing Signal Audit is live in every paid plan. Website Security Scan is live on paid plans.
- What is the product workflow?
- Add a domain, confirm authorization, run the free homepage audit or a paid scan of any single page on your domain, review prioritized findings, then export the report for your backlog or client update.
- Can AI agents use index365?
- Yes. Every result is an agent-readable contract, and the REST API, CLI, and MCP server are live today (in Beta) so your coding agent can run audits and read structured findings. Install the agent skills with one command to wrap the CLI. The dashboard and report exports remain the human control surface.
- What is the audit scope?
- Product audits inspect publicly visible signals: crawlable pages, metadata, schema, robots and llms files, browser-visible tags, HTTPS, headers, cookies, DNS/email records, and similar public evidence. They do not log into private systems or replace a pentest.
- How do credits work?
- Paid plans include monthly audit credits. Credits reset each billing cycle, failed runs caused by index365 are credited back, and unused credits do not roll over unless your contract says otherwise.
- Where do billing changes happen?
- Billing changes, plan upgrades, cancellations, invoices, and payment methods live in the account dashboard so every change stays attached to the correct organization.
- What is the fix guarantee?
- If an audit run fails because of index365 infrastructure, we credit the run back. The guarantee does not cover inaccurate public-site configuration, blocked crawlers, private systems, or work performed outside the product.
- What is your refund policy?
- For product plans, failed scans caused by our system are credited back under the fix guarantee. Completed audits are not separately refundable beyond that guarantee. Track 2 contracts carry their own acceptance terms.
- Do you take projects under your stated minimums?
- Generally no. The minimums are calibrated so we can do the work properly without compressing scope or quality. For smaller engagements we maintain a partner referral list.
- How do you handle security and confidential client data?
- We follow a three-layer model: untrusted-content isolation in our AI tooling, an egress allowlist that prevents accidental exfiltration, and pre-commit secret scanning across every repo we touch. Client data is never shared between engagements.
- What is your security posture?
- The product posture is public-surface first: least access, no private credentials for normal audits, authorization checks, secret scanning, and narrow data retention. Deeper authenticated testing only happens under a scoped services contract.
- Will you sign an NDA before a discovery call?
- Yes. We will counter with our standard mutual NDA if you do not have one. We sign before any discovery session that involves your private architecture or financial data.
- Do you work with companies under $1M in revenue?
- Selectively. Track 2 services are calibrated for $1M+ businesses. Product plans are the better fit when a team needs a focused audit without a custom engagement.
- What is your AI-augmented delivery model?
- Our internal team uses LLM-assisted tooling across research, content, code review, and operations. The end deliverable is human-reviewed and human-owned; the AI layer compresses cycle time without compromising accountability.
- Do you offer Stripe checkout for Track 2 services?
- No. Track 2 engagements always run through a written proposal and a contract before payment. The reason is scope risk: services have failure modes that products do not.
- How does index365 differ from a freelancer or a traditional agency?
- Senior-level strategy paired with AI-augmented delivery, boutique attention to scope and outcomes. We are not the cheapest option in the market, and we are not trying to be.