Last updated 16 September 2026
These Terms of Service (the "Terms") govern access to and use of Periphery, the search console at console.periphery.exposed and the API at api.periphery.exposed (the "Service"), operated by GG Labs, a SASU registered in France under number [SIREN], with its registered office at 138 avenue Victor Hugo, 75016 Paris ("we", "us"). By creating an account or using the Service you agree to these Terms. If you do not agree, do not use the Service.
Periphery indexes web applications that are publicly reachable on hosting and platform providers, records what those applications expose to any visitor (page titles, text, screenshots, HTTP status, favicons, email addresses, and strings that match the shape of credentials or API keys), and lets you search that index. Everything in the index was retrieved from publicly accessible URLs without authentication, bypassing of access controls, or exploitation of any vulnerability. Periphery does not host, run, or control the indexed applications.
You sign in with a Google account or an emailed magic link. You are responsible for everything done under your account and for keeping your API keys secret. Tell us at contact@gglabs.fr immediately if you suspect unauthorised use. You must be at least 18 years old and able to enter into a binding contract to use the Service.
The Service is offered in tiers described on the pricing page. Each tier carries a monthly search quota and, on some tiers, API access and the credentials filter. Quotas reset monthly and unused searches do not carry over. Plan changes are currently handled by contacting us; prices are shown excluding applicable taxes and may change with 30 days' notice by email. Fees already paid are not refundable except where the law requires it.
The Service exists so that security teams, researchers, and platform operators can see what is exposed on the public web. You may use it only for lawful purposes. In particular you must not:
Legitimate security research means, at minimum, that you either own or are authorised to test the system concerned, or that you limit yourself to notifying its owner of the exposure. We may suspend or terminate accounts that breach this section without notice and without refund, and we cooperate with lawful requests from authorities.
If you operate an application that appears in the index and want it removed, email contact@gglabs.fr from an address at the domain concerned, or otherwise demonstrate control of the host, and we will de-index it within 7 days and exclude it from future crawls. We also honour removal for indexed email addresses on request from their holder. Fixing the exposure at the source is, of course, the actual remedy.
The Service, its software, design, and the structure of the index are ours or our licensors'. Indexed content belongs to whoever published it; we display excerpts, metadata, and screenshots for the purpose of identifying exposed applications. You receive a limited, revocable, non-exclusive, non-transferable right to use the Service according to your plan.
The index reflects what a crawler observed at a point in time. Applications change, go offline, or are misclassified, and credential detections are heuristic and may be false positives or expired. The Service is provided "as is" and "as available" without warranties of any kind, express or implied, including accuracy, completeness, fitness for a particular purpose, or uninterrupted availability.
To the extent permitted by law, we are not liable for indirect, consequential, or special damages, loss of profits, or loss of data arising from the Service, and our total liability for any claim is limited to the fees you paid us in the 12 months before the event giving rise to the claim. Nothing in these Terms excludes liability that cannot be excluded under French law, including for gross negligence, wilful misconduct, or personal injury. You indemnify us against claims arising from your breach of section 4.
You may stop using the Service and ask us to delete your account at any time by emailing contact@gglabs.fr. We may suspend or terminate access for breach of these Terms, for non-payment, or if we discontinue the Service, in which case we will give paying customers reasonable notice where practicable. Sections 4, 6, 7, 8, and 10 survive termination.
These Terms are governed by French law. Any dispute that cannot be resolved amicably will be submitted to the competent courts of the jurisdiction of our registered office, without prejudice to mandatory consumer protection rules that may apply to you. If you are a consumer in the European Union you may also use the European Commission's online dispute resolution platform.
We may update these Terms. Material changes are announced by email or on the Service at least 15 days before they take effect. Continued use after that date constitutes acceptance. The current version is always available at this address.
Questions about these Terms: contact@gglabs.fr. Our Privacy Policy explains how we handle personal data.