Terms of Service

Authorized use only

You may use the Service only to examine applications, repositories, databases, and domains (“Assets”) that you own or that you are expressly authorized in writing to test. Before any check beyond a public, passive review, you must verify control of each Asset through a method we support. You must not use, or attempt to use, the Service to examine any third party’s Assets. We may refuse, suspend, or terminate any request we reasonably believe is unauthorized. You will indemnify Space Launch Agency LLC against claims arising from your misrepresentation of ownership or authorization.

What the Service does

A passive check, with only a public URL, reviews content any visitor’s browser receives, such as HTML, JavaScript files, and response headers. We do not log in, query your database, or send requests designed to bypass any control.

Authorized checks, after verification and consent, run automated, read-oriented checks using the access you grant. Examples: read-only database metadata and policy queries, repository analysis, and limited requests against your own project that count accessible rows without retrieving their contents. We do not perform denial-of-service testing, brute-forcing, social engineering, or exploitation of vulnerabilities.

Fixes are proposals you approve

Fixes are delivered as pull requests to your repository or as written instructions and code for you to apply. We never merge, deploy, or apply changes to your production systems. You are responsible for reviewing, testing, merging, deploying, and backing up before applying any change. Each fix includes the tests we ran and rollback notes. Where a secret may have been exposed, you are responsible for rotating it. We provide instructions but never request or store your secret keys.

No guarantee

THE SERVICE AND ALL REPORTS, FINDINGS, AND FIXES ARE PROVIDED “AS IS.” Automated analysis can miss vulnerabilities and can produce false positives. Space Launch Agency LLC does not warrant that your application is or will be secure, compliant, or free of vulnerabilities, or that any fix is free of errors. A completed check or badge reflects only the checks performed on the stated date. To the maximum extent permitted by law, Space Launch Agency LLC’s total liability for any claim relating to the Service is limited to the amount you paid us in the 3 months before the claim, and we are not liable for indirect, incidental, consequential, or lost-profit damages, or for data loss or breaches, whether or not they relate to an issue we did or did not report.

AI-operated service

The Service, including scanning, fix generation, billing, and support, is operated substantially by AI agents under the oversight of Space Launch Agency LLC. Agent output can be wrong. That is why every change requires your approval.

Refunds

For a one-time Fix Bundle: if the tests included with the fix fail, or our re-check after you apply the fix still shows the same Critical finding, request a refund within 14 days and we will refund the Fix Bundle price. Subscriptions can be cancelled anytime and stop at the end of the current billing period.

Findings

If we detect an exposed credential or data exposure in your Assets, we will notify you promptly. We do not disclose your findings to third parties except as required by law. Aggregate, anonymized statistics may be published only if you opt in.