Terms of Service

These Terms of Service form a binding agreement between you and VibeShield. By accessing, browsing, or using the service, you represent that you are legally able to enter into this agreement and that you will comply with it.

If you use the service on behalf of a company, client, or other organization, you represent that you have authority to bind that organization and that references to “you” include that organization.

VibeShield is offered solely for lawful defensive security testing and related remediation workflows. You may use the service only to assess:

• assets that you own or control; or
• assets for which you hold current, explicit, written authorization from the owner to perform the specific testing you initiate.

You must maintain documentation supporting your authorization and provide it promptly if we request it in connection with abuse review, legal process, or incident response.

Each time you submit a scan, you represent and warrant that:

• the target is within scope for your security testing rights and responsibilities;
• your use does not violate any contract, policy, law, regulation, or court order;
• you will not use VibeShield to target third-party systems without authorization;
• any information, URLs, and instructions you submit are accurate and not misleading; and
• you accept responsibility for the consequences of the tests you initiate.

VibeShield provides automated web application security scanning, analysis, reporting, and remediation support. The service may perform active testing, including network requests, parameter manipulation, header inspection, content retrieval, endpoint discovery, and other automated checks you authorize by launching a scan.

The service is not a managed penetration testing engagement, not legal advice, not compliance certification, and not a guarantee that a system is secure, lawful, or fit for any purpose.

You must comply with the Acceptable Use Policy, which is incorporated into these Terms by reference. Without limiting that policy, you may not use VibeShield to:

• conduct unlawful, unauthorized, or deceptive testing;
• interfere with service availability, integrity, or performance of a third-party asset;
• collect, exfiltrate, download, or retain data beyond what is reasonably necessary to validate a finding;
• launch malware, persistence, social engineering, credential attacks, or denial-of-service activity; or
• evade or bypass our technical, contractual, or policy controls.

We may monitor use of the service for abuse prevention, security, quality assurance, legal compliance, and enforcement of these Terms. We may suspend, throttle, reject, investigate, or terminate access at any time if we believe your use creates legal, operational, or reputational risk.

We may preserve and disclose logs, submissions, results, and related records where reasonably necessary to protect the service, investigate misuse, respond to legal requests, enforce our agreements, or prevent harm.

Findings, scores, summaries, and fix prompts are informational outputs generated from automated logic and, where enabled, third-party AI services. They may be incomplete, over-inclusive, inaccurate, stale, or unsuitable for your environment.

You are responsible for validating findings before acting on them, applying engineering judgment, and reviewing any remediation code or AI-generated output before deployment.

Subject to these Terms, we grant you a limited, non-exclusive, non-transferable, revocable right to use the service for your internal defensive security purposes. We retain all rights in the service, software, branding, content, and related materials, except for content that you submit.

You grant us a non-exclusive right to host, process, transmit, reproduce, and analyze submitted targets, scan data, and related materials as necessary to operate, secure, improve, and enforce the service.

The service may rely on third-party infrastructure, AI providers, hosting providers, and security tooling. We are not responsible for the availability, accuracy, or conduct of third-party services, and your use may also be subject to their terms and policies.

THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE.” TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE DISCLAIM ALL WARRANTIES, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, ACCURACY, QUIET ENJOYMENT, AND RESULTS.

We do not warrant that the service will be uninterrupted, error-free, secure, complete, timely, or lawful for your specific use case, or that all vulnerabilities or legal risks will be identified.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, VIBESHIELD AND ITS AFFILIATES, OFFICERS, EMPLOYEES, CONTRACTORS, AND LICENSORS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, DATA, GOODWILL, USE, BUSINESS INTERRUPTION, OR SECURITY INCIDENTS, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, OUR TOTAL LIABILITY ARISING OUT OF OR RELATING TO THE SERVICE OR THESE TERMS WILL NOT EXCEED THE GREATER OF ONE HUNDRED U.S. DOLLARS (US $100) OR THE AMOUNT YOU PAID US FOR THE SERVICE IN THE TWELVE MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM.

You will defend, indemnify, and hold harmless VibeShield and its affiliates, officers, employees, contractors, and licensors from and against any claims, liabilities, damages, judgments, settlements, losses, costs, and expenses, including reasonable attorneys’ fees, arising out of or related to:

• your use or misuse of the service;
• your testing of any target or system;
• your breach of these Terms, the AUP, or applicable law; or
• your lack of ownership, authority, or permission for any scan you initiate.

To the maximum extent permitted by law, any dispute arising out of or relating to these Terms or the service will be resolved by binding, individual arbitration and not in court, except that either party may seek injunctive or equitable relief for misuse, abuse, intellectual property infringement, confidentiality breaches, or unauthorized access.

You and VibeShield each waive any right to a jury trial and any right to participate in a class, collective, representative, or private-attorney-general action. If the arbitration provision is found unenforceable, the exclusive venue for disputes will be the state or federal courts located in Delaware, and Delaware law will govern these Terms, excluding conflict-of-law rules, except where mandatory law requires otherwise.

We may update these Terms from time to time. Updated versions become effective when posted on the site or otherwise communicated. Your continued use of the service after the effective date of an updated version constitutes acceptance of the revised Terms.

These Terms should be read together with the Acceptable Use Policy and Privacy Policy.