Terms of Service

VibeShield runs safe, largely passive checks against a web app you provide a URL for — security, accessibility, SEO & AEO (AI visibility), and bundle/tech audits — and reports findings with severity, evidence, and remediation guidance. It's offered on a free Basic plan and paid Pro and Business plans; see /pricing for current features and limits, which are incorporated into these terms by reference.

You can run a limited number of passive security scans without an account; everything else needs one. You agree to provide a real name and a working email address, to keep your password secure, and to notify us if you believe your account has been compromised. You're responsible for activity under your account — including scans started with your API keys or deploy hooks.

You may only scan a target you own or have explicit authorization to test. Scanning a system without authorization may be illegal in your jurisdiction, and doing so through VibeShield violates these terms. By starting a scan, you're confirming you have that authorization.

You agree not to use the Service to:

• Scan or attack a system you don't own or aren't authorized to test;
• Attempt to disrupt a target (denial-of-service), brute-force credentials, or destroy/modify data;
• Access another person's private accounts or data on a target system;
• Circumvent plan limits, resell access, or interfere with the Service's normal operation; or
• Reverse engineer the Service except where the law gives you the right to.

VibeShield's own checks are designed to be non-destructive — no data modification, credential attacks, or DoS testing — but the "active checks" option sends crafted, attack-shaped requests to your target and should only be enabled against systems you're authorized to test that way.

Basic is free. Pro and Business are paid monthly subscriptions sold by Paddle.com, our reseller and merchant of record — when you upgrade, you buy from Paddle and also agree to Paddle's own buyer terms for that transaction. Paid subscriptions renew automatically each billing period until canceled. You can update your payment method or cancel from Settings → Plan & billing (Manage subscription or Cancel subscription), or from the link in any Paddle receipt. A cancellation takes effect at the end of the period you've already paid for. Refunds are handled by Paddle under its refund policy. We may change plan pricing or features going forward; we'll make reasonable efforts to give notice before a price increase affects an existing subscription.

There is currently no free trial of Pro or Business. You can use Basic (including the free instant scan) to evaluate the Service before upgrading.

• API keys and deploy hooks are credentials: keep them secret. Scans they trigger count toward your quota, and you must be authorized to test every URL they cause us to scan. Rotate or revoke them from your dashboard at any time.
• Public share links and badges make a report viewable by anyone with the link until you turn sharing off. You're responsible for what you choose to publish.
• White-label reports — you must have the right to use any name and logo you add.
• AI fix prompts and assistant answers are suggestions. Review what your AI tool changes before you ship it; you're responsible for changes made to your app.

VibeShield and its branding, software, and report design are owned by us or our licensors. We grant you a limited, non-exclusive, non-transferable license to use the Service for its intended purpose. You keep all rights to the systems you scan and the reports generated about them — they're yours to use, share, or publish as you see fit.

VibeShield provides an evidence-based security assessment, not a guarantee. A clean report means no issues were detected within the tested public attack surface at the time of the scan — it does not mean your application is, or will remain, 100% secure. Findings are classified as passed, vulnerable, potential vulnerability, inconclusive, or not tested, and should be verified before you treat them as certain. You're responsible for your own security decisions.

The Service is provided "as is" and "as available," without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We don't warrant that the Service will be uninterrupted, error-free, or that every vulnerability in a scanned target will be detected.

To the fullest extent permitted by law, VibeShield won't be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of data, revenue, or profits, arising from your use of the Service — including reliance on a scan report or an undetected vulnerability in a system you scanned. Our total liability for any claim relating to the Service is limited to the amount you paid us, if any, in the 12 months before the claim arose.

You agree to indemnify and hold VibeShield harmless from claims arising out of your unauthorized use of the Service — most importantly, scanning a target without proper authorization.

You may stop using the Service and delete your account at any time (see the Privacy Policy for how). We may suspend or terminate an account that violates these terms, in particular the authorized- use rule in Section 3. Sections that by their nature should survive termination — including Sections 7 through 10 — continue to apply.

These terms are governed by the laws of [Your Company's Jurisdiction], without regard to conflict-of-law principles.

We may update these terms as the Service evolves. We'll update the "Last updated" date above, and for material changes we'll make a reasonable effort to let you know before they take effect. Continuing to use the Service after a change means you accept the updated terms.

Questions about these terms? Email legal@usevibeshield.com.