Terms of Service

RepoFort ("we", "us", "our") is a security scanning service that helps developers identify vulnerabilities in their web applications and code repositories. Our service is operated by [YOUR NAME / COMPANY NAME].

RepoFort scans websites and code repositories that you own or have explicit permission to scan. Our tools analyze:

• HTTP security headers on live URLs
• Source code in GitHub repositories for common vulnerability patterns
• Security misconfigurations

We provide findings, risk scores, and remediation guidance to help you improve the security of your applications.

3.1 You may ONLY scan targets you own or have explicit written permission to scan.

This is the most important rule. Scanning a website, application, or repository without the owner's permission is illegal in most jurisdictions and violates these Terms. RepoFort requires domain ownership verification before URL scans for this reason.

3.2 You are responsible for how you use our findings.

Security scan results reveal real vulnerabilities. You are responsible for keeping your scan reports confidential and for fixing the issues we identify. Do not share scan reports with unauthorized parties.

3.3 You may not use RepoFort to:

• Scan any system you do not own or have written permission to scan
• Attempt to access other users' scan data
• Abuse, overload, or interfere with our service
• Use our findings to attack, exploit, or harm any system
• Resell or redistribute our service without permission
• Violate any applicable law or regulation

3.4 You must keep your account credentials secure.

Do not share your password. You are responsible for all activity that occurs under your account. Notify us immediately at [SUPPORT EMAIL] if you suspect unauthorized access.

Before running URL scans, RepoFort requires you to verify that you own or control the domain being scanned. This protects both you and the owners of other websites.

Verification methods include DNS TXT records, file uploads, and HTML meta tags — all consistent with industry-standard practices used by major security and web services.

Attempting to bypass or falsify domain verification is a violation of these Terms and may result in immediate account termination.

5.1 No scanner is perfect.

RepoFort uses automated scanning technology. Our tools may not detect every vulnerability in your application. A clean scan result does NOT mean your application is fully secure. We strongly recommend combining RepoFort with professional security reviews, penetration testing, and secure development practices.

5.2 Scan results contain sensitive information.

Your scan reports identify real security weaknesses in your application. Treat them as confidential. You are responsible for storing and sharing them securely, and for remediating the issues they describe.

To the maximum extent permitted by law, RepoFort is provided "as is" without warranties of any kind. We are not liable for any indirect, incidental, or consequential damages, or for any security incident, data loss, or breach arising from your use of the service or reliance on its findings.

We may suspend or terminate your account at any time if you violate these Terms, abuse the service, or attempt to scan targets you do not own or control. You may stop using the service and close your account at any time.

We may update these Terms from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Continued use of the service after changes take effect constitutes acceptance of the updated Terms.

These Terms are governed by the laws of [YOUR NAME / COMPANY NAME]'s jurisdiction, without regard to conflict-of-law principles. Any disputes will be resolved in the courts of that jurisdiction.

Questions about these Terms? Contact us at [SUPPORT EMAIL].