Terms of Service

Last updated: October 19, 2026

1. What ShipGuard does

ShipGuard is a passive, read-only security scanner. When you submit a URL, we request the same public pages, JavaScript files and response headers that any web browser can load, plus a short list of well-known paths (for example /.env and /.git/config). We do not log in, submit forms, guess passwords, fuzz inputs or attempt to exploit anything. If a site publicly ships a Supabase anon key, we use that same public key only to check whether the database schema and storage bucket list are visible; we never read table rows or stored files.

Each scan produces a report with a letter grade and findings. Findings are labelled as heuristic matches (patterns that look like a problem) or confirmed observations.

2. You must own or be authorized for every URL you scan

You may only scan websites that you own, or that you have permission from the owner to inspect. When you start a scan you confirm this. You are responsible for having that authorization. We may refuse, limit or stop scans at any time, and we block private, internal and reserved network addresses.

3. Reports and what is public

• The free part of a report (grade, pass/fail counts and one finding) is shown at getshipguard.com/report/<domain> and can be viewed by anyone who visits that address.
• Reports with an open critical or high-severity finding are not submitted to search engines and are marked “noindex” until a rescan shows the issue is fixed.
• Any secret we detect (such as an API key) is cut down to its first 6 characters before it is stored or shown. We never store or use full credentials.
• The full report is available only through a private link sent after purchase. Anyone you share that link with can view it.

4. Acceptable use

You agree not to:

• scan sites you don't own or aren't authorized to inspect;
• use ShipGuard or its reports to attack, exploit, extort or harass anyone;
• overload the service or try to bypass rate limits, authorization checks or network safety controls;
• resell, scrape or automate the service in a way that harms it or other users without our written permission;
• misrepresent a ShipGuard badge or report, or display a badge for a site that does not currently qualify;
• use the service in violation of any applicable law.

We may suspend or end access for anyone who breaks these rules.

5. Plans, payment and cancellation

• Free scan: no payment required.
• Launch Pass — $29 one-time: unlocks the full report for one domain. It is a one-time digital purchase, not a subscription.
• Continuous Vibe-Guard — $99 per year: a yearly subscription for one domain that includes scheduled rescans and the Verified Production-Safe badge while the domain holds an A or B grade on a recent scan. It renews automatically each year until you cancel.
• Verified Remediation Partner — $499 per month: a monthly subscription for a listing on the partners page and on reports graded C or lower. It renews automatically each month until you cancel. Slots are limited and listings are labelled as paid placement.

Payments are processed by Stripe. Prices are in US dollars and exclude any taxes that may apply. You can cancel a subscription at any time by emailing hello@getshipguard.com; cancellation stops future renewals. Refunds are covered by our Refund Policy.

“Founding Builder Rate — Locked for Life” means: if you subscribe to Continuous Vibe-Guard during early access, your yearly price will not increase for as long as that subscription stays active without interruption.

6. Badges

The Verified Production-Safe badge reflects the result of our passive checks at the time of the most recent scan. It is not a certification, audit or guarantee of security. The badge changes or disappears automatically if the grade drops, the scan is out of date, or the subscription ends.

7. No warranty

ShipGuard is provided “as is” and “as available”. A passive scan cannot see your server code, business logic or database policies, and it can miss problems or report false positives. A good grade does not mean your app is secure. To the fullest extent the law allows, we disclaim all warranties, express or implied, including merchantability, fitness for a particular purpose, accuracy and non-infringement.

8. Limitation of liability

To the fullest extent the law allows, ShipGuard will not be liable for any indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, data or goodwill, arising from your use of the service. Our total liability for any claim related to the service is limited to the amount you paid us in the 12 months before the claim (or US $50 if you paid nothing). Some places don't allow certain limits, so some of these may not apply to you.

9. Indemnity

If you scan a site without authorization or otherwise break these terms, and that leads to a claim against us, you agree to cover our reasonable losses and costs related to that claim.

10. Changes and termination

We may update the service and these terms. If we make material changes, we will update the date above and, where reasonable, notify paying customers by email. You can stop using the service at any time. We may suspend or end access if you break these terms.

11. Governing law

These terms are governed by the laws of the Commonwealth of Massachusetts, United States, without regard to conflict of law principles. Disputes will be handled in the courts of that jurisdiction unless the law where you live requires otherwise.

12. Contact

ShipGuard (getshipguard.com)
67 Forest St
Marlborough, MA 01752
United States
Legal & support email: hello@getshipguard.com