Terms of Service

1. Acceptance

By creating an account or using the Service you agree to these terms and to our Privacy Policy. If you use the Service on behalf of an organization, you confirm that you are authorized to accept these terms for it.

2. The service

vetkit runs automated analyses — secret scanning, dependency vulnerability scanning, static analysis, repository hygiene checks and an optional AI-authorship signal — on GitHub repositories you connect, and produces reports. We may add, change or remove features, especially while the Service is in beta.

3. Accounts

You sign in with GitHub and must keep your GitHub account secure. You are responsible for activity under your account and your organizations, including actions taken with API keys you create. Tell us promptly at security@vetkit.dev if you suspect unauthorized use.

4. Your code and content

You keep all rights to your code and data. You grant us a limited license to access, copy and process the repositories you connect solely to provide the Service to you — for example, to check out a commit, run analyzers and store findings. We do not use your code to train AI models. You must have the right to grant this access for every repository you connect.

5. Acceptable use

You agree not to:

• audit repositories you are not authorized to access or analyze;
• use findings — including detected secrets — to access systems or data without authorization;
• attack, overload or probe the Service outside our disclosure policy, or attempt to break out of the audit environment;
• circumvent rate limits, scopes or other technical restrictions;
• resell or provide the Service to third parties as a standalone offering without our permission;
• use the Service in violation of applicable law or GitHub’s terms.

6. API keys and MCP

API keys are credentials. Keep them secret, grant the narrowest scopes you need, and revoke keys you no longer use. When you connect vetkit to an AI agent through MCP, you are responsible for the actions that agent takes with your key. Report and finding text is derived from repository contents and should be treated as untrusted input by your tools.

7. Audit results

Automated analysis produces false positives and misses real issues. A good grade is not a guarantee that code is secure, and a report is not a substitute for professional security review. The AI-authorship signal is a heuristic, is labelled as such, and must not be used as the sole basis for decisions about people — for example in hiring, employment, academic or disciplinary matters.

8. Beta and pricing

The Service is currently in beta, available by invitation, and free to use, subject to fair-use limits. We will announce paid plans in advance, and usage during the beta will not be billed retroactively. Beta features may be unstable, change without notice or be discontinued.

9. Suspension and termination

You can stop using the Service at any time and ask us to delete your data. We may suspend or terminate access if you breach these terms, if required by law, or to protect the Service or other users; where reasonable, we will give notice first. On termination we delete your data as described in the Privacy Policy.

10. Disclaimers

To the extent permitted by law, the Service is provided “as is” and “as available”, without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, accuracy and non-infringement.

11. Limitation of liability

To the extent permitted by law, vetkit will not be liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue or data. Our total liability for any claim relating to the Service is limited to the greater of the amounts you paid us in the 12 months before the claim or USD 100. Nothing in these terms limits liability that cannot be limited by law.

12. General

We may update these terms; we will post changes here and update the date above, and give notice of material changes. Continued use after changes take effect means you accept them. If a provision is unenforceable, the rest remains in effect. Questions: mehmetnamiduru@vetkit.dev.