Terms of Service

These terms govern your use of vandel ("vandel", "we", "us"). By creating an account or running a scan, you agree to them. If you don't agree, don't use the service.

1. What vandel does

vandel runs automated security testing against a web application you nominate. That includes a deterministic surface and configuration scan, and, on paid plans, an AI agent that interacts with the application the way an attacker would in order to find exploitable issues. We report what we find, along with suggested fixes.

2. You must own the target, and you warrant that you do

This is the most important term here. You may only submit a target that you own or are explicitly authorized in writing to test. You represent and warrant that this is true for every target you submit, and that your use of vandel against that target does not violate any law or any agreement with your hosting provider or any third party.

We require proof of control before scanning any external target, but that check is a safeguard, not a substitute for your responsibility. You are solely responsible for the targets you submit. You agree to indemnify and hold us harmless from any claim, loss, or liability arising from a target you were not authorized to test.

3. No guarantee that we find everything

Security testing is best-effort and inherently incomplete. vandel does not and cannot find every vulnerability in an application. A scan that reports no findings does not mean your application is secure, and must never be represented as a certification, audit, guarantee, or compliance attestation. The service is provided "as is" and "as available", without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement.

4. Testing carries risk

Active security testing sends real requests to your application. It may create records, trigger notifications or rate limits, consume usage quotas, or in rare cases affect availability. You accept this risk for any target you submit, and you are responsible for your own backups and for scheduling scans appropriately.

5. Limitation of liability

To the maximum extent permitted by law, we are not liable for any indirect, incidental, special, consequential, or punitive damages, or for any lost profits, revenue, data, or goodwill, arising out of or related to your use of vandel. Our total aggregate liability for all claims relating to the service is limited to the greater of (a) the fees you paid us in the twelve months before the event giving rise to the claim, or (b) one hundred US dollars.

6. Acceptable use

Don't use vandel to test systems you don't control, to attack or disrupt anyone, to exfiltrate data you have no right to, to evade another party's security controls, or to resell or republish our output as your own certification. We may suspend or terminate an account that does any of these, without refund.

7. Plans, billing, and cancellation

Paid plans bill in advance on a recurring basis through our payment processor until cancelled. You can cancel at any time; cancellation stops future renewals and takes effect at the end of the current billing period. We don't provide pro-rated refunds for partial periods unless required by law. Prices may change with notice before your next renewal.

8. Your data

Scan results describe weaknesses in your application and are treated as confidential. Our handling of your data is described in our Privacy Policy, which forms part of these terms.

9. Termination

You may stop using vandel and delete your account at any time. We may suspend or terminate access if you breach these terms, if required by law, or if continuing to serve you would create material risk for us or a third party.

10. Changes

We may update these terms. If a change is material we'll give notice before it takes effect. Continuing to use vandel after that means you accept the updated terms.

11. Governing law

These terms are governed by the laws of the State of California, USA, without regard to its conflict-of-laws rules, and the state and federal courts located there have exclusive jurisdiction over any dispute.

12. Contact

Questions about these terms: support@vandel.dev.