Terms of Service

1. Agreement

These terms are an agreement between you (or the organization you represent) and [COMPANY LEGAL NAME] ("AlliedAS", "we", "us") for use of Allied App Security. By creating an account or using the service you accept them. If you accept on behalf of an organization, you confirm you are authorized to bind it.

2. Authorized use only

AlliedAS is an authorized application-security service. You may point it only at repositories you control and at domains and applications you own or are explicitly authorized, in writing, to test.

The product enforces this with domain-ownership verification, authorization attestations, declared scopes, a deterministic policy engine and a kill switch. These controls do not replace your own legal obligation to hold authorization. Unauthorized testing may be illegal.

You must not use AlliedAS to:

• test, scan or probe systems you are not authorized to test;
• attempt to bypass ownership verification, scope limits, rate limits or other safety controls;
• access other customers’ data, or degrade or disrupt the service;
• store or process unlawful content, or use the service to build a competing product.

3. Accounts and workspaces

Keep your sign-in email secure and tell us promptly about any unauthorized use. Workspace owners control who has access and which roles they hold, and are responsible for their members’ use of the workspace.

4. Early access, plans and billing

AlliedAS is in early access. Paid plans are currently free of charge. Features, limits and prices may change as we move toward general availability.

Before we start charging, we will tell workspace owners by email, and nothing will be charged unless you add a payment method and choose a paid plan. After that, paid plans are billed in advance each month or year and renew automatically until cancelled. Prices exclude applicable taxes.

5. Your content

You keep all rights in your code, data and content. You grant us a limited license to process it only to provide, secure and support the service for you, as described in our Privacy Policy.

Fixes we propose are drafts. AlliedAS opens draft pull requests only when you ask and never merges them. You are responsible for reviewing and testing any change before you use it.

6. What the service does and does not promise

Automated security testing reduces risk but cannot find every vulnerability. Findings, scores and reports describe what was tested, when and at what depth. They are not a certification that any system is secure, and they do not replace a human-led penetration test where one is required.

7. Third-party services

The service connects to third-party services you choose, such as GitHub, Slack, Linear and Jira. Your use of those services is governed by their terms.

8. Suspension and termination

You may stop using the service at any time. We may suspend or terminate access, or stop active testing immediately, if we reasonably believe you are breaching these terms, testing without authorization, or putting the service or others at risk. Where practical we will tell you why.

After termination we delete workspace data as described in our Privacy Policy.

9. Disclaimers

The service is provided "as is" and "as available". To the fullest extent permitted by law, we disclaim all implied warranties, including merchantability, fitness for a particular purpose and non-infringement.

10. Limitation of liability

To the fullest extent permitted by law, neither party is liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue or data. Each party’s total liability arising from these terms is limited to the amounts you paid us in the 12 months before the claim, or US$100 if greater. These limits do not apply to your obligations under the authorized-use section or to liability that cannot be limited by law.

11. Indemnity

You will defend and indemnify us against third-party claims arising from testing you direct at systems you were not authorized to test, or from your breach of these terms.

12. Changes to these terms

We may update these terms. For material changes we will notify account owners by email at least 30 days before they take effect. Continuing to use the service after that means you accept the updated terms.

13. Governing law

These terms are governed by the laws of [GOVERNING LAW], and disputes will be resolved in [COURTS / VENUE], except where the law of your country requires otherwise.

14. Contact

Questions about these terms: [email protected]. Security reports: [email protected]. Suspected unauthorized testing: [email protected].