Terms of Service

DRAFT, last updated October 2026. Pending owner review.

1. What ShipAudit is

ShipAudit provides automated, passive, read-only checks of publicly accessible web pages and generates a report with suggestions and AI prompts. ShipAudit is not a security certification, audit, penetration test, or legal advice. A score or report does not mean a website is secure, compliant, or free of vulnerabilities. Suggested prompts and fixes are provided as-is; review and test any change before deploying it.

2. Permission to scan

You may only scan websites you own or are authorized to test. By running a scan you confirm you have that permission. We may block scans, domains or IP addresses at our discretion, including for abuse or excessive use.

3. What we do and don't do

We make ordinary HTTP requests to public URLs (homepage, its same-site JavaScript files, robots.txt, sitemap.xml, llms.txt, and a check of whether common files like /.env and /.git/HEAD are publicly served). We do not log in, submit forms, test APIs or databases, or attempt to exploit anything. If we detect a credential, we display only a masked version and never use or store it. We do not store the contents of any exposed file.

4. Payments

The full report ($29) is a one-time purchase for one domain and includes re-scans for 30 days. Fix-It ($149) is a service in which we propose changes to a repository you grant access to, delivered as a pull request you review; you are responsible for reviewing, testing and merging it. Payments are processed by Stripe.

5. Refunds

If the full report doesn't help, email support within 14 days of purchase for a full refund. Fix-It is refundable in full if we haven't delivered a pull request.

6. Limitation of liability

To the maximum extent permitted by law, ShipAudit is provided "as is" without warranties, and our total liability for any claim is limited to the amount you paid us in the 12 months before the claim. We are not liable for security incidents, data loss, or lost revenue relating to your website.

7. Contact

support@shipaudit.dev (TODO: set up email routing).