These Terms of Service (“Terms”) constitute a legally binding agreement between you (“User”, “Customer”, or “you”) and Scorpr Inc. (“Scorpr”, “we”, “our”, or “us”). By accessing or using the Scorpr platform, APIs, CLI, or initiating pre-flight audits, you agree to be bound by these Terms.
You expressly warrant and represent that you are the lawful owner of any target domain submitted to Scorpr, or that you have obtained explicit, verifiable written permission from the owner to conduct pre-flight security and QA evaluations. Unauthorized vulnerability probing, port scanning, or intrusive targeting of third-party infrastructure is strictly prohibited and constitutes a material breach resulting in immediate account termination.
By accessing, browsing, registering for, or initiating automated audits on Scorpr (the “Platform”), you signify your full agreement to these Terms, our Privacy Policy, and any applicable service addenda. If you are accepting on behalf of a company, developer agency, or other legal entity, you represent that you possess the full legal authority to bind such entity. If you do not agree to these terms, you must not access or use Scorpr.
Scorpr provides powerful automated security probing, database RLS detection, client-side secret scanning, and headless browser runtime analysis. To ensure the safety of the wider internet and avoid unlawful interference, you agree to adhere strictly to the following Acceptable Use rules:
You represent and warrant that you either: (i) own and control the target domains submitted for audit; or (ii) have received explicit, verifiable written authorization from the domain owner (such as a client who contracted your agency) authorizing pre-launch auditing and headless evaluation.
169.254.169.254), or localhost services.Scorpr is designed as an automated pre-flight quality control and security posture assessment instrument. It performs non-destructive, non-intrusive evaluations by requesting public HTTP/HTTPS endpoints, parsing client-side JavaScript chunk manifests, and rendering pages inside isolated headless Chromium sandboxes.
No Guarantee of 100% Vulnerability Immunity: While our engines test against known vulnerabilities (e.g. SEC-01 to SEC-10 Supabase PostgREST RLS bypasses, exposed API keys, CORS misconfigurations), no automated tool can detect every potential flaw or zero-day exploit. Scorpr does not replace formal manual penetration testing or comprehensive compliance certifications (ISO 27001, SOC2, HIPAA, PCI-DSS).
Non-Destructive Nature: Scorpr does not execute database drops, destructive payload injections, or Denial of Service attacks. You acknowledge that audit scores and remediation prompts are diagnostic recommendations to be evaluated by your qualified software engineers before deployment.
To access Scorpr features, you authenticate via OAuth (Google or GitHub) through Supabase. You agree to provide accurate registration details and maintain the security of your authentication tokens and CI/CD API keys (SCORPR_API_KEY). You are solely responsible for all activities and scans initiated under your credentials.
If you suspect unauthorized access or compromised API keys, you must notify Scorpr immediately at [email protected].
Scorpr provides tiered subscription access to accommodate indie developers, growing startups, and full-service dev shops:
| Tier | Pricing | Scanning Allowance | Key Capabilities |
|---|---|---|---|
| Free Tier | $0 / mo | 3 scans per month | Basic SHIELD & PULSE rules, public domain audits, community support. |
| Pro Builder | $29 / mo | Unlimited single-domain audits | Full 4-Engine Suite, ARCHITECT AI Fix Studio, 7-day free trial, Core Web Vitals diagnostics. |
| Agency & Teams | $79 / mo | Fleet domain management | 5 included seats with RBAC, white-label PDF & Web audit exports, custom subdomains, CI/CD automated gates. |
| Enterprise Fleet | Custom Invoicing | High-volume fleet scanning | 99.9% uptime SLA, dedicated Slack/Discord security researcher channel, signed NDAs & custom DPAs. |
Recurring Billing: Paid subscriptions (Pro Builder and Agency) bill recurringly each month through Stripe. Your card will be billed automatically on the renewal date unless canceled prior to the end of the current billing cycle.
7-Day Free Trial: The Pro Builder tier includes a 7-day trial. You may cancel at any time during the trial through your billing settings without being billed.
Cancellation & Refund Policy: You may cancel your subscription at any time. Your access will remain active through the conclusion of the paid billing period. Because compute resources and Chromium worker nodes are provisioned immediately upon scan request, fees are non-refundable except where required by applicable consumer protection laws.
We maintain a clear division of intellectual property ownership:
Scorpr Inc. retains all right, title, and interest in and to the platform, engines (SHIELD, RADAR, PULSE, ARCHITECT), heuristics, rule specifications, software, logos, trademarks, and documentation.
You retain 100% full copyright and intellectual property rights in and to your target application code, domain configurations, custom reports, and the AI remediation fix prompts generated by ARCHITECT for your repositories. Scorpr asserts no intellectual property claims over your source code or generated fix patches.
PLEASE READ THIS SECTION CAREFULLY AS IT LIMITS THE LIABILITY OF SCORPR INC.
THE SCORPR PLATFORM, ENGINES, DIAGNOSTICS, AND AI REMEDIATION PROMPTS ARE PROVIDED ON AN “AS-IS” AND “AS-AVAILABLE” BASIS WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, OR UNINTERRUPTED UPTIME.
TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT SHALL SCORPR INC., ITS DIRECTORS, EMPLOYEES, AFFILIATES, OR SUPPLIERS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, PUNITIVE, SPECIAL, OR CONSEQUENTIAL DAMAGES (INCLUDING LOSS OF PROFITS, REVENUE, DATA, GOODWILL, REPUTATIONAL DAMAGE, WORK STOPPAGE, OR SECURITY BREACHES EXPERIENCED BY YOUR SCANNED WEBSITES) ARISING FROM OR RELATED TO YOUR USE OF THE SERVICE.
IN NO EVENT SHALL SCORPR’S AGGREGATE LIABILITY ARISING FROM THESE TERMS OR YOUR USE OF THE PLATFORM EXCEED THE GREATER OF: (A) ONE HUNDRED U.S. DOLLARS ($100.00 USD); OR (B) THE TOTAL FEES PAID BY YOU TO SCORPR DURING THE TWELVE (12) MONTHS PRECEDING THE CLAIM.
You may terminate your account at any time via the workspace settings. Scorpr may suspend or terminate your access immediately, without prior notice or liability, in the event that: (a) you violate the Authorized Use Policy; (b) your payment fails or undergoes a fraudulent chargeback; (c) your usage threatens platform stability or endangers third-party networks; or (d) required by legal order.
These Terms shall be governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to its conflict of law principles. Any dispute arising under or relating to these Terms shall be resolved exclusively through binding arbitration conducted under the rules of the American Arbitration Association (AAA) in Wilmington, Delaware. You and Scorpr agree that all disputes must be resolved on an individual basis, and you waive any right to bring or participate in a class, collective, or representative action.
For formal legal notices, questions regarding these Terms of Service, or enterprise contract terms, please contact:
Scorpr Inc. • Legal Department
Official Inquiry Email: [email protected]
Response SLA: All verified legal or compliance inquiries receive a written response within 48 business hours.