Terms & Conditions

These Terms and Conditions (the “Terms”) form a legally binding agreement between you (“you,” “your,” or the “Customer”) and Dealer OS LLC, the operator of CodeCheck (“CodeCheck,” “we,” “us,” or “our”). They govern your access to and use of the CodeCheckwebsite, application, APIs, command-line tools, and related services (collectively, the “Service”).

By creating an account, checking a box indicating acceptance, accessing the Service, or making a purchase, you acknowledge that you have read, understood, and agree to be bound by these Terms, our Privacy Policy, our Acceptable Use Policy, our Cookie Policy, and our Refund & Cancellation Policy, each of which is incorporated by reference. If you do not agree, you must not use the Service.

If you use the Service on behalf of an organization, you represent that you have authority to bind that organization, and “you” refers to that organization.

You must be at least 18 years old and capable of forming a binding contract to use the Service. The Service is not directed to children.

• You must provide accurate, current information and keep it updated.
• You are responsible for safeguarding your account credentials and for all activity that occurs under your account.
• You must notify us promptly at bekzod@dealer-os.io of any unauthorized use or suspected breach of security.
• We may suspend or terminate accounts that violate these Terms, are used unlawfully, or create risk or legal exposure for us.

CodeCheck is an automated security-scanning tool that inspects live web applications and reports potential security weaknesses (for example, exposed keys, misconfigured row-level security, injection risks, and weak HTTP headers), and may generate AI-assisted remediation guidance and exploit walkthroughs for educational and defensive purposes.

The Service is provided to help you identify and fix issues. It is not a guarantee that your systems are secure, compliant, or free of vulnerabilities. Security is an ongoing process; a clean scan does not mean an application is safe. See Disclaimers for details.

We may add, change, suspend, or discontinue features at any time. We are not liable to you for any modification, suspension, or discontinuation of the Service, except as expressly stated in these Terms.

You may only use the Service to scan systems that you own or that you are expressly authorized in writing to test. Scanning, probing, or attempting to exploit systems without authorization may violate the U.S. Computer Fraud and Abuse Act (CFAA), equivalent state and international laws, and third-party terms of service.

• For deeper scans, we may require you to verify ownership or control of a domain before testing.
• You are solely responsible for obtaining all necessary authorizations, permissions, and legal clearances before initiating any scan.
• You agree to indemnify us for any claim arising from your scanning of systems you were not authorized to test.

Your use of the Service is also subject to our Acceptable Use Policy.

The Service performs active probing by design: it sends real requests to the target. By default these are read-only and non-destructive. You may additionally opt in to active exploit mode, which sends bounded requests that may change state or add load in order to demonstrate impact — for example, write-then-delete marker records, timing payloads, a short burst of failed login attempts and default-credential checks, injection markers, a cloud-metadata request canary, and a forged host header.

• Active mode is off by default and, in the hosted Service, requires a verified domain plus an explicit, per-scan acceptance.
• When you initiate any scan — and separately when you accept active mode — we record your consent, including the time, your IP address, the target, and the specific probes accepted, as a durable audit record.
• You represent and warrant that you are authorized to permit this testing, and you accept full responsibility for that authorization and for any effects of active testing on the target.

The Pro plan offers optional automated monitoring: once you enroll a verified domain, the Service will re-scan it on a recurring schedule (in safe, read-only mode) and email you the results, including a weekly summary and immediate alerts when a new critical or high-severity issue is detected.

• Enrolling a domain constitutes your standing authorization for these recurring scans until you pause or remove the monitor, which you can do at any time from the app.
• These monitoring and alert emails are transactional messages tied to your account and the service you requested; you consent to receive them as part of the feature.

The Service is offered under the following plans:

• Free — limited surface-level scanning (for example, one scan per day), subject to change.
• Deep Scan — $4.99 (one-time) — a single full deep scan including all modules, the AI fix report, and exploit walkthroughs.
• Pro — $20 per month — a recurring subscription with unlimited deep scans, automated re-scans, and priority reports.

Prices are in U.S. dollars and exclusive of taxes unless stated otherwise. You are responsible for applicable taxes. We may change pricing prospectively; changes do not affect the current paid term of an active subscription.

Payment processing.Payments are processed by Stripe, Inc. By purchasing, you also agree to Stripe's terms. We do not store full payment card numbers.

Subscriptions and renewal. Paid subscriptions renew automatically at the then-current price each billing cycle until cancelled. You authorize us and our payment processor to charge your payment method on each renewal.

Cancellation. You may cancel a subscription at any time through the billing portal; cancellation takes effect at the end of the current billing period, and you retain access until then. Refund eligibility is described in our Refund & Cancellation Policy.

You agree that you will not, and will not permit anyone to:

• use the Service to test any system without authorization, or in violation of any law or third-party right;
• use findings or exploit information to attack, damage, or gain unauthorized access to any system;
• reverse engineer, decompile, resell, sublicense, or create derivative works of the Service except as permitted by law;
• interfere with or disrupt the integrity or performance of the Service, or attempt to circumvent usage limits or security controls;
• use the Service to build a competing product, or scrape it via automated means outside documented APIs;
• upload malware or unlawful, infringing, or harmful content.

Full details are in our Acceptable Use Policy. Violations may result in immediate suspension or termination without refund.

The Service, including its software, scanners, reports templates, content, and trademarks, is owned by Dealer OS LLC or its licensors and is protected by intellectual property laws. We grant you a limited, non-exclusive, non-transferable, revocable license to use the Service in accordance with these Terms.

Your content.You retain ownership of the data, domains, and materials you submit (“Customer Content”). You grant us a license to process Customer Content as necessary to provide and improve the Service. Scan reports we generate for you may be used by you for your internal security purposes.

Feedback. If you send us feedback or suggestions, you grant us a perpetual, royalty-free license to use it without restriction.

THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE” WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WITHOUT LIMITATION IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.

We do not warrant that the Service will be uninterrupted, timely, secure, or error-free, that scan results will be complete or accurate, that all vulnerabilities will be detected, or that any issues reported will be exploitable or, conversely, safe to ignore. You are responsible for evaluating and acting on the Service's output.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT WILL Dealer OS LLC, ITS OFFICERS, EMPLOYEES, OR SUPPLIERS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, DATA, GOODWILL, OR SECURITY BREACH, ARISING OUT OF OR RELATED TO THE SERVICE OR THESE TERMS, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

OUR TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS ARISING OUT OF OR RELATED TO THE SERVICE OR THESE TERMS WILL NOT EXCEED THE GREATER OF (A) THE AMOUNTS YOU PAID TO US FOR THE SERVICE IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM, OR (B) ONE HUNDRED U.S. DOLLARS ($100).

Some jurisdictions do not allow certain limitations, so some of the above may not apply to you. Nothing in these Terms limits liability that cannot be limited under applicable law.

You agree to defend, indemnify, and hold harmless Dealer OS LLC and its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or related to: (a) your use or misuse of the Service; (b) your scanning of any system without proper authorization; (c) your violation of these Terms or any law; or (d) your Customer Content.

You may stop using the Service at any time. We may suspend or terminate your access immediately if you breach these Terms, create legal or security risk, or fail to pay fees. Upon termination, your right to use the Service ends. Sections that by their nature should survive (including intellectual property, disclaimers, limitation of liability, indemnification, and governing law) will survive.

We may modify these Terms from time to time. If we make material changes, we will update the “Last updated” date and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the revised Terms.

These Terms are governed by the laws of the State of Tennessee and applicable U.S. federal law, without regard to conflict-of-law rules. The exclusive venue for any dispute not subject to arbitration will be the state or federal courts located in Tennessee, and you consent to their jurisdiction.

Informal resolution. Before filing a claim, you agree to try to resolve the dispute informally by contacting us at bekzod@dealer-os.io.

Arbitration. Except for claims that qualify for small claims court or seek injunctive relief for intellectual property misuse, any dispute arising out of these Terms will be resolved by binding individual arbitration rather than in court. You and Dealer OS LLC waive any right to a jury trial and agree that claims may only be brought on an individual basis and not as part of a class or representative action, to the extent permitted by law.

These Terms, together with the policies incorporated by reference, are the entire agreement between you and Dealer OS LLC regarding the Service. If any provision is found unenforceable, the remaining provisions remain in effect. Our failure to enforce a provision is not a waiver. You may not assign these Terms without our consent; we may assign them in connection with a merger, acquisition, or sale of assets.

Questions about these Terms can be sent to Dealer OS LLC at bekzod@dealer-os.io.