Terms

The short version

Only submit targets you own or are explicitly authorized to have scanned. PatchVex fetches the URLs you submit and, for repository scans, clones and analyzes the source code you submit — you are responsible for having the right to request that. See Security Testing Authorization for the full detail, and Acceptable Use Policy for what's explicitly out of bounds.

Your content

PatchVex does not claim ownership of the targets, repositories, source code, or findings you submit or that PatchVex generates for you, merely because PatchVex processed them. You retain your rights in what you submit. We use it only to provide the scanning and reporting functionality of the service to you.

Findings are analysis, not a guarantee

PatchVex's output is the result of automated security analysis. We do not guarantee complete vulnerability detection, and analysis can include false positives or miss real issues. Findings require your own review and judgment — see Security Testing Authorization for the full statement on this.

Service availability

PatchVex is provided as-is, without warranty, while in active development. We may change, suspend, or discontinue parts of the service, including specific scan types or checks, as the product evolves.

Acceptable use

Your use of PatchVex is also governed by our Acceptable Use Policy. We may suspend or restrict access for activity that violates it.

Liability

To the extent permitted by law, PatchVex is not liable for indirect, incidental, or consequential damages arising from your use of the service, including damages arising from scanning a target, from findings PatchVex did or did not surface, or from actions you take based on PatchVex's output.

Contact

Questions about these terms can be sent through the contact channels listed on our contact page.