Terms of Service

You retain ownership of your code and data. To provide security reporting, dashboards, and compliance views, you grant RunSec a limited, non-exclusive license to process metadata and finding summaries you submit — including scan results, project identifiers, and associated report fields — solely to operate and improve the Service.

You are responsible for the code you scan, the systems you connect, and ensuring you have the right to analyze that code. You must configure access controls, API keys, and integrations appropriately for your organization.

You may only use the Service to analyze source code and systems that you legally own, or for which you have received explicit, unambiguous written authorization to assess. You may not use the Service for illegal hacking activities, unauthorized vulnerability research on third-party infrastructure, or any activity that violates applicable cyber-security laws. RunSec is strictly intended for defensive application security and authorized security assessment workflows.

The Service provides automated security analysis and guidance. It does not guarantee detection of every vulnerability, and outputs are not a substitute for professional security review or compliance certification.

We reserve the right to suspend or terminate your access to the Service at any time, without prior notice or liability, if you breach these Terms, abuse the API, or engage in any activity that threatens the security or stability of the Service.

To the maximum extent permitted by applicable law, RunSec and its affiliates shall not be liable for any indirect, incidental, special, or consequential damages (including loss of profits, data, or goodwill). In no event shall RunSec's total aggregate liability for all claims arising out of or related to these Terms exceed the total amount actually paid by you to RunSec in the twelve (12) months preceding the event giving rise to liability.

Legal inquiries: [email protected].