Terms of service

By creating an account or running a scan you agree to these terms. If you are agreeing on behalf of a company, you are confirming you may bind it.

What the service is

Spartyx is a security scanner. It reads code you point it at and reports what it believes it found: injection risks, hardcoded secrets, vulnerable dependencies, misconfigurations and similar, with a report explaining each one.

What a finding is, and is not

This is the most important clause here, so it is stated plainly rather than buried in capitals.

A scan is evidence, not a guarantee. Static analysis produces false positives — findings that are not real problems — and false negatives — real problems it did not find. A clean report does not mean your code is secure. Deep Review findings are produced with the help of a language model and are labelled as such, because the same code can produce a different result on another run.

Use the output as input to your own judgement. Do not treat it as a certification, and do not present it as one to a third party without saying what produced it.

What you may point it at

• Code: repositories and files you own, or are authorised to analyse.
• Websites: only sites you own or have written permission to test. Surface scanning sends requests to a live system. Running it against something you do not control may be unlawful where you are, and it is your responsibility, not ours.

You may not use the service to:

• Scan systems you have no authorisation for.
• Attack, overload or degrade any system, ours included.
• Resell the scanning service as your own without an agreement with us.
• Circumvent plan limits, device registration or access controls.

We may suspend an account we believe is doing any of the above, and we will say why.

Your account

You are responsible for what happens under your account and for the devices you register as trusted. Tell us promptly if you think either has been compromised.

Plans and billing

Beta access is free and limited. Pro is a paid monthly subscription. Payments are handled by Paddle, who act as the merchant of record — your contract for the purchase is with Paddle, and their terms apply to the transaction alongside these.

Subscriptions renew monthly until cancelled. You can cancel at any time; access continues until the end of the period you have paid for. Refunds are covered by our refund policy.

Prices may change. If they do, we will give notice before it affects an existing subscription.

Availability

The service is provided as-is and while it is in beta it may change, break, or be unavailable. We do not promise a particular uptime, and we do not promise that a scan will complete in a given time.

Liability

To the extent the law allows, we are not liable for losses arising from a vulnerability the scanner did not find, from acting on a finding that turned out to be wrong, or from the service being unavailable. Our total liability is limited to what you paid us in the twelve months before the claim.

Nothing here limits liability that cannot be limited by law.

Your code stays yours

You keep all rights to the code you submit. You grant us permission to process it for the purpose of running your scan and producing your report, and nothing else. We do not use your code to train models. What happens to it afterwards is set out in the privacy notice.

Ending it

You can stop using the service and delete your account at any time. We may end an account for a breach of these terms, and will tell you why.

Changes to these terms

If these terms change materially, the date at the top changes and we will make the change visible rather than quiet.

A note on this document

This was written to describe how the service actually behaves rather than assembled from a template. It has not been reviewed by a lawyer, and it is not legal advice.