Terms and Conditions

1. Acceptance of Terms

By visiting the website, creating an account, selecting a plan, installing the GitHub App, or using SecureRepos, you agree to these Terms and Conditions, the Privacy Policy, Refund Policy, and any checkout or billing disclosures presented at the time of purchase.

SecureRepos is operated by Secure Repos. In these Terms, "we," "us," and "our" refer to Secure Repos and SecureRepos. "You" and "user" refer to the person or organization using the service.

2. Service Description

SecureRepos provides repository security monitoring for individual GitHub users. Features may include repository inventory, automated scans, secret and configuration checks, GitHub Actions checks, dependency and container hygiene checks, finding review, notifications, account activity, and related security workflow tools.

The service is a software tool. It is not a managed penetration test, legal service, incident response service, or guarantee that your repositories are secure.

3. Accounts and Access

You are responsible for the accuracy of account information, the security of login credentials, and all activity under your account. You must be authorized to connect the GitHub organizations, accounts, and repositories you add to SecureRepos.

You may not share credentials, bypass plan limits, reverse engineer the service, interfere with platform security, scan repositories you are not authorized to access, or use the service for unlawful activity.

4. GitHub App Connections

When you install the GitHub App, you authorize SecureRepos to access selected repository metadata and repository content needed to perform scans, generate findings, and track repository status. You should select only repositories that you want monitored under your plan.

You may revoke GitHub App access from GitHub. If access is revoked, suspended, or reduced, scans and repository updates may stop or become incomplete.

5. Plans and Billing

Pricing, billing interval, included repositories, usage limits, and plan features are displayed before purchase. Payment processing is handled by the checkout provider shown at payment. By completing checkout, you authorize the applicable charges shown at purchase.

Where a 7-day Security Preview is offered, a payment method is required. The preview is limited to one repository and one non-comprehensive scan. Unless you cancel before the displayed trial end, the checkout provider will charge the recurring package price and the paid subscription will begin automatically.

If your plan is offered as a subscription, it renews until cancelled according to the checkout terms. Access may be paused, limited, or terminated if payment fails, a charge is disputed, the plan is cancelled, or the account violates these Terms.

The first GitHub account connected to a SecureRepos account is permanently bound to that account. Removing the GitHub App does not reset that binding or create a right to connect a different GitHub account.

6. Security Findings

Findings are generated by automated rules and may include false positives, incomplete results, or missed issues. Severity labels are guidance only. You remain responsible for reviewing results, validating risk, applying fixes, and deciding whether additional security review is needed.

7. Customer Data and Repository Content

Your repository content, organization data, and account data remain yours. You grant us the limited rights needed to operate the service, process scans, generate findings, deliver notifications, provide support, maintain security, and comply with legal obligations.

8. Intellectual Property

SecureRepos, its interface, scanner logic, branding, documentation, and platform materials are owned by Secure Repos or its licensors. You receive a limited, non-transferable right to use the service for your internal business purposes according to your plan.

9. Availability and Changes

We may update, improve, suspend, or discontinue parts of the service. We work to keep the platform reliable, but we do not guarantee uninterrupted or error-free access.

10. Limitation of Liability

To the maximum extent permitted by law, Secure Repos and SecureRepos are not liable for indirect, incidental, special, consequential, exemplary, or punitive damages, including lost profits, lost data, security incidents, repository compromise, or business interruption.

11. Governing Law

These Terms are governed by the laws applicable to Secure Repos, unless mandatory consumer protection laws require otherwise.

12. Contact

For account, billing, or legal questions, contact [email protected].