Terms of Service

FixVibe is a Dynamic Application Security Testing (DAST) service operated by EGO HERO LLC (“FixVibe”, “we”, “us”, “our”). By creating an account, signing in, or running an anonymous scan, you (“you”, “Customer”) agree to these Terms, our Acceptable Use Policy, our Disclaimer, and our Privacy Policy. If you do not agree to all of the foregoing, do not use FixVibe.

You must be at least 16 years old to use FixVibe. If you are using FixVibe on behalf of an organization, you represent and warrant that you have authority to bind that organization to these Terms.

You may only submit URLs and hostnames that you own, operate, or have express written authorization from the owner to test. Active checks (including but not limited to SQL injection, cross-site scripting, server-side template injection, open-redirect, and CORS probing) only execute against domains for which you have completed our ownership-verification flow.

You are solely responsible for the lawfulness of your use of FixVibe. Unauthorized scanning of systems you do not own may violate the U.S. Computer Fraud and Abuse Act, the U.K. Computer Misuse Act, the EU NIS2 Directive, and similar laws in other jurisdictions. We cooperate with law enforcement and may disclose your scan history (target, IP, user-agent, timestamps) in response to valid legal process.

FixVibe's findings, severity ratings, descriptions, evidence, and suggested remediations (including any text presented as a “fix”, “prompt”, or step-by-step instruction) are informational only. They are generated by automated heuristics and, in some cases, by AI language models. They may be:

• incomplete (we may miss real vulnerabilities);
• incorrect (we may flag issues that are not exploitable);
• out-of-date relative to the current state of your application;
• incompatible with your specific stack, configuration, or business logic.

Before applying any suggested remediation — whether by hand or by passing it to an AI coding tool — you must independently review it, test it in a non-production environment, and confirm that it is correct, complete, and appropriate for your system. FixVibe is not, and does not purport to be, a substitute for professional security review, penetration testing, or a qualified security engineer. See Disclaimer & Limitations for full detail.

Active scans perform bounded verification against your application. In rare cases, that testing can cause unexpected behavior including slow responses, error spikes, partial outages, or test data being written to production stores. By running an active scan you acknowledge and accept these risks. We recommend running active scans against staging environments where possible.

FixVibe is not liable for any loss of revenue, data, customers, or goodwill resulting from running an active scan against a system you have authorized us to test.

Scheduled re-scans. If you enable a recurring schedule on a verified domain (Pro / Unlimited only), each cron-triggered scan inherits the authorization-to-scan attestation that you made when first verifying domain ownership and starting the scan. The attestation persists for as long as the schedule is enabled. You may revoke at any time by disabling the schedule at Dashboard → Domains; the next cron tick will skip the domain.

Paid plans are billed monthly or annually via Stripe. Subscriptions renew automatically unless you cancel before the renewal date. You may cancel at any time from Account → Billing; your access continues until the end of the period you have paid for.

Except where required by mandatory consumer-protection law, fees are non-refundable. EU and UK consumers acknowledge that FixVibe is a digital service that begins providing benefits immediately upon scan submission, and that by running a scan or otherwise beginning to use the paid features they expressly request the performance of the service to begin during the cooling-off period and waive their right to withdraw under EU Directive 2011/83/EU Article 16(m). For the avoidance of doubt, we may offer goodwill refunds at our sole discretion.

Pricing, plan limits, and feature availability may change. Material changes affecting active paid plans will be announced with at least 30 days' notice.

You retain all rights in any data you submit to FixVibe (the “Customer Data”), including scan targets, request payloads, response captures, evidence blobs, and any text you provide. You grant EGO HERO LLC a limited, worldwide, non-exclusive, royalty-free license to host, process, transmit, and display the Customer Data solely as necessary to operate FixVibe for you and to maintain, troubleshoot, and improve the service. We do not use Customer Data to train third-party AI models.

GitHub-integrated scans. If you connect the optional GitHub integration (Pro and Unlimited plans) and run a repo scan, we fetch repository content over the GitHub REST API using your stored OAuth token. Source content is processed in memory to produce findings; only the individual finding evidence we surface is persisted, and only for the same retention window as ordinary scans. We never write full source dumps to long-term storage and we never use repository content to train AI models. See the Privacy Policy for full detail.

We aim for high availability but make no uptime guarantee unless we have agreed to a separate written service-level agreement. Hobby-tier features may change or be discontinued without notice. Paid features will not be discontinued without at least 30 days' notice.

FIXVIBE IS PROVIDED “AS IS” AND “AS AVAILABLE,” WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ACCURACY, COMPLETENESS, OR THAT THE SERVICE WILL BE UNINTERRUPTED, SECURE, OR ERROR-FREE.

We do not warrant that FixVibe will detect every vulnerability in your application. We do not warrant that any finding is accurate or exploitable in your environment. We do not warrant that any suggested remediation, including any AI-generated text, is correct, safe to apply, or appropriate for your use case. The absence of a finding is not, and must not be relied upon as, evidence that your application is secure.

Some jurisdictions do not allow the exclusion of certain warranties; in those jurisdictions, the foregoing exclusions apply only to the maximum extent permitted by law.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, EGO HERO LLC AND ITS AFFILIATES, OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, AND LICENSORS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, DATA, BUSINESS, GOODWILL, OR ANTICIPATED SAVINGS, ARISING OUT OF OR RELATED TO YOUR USE OF — OR INABILITY TO USE — FIXVIBE, EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

OUR TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THESE TERMS, FOR ALL CLAIMS COMBINED, WILL NOT EXCEED THE GREATER OF (A) THE FEES YOU ACTUALLY PAID TO US IN THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE CLAIM, OR (B) ONE HUNDRED U.S. DOLLARS (USD 100).

The foregoing limitations apply regardless of the theory of liability — contract, tort (including negligence), strict liability, or otherwise. They do not apply to liability that cannot be limited under applicable law (for example, gross negligence, willful misconduct, or fraud under EU consumer law, or any liability that under your home jurisdiction's mandatory consumer protections cannot be waived).

You will defend, indemnify, and hold harmless EGO HERO LLC, its affiliates, officers, directors, employees, and agents from and against any claim, demand, loss, liability, damage, fine, penalty, cost, or expense (including reasonable attorneys' fees) arising out of or related to:

• your use of FixVibe to scan, probe, or otherwise interact with any system you do not own or are not authorized in writing to test;
• your application of any suggested remediation, AI-generated prompt, or finding-derived guidance — including any production outage, data corruption, or downstream security incident resulting from such application;
• your violation of these Terms or our Acceptable Use Policy;
• your violation of any applicable law or third-party right.

You represent that you are not, and are not acting on behalf of, a person or entity (a) ordinarily resident in any country or region subject to comprehensive U.S. or EU sanctions (currently including Cuba, Iran, North Korea, Syria, and the Crimea, DNR, and LNR regions of Ukraine); (b) listed on any U.S. Treasury OFAC Specially Designated Nationals list, U.S. Commerce Department denied-persons list, EU consolidated financial sanctions list, or U.K. HMT consolidated list; or (c) otherwise prohibited from receiving software or services from a U.S. company under applicable export-control laws. You will not use FixVibe to facilitate any activity that violates such laws.

We may suspend or terminate your access to FixVibe at any time, with or without notice, if we reasonably believe you have violated these Terms, the Acceptable Use Policy, or applicable law, or if continued provision of the service would expose us to legal or operational risk. You may terminate at any time by deleting your account from Account → Privacy. Sections 4, 5, 7, 9, 10, 11, 12, 14, 15, 16, 17, 18, and 20 survive termination.

Neither party is liable for any failure or delay in performance caused by events beyond its reasonable control, including acts of God, war, terrorism, civil unrest, governmental action, pandemic, labor disputes, internet or telecommunications outages, or failures of upstream service providers (including but not limited to Vercel, Supabase, Stripe, and Cloudflare).

These Terms, and any dispute arising out of or related to them or to FixVibe, are governed by the laws of the State of Wyoming, USA (the state of registration of EGO HERO LLC), without regard to conflict-of-laws principles. The U.N. Convention on Contracts for the International Sale of Goods does not apply.

If you are a resident of the United States, you and EGO HERO LLC agree that any dispute, claim, or controversy arising out of or relating to these Terms or to FixVibe (each, a “Dispute”) will be resolved by binding individual arbitration administered by the American Arbitration Association (“AAA”) under its Consumer Arbitration Rules. The arbitration will be conducted in the English language, on a documents-only basis where the amount in controversy is under USD 25,000 (or remotely otherwise), and seated in Cheyenne, Wyoming. Judgment on the award may be entered in any court of competent jurisdiction.

CLASS ACTION WAIVER. YOU AND EGO HERO LLC AGREE THAT EACH MAY BRING CLAIMS AGAINST THE OTHER ONLY IN AN INDIVIDUAL CAPACITY, AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS, COLLECTIVE, OR REPRESENTATIVE PROCEEDING. THE ARBITRATOR MAY NOT CONSOLIDATE MORE THAN ONE PERSON'S CLAIMS AND MAY NOT PRESIDE OVER ANY FORM OF A REPRESENTATIVE OR CLASS PROCEEDING.

30-day opt-out. You may opt out of this arbitration agreement and class waiver by sending written notice to support@fixvibe.app within 30 days of first accepting these Terms. Your notice must state your name, your account email, and that you are opting out of arbitration. Opting out does not affect any other provision of these Terms.

Either party may bring an individual action in small-claims court for disputes within that court's jurisdiction, and may seek injunctive or other equitable relief in court for infringement of intellectual property or unauthorized access to FixVibe.

If any portion of this Section 16 is held unenforceable, the remainder will be enforced to the maximum extent permitted; if the class action waiver itself is held unenforceable, the entire arbitration agreement is void as to the affected dispute and the litigation will proceed in the courts identified in Section 15.

Consumers ordinarily resident in the European Union, the United Kingdom, or any other jurisdiction whose mandatory law grants them the right to bring claims in their home courts retain that right. The arbitration agreement and class action waiver in Section 16 do not apply to such consumers to the extent they conflict with mandatory local consumer protections.

Scan reports may identify a third-party hostname and assert that it has security weaknesses. Because our findings are heuristic and may include false positives, you agree that you will not publicly post, share on social media, or otherwise make available to the general public any FixVibe scan report or screenshot that identifies a target hostname you do not own or operate, without first obtaining the target operator's written consent.

This restriction does not prohibit (i) responsible disclosure to the affected operator, (ii) sharing reports for systems you own or operate, or (iii) sharing redacted summaries that do not identify a target.

We may revise these Terms from time to time. Material changes will be announced in-app or by email at least 14 days before taking effect. Continued use of FixVibe after the effective date constitutes acceptance of the revised Terms. The current version and effective date are shown at the top of this page.

These Terms, together with the Acceptable Use Policy, the Disclaimer, and the Privacy Policy, constitute the entire agreement between you and EGO HERO LLC regarding FixVibe and supersede any prior or contemporaneous agreements on the same subject. If any provision is held unenforceable, the remaining provisions remain in full force and effect. Our failure to enforce any right is not a waiver of that right. You may not assign these Terms without our written consent; we may assign them in connection with a sale, merger, or reorganization. There are no third-party beneficiaries.

From time to time we may offer promotional codes, invite links, referral credits, or other promotions (each, a Promotional Offer) that grant time-limited access to paid features without payment. Each Promotional Offer is governed by these Terms and by any additional rules we publish for that specific offer.

Each Promotional Offer is subject to per-campaign eligibility rules which may include a start and end date, a maximum total number of redemptions, a one-per-user limit, a one-per-network (per-IP) limit, exclusion of users with an active paid subscription, and any other restrictions we publish on the landing page for that offer. We reserve the right to invalidate codes; refuse, void, or reverse any redemption; revoke any active app-granted trial; or modify, suspend, or end any Promotional Offer at any time, without notice and without liability, including where we determine in good faith that an attempt is abusive, automated, fraudulent, made in bad faith, or otherwise inconsistent with the spirit of the offer.

App-granted trials activate immediately on successful redemption and automatically end at the stated trial duration. At the end of the trial your workspace returns to the Free plan with no charge to you and no subscription created — to keep using paid features you must separately subscribe through Stripe Checkout. Promotional Offers have no cash value, are not transferable, may not be combined with other offers unless we expressly say so, are limited to one per person and per workspace unless we expressly say so, and are void where prohibited by law. Where local law requires it, statutory consumer rights are not affected by this section.

We may run promotional contests, sweepstakes, giveaways, or community challenges, including the FixVibe Security Preflight Challenge (each, a Challenge). Each Challenge has its own published rules with the entry period, prize categories, eligibility criteria, and verification procedure. By entering a Challenge you agree to those published rules, to these Terms, to our Acceptable Use Policy, and to our Privacy Policy.

You confirm that you are at least 18 years old, that you own, operate, or are explicitly authorized to test every site, app, or domain you submit, and that your entry does not violate any applicable law, contract, or third-party right. You will not post or share sensitive findings, exposed secrets, admin paths, tokens, exploit details, or detailed vulnerability output publicly while participating, and you will share only the overall score, rating, or other metric we explicitly designate for public sharing.

We may exclude or disqualify any entry that violates the published rules; that involves a throwaway, test-only, intentionally vulnerable, honeypot, demo, or challenge-created project; that targets a domain you cannot demonstrate authorization to test; or that we determine in good faith is abusive, misleading, automated, or fraudulent. Winners may be required to verify domain control by DNS TXT record, email from the domain, a hosted verification file, or another reasonable method before any prize is delivered, and failure to verify within a reasonable time may result in forfeiture.

Prizes are awarded by us as described in the published rules for the Challenge. Prizes have no cash value, are not transferable, and may not be combined with other offers unless we expressly say so. Where applicable law requires it, you are responsible for any taxes on the value of a prize. If a winner cannot be reached, fails to verify eligibility, or declines, we may select an alternate winner or leave the category unawarded at our discretion.

Sharing your score publicly on Reddit, Product Hunt, or any other community is optional and is never a condition of winning. Third-party platform metrics — including but not limited to upvotes, likes, follows, comments, reposts, or platform ranking — are not used to determine winners. Each Challenge is not sponsored, endorsed, administered by, or associated with Reddit, Product Hunt, or any other third-party platform, and by entering you release each such platform from any liability related to the Challenge. The Challenge is void where prohibited by law and we may exclude entrants from jurisdictions where the Challenge cannot lawfully be offered.

Selected participants may be invited to appear on the FixVibe homepage, challenge page, or recap post. We will only feature a participant's project name, public score, rating, stack, quote, username, or domain if the participant gives explicit permission at the time of entry or by separate consent.

Operations and billing: support@fixvibe.app. Privacy and data subject requests: privacy@fixvibe.app.

EGO HERO LLC, registered in the State of Wyoming, USA.