Terms

The service

LockYourVibe (lockyourvibe.com) offers a free, read-only check of a public web page you choose, and a paid full report purchased through Stripe Checkout. These terms apply to both.

Scan authorization

By starting a scan, you represent that you own the target application or that the owner has given you permission to test it. You authorize LockYourVibe to send read-only HTTP GET requests to that public URL and to same-origin resources linked from it, including JavaScript files and source maps, and to request common paths such as /.env and /.git/config. If the page contains a Supabase project URL and an anon key, you authorize a read-only request for a small number of common table names using that anon key only. A paid report may also request a few more common files and API paths, read public git logs when /.git is already exposed, probe Firebase with the client config the page already ships, and send one GET with a foreign Origin header to check CORS. Those requests are still GET only.

You will not point the scanner at systems you are not allowed to test. We do not want credentials for the target, and we will not sign in, submit forms, or send requests that create, update, or delete data. Requests may still show up in the server logs of the target.

Acceptable use

Do not use the service to attack, disrupt, or probe networks that are not yours. Do not bypass the ownership checkbox, the rate limit, or the block on private addresses. We may refuse a scan, slow you down, or stop offering the service.

What a grade is

A grade and a finding describe what this quick scan could see on the public surface. Silence is not a clean bill of health. The scan is not a penetration test, not a code audit, and not legal or compliance advice.

No warranty

THE SERVICE IS PROVIDED AS IS AND AS AVAILABLE, WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. A GRADE, A FINDING, A FIX PROMPT, OR THE ABSENCE OF A FINDING IS NOT A GUARANTEE THAT AN APPLICATION IS SECURE, COMPLETE, COMPLIANT, OR FREE OF VULNERABILITIES. LOCKYOURVIBE IS NOT A SUBSTITUTE FOR A PROFESSIONAL SECURITY AUDIT.

Limitation of liability

To the fullest extent the law allows, LockYourVibe and the people who operate it are not liable for indirect, incidental, special, consequential, or lost-profit damages, or for security incidents, downtime, or decisions you make from a report. If a court finds liability anyway, the total is limited to the amount you paid us in the three months before the claim, or fifty US dollars if you paid nothing.

Paid reports

The full report costs $19 US dollars at the launch price and is purchased through Stripe Checkout. You authorize a deeper read-only scan of the URL attached to that purchase. Fix prompts are suggestions for you or your coding tool to review. You are responsible for the diff you apply.

Refunds: email hello@lockyourvibe.com within 7 days of the charge and we will refund the report.

Contact

Questions about these terms: hello@lockyourvibe.com.