Terms of Service

Last updated: February 2026

1. Operator

The Shieldify platform (accessible at shieldify.dev, app.shieldify.dev and api.shieldify.dev) is operated by Pierre HERAUD, sole proprietorship (micro-entreprise), SIRET 883 108 623 00025, located at 4 rue Henri Esteve, 34130 Lansargues, France.

Contact: contact@shieldify.dev

Hosting: OVHcloud SAS, 2 rue Kellermann, 59100 Roubaix, France.

2. Definitions

• "Service" — the Shieldify platform, including website, application, and API
• "User" — any person who creates an account on Shieldify
• "Scan" — an automated security analysis of a source code repository
• "Report" — the PDF document generated after a scan
• "Credit" — a unit of value used to pay for scans

3. Account Registration

To use Shieldify, you must:

• Create an account with a valid email address
• Provide a password meeting our security requirements (minimum 12 characters, 1 uppercase, 1 lowercase, 1 digit, 1 special character)
• Verify your email address via the confirmation link sent to you

You are responsible for maintaining the confidentiality of your credentials. You must notify us immediately of any unauthorized access at contact@shieldify.dev.

4. Description of the Service

Shieldify provides automated security audits of source code repositories hosted on GitHub or GitLab. The Service includes:

• Repository pre-analysis (file count, languages, size estimation)
• Automated security scanning (SAST, SCA, secret detection, IaC, license compliance)
• AI-powered analysis and contextualization of findings (using Anthropic Claude)
• Generation of professional PDF reports (Executive and Technical versions)
• Security scoring on an A-F scale

Shieldify is an automated tool and does not replace a professional security audit. Reports are generated for informational purposes. We do not guarantee the detection of all vulnerabilities.

5. Source Code Handling

Your source code is cloned into an ephemeral Docker container running in RAM (tmpfs) for the sole purpose of security analysis. The container and all source code are permanently destroyed immediately after the scan completes. Source code is never written to persistent storage.

Only scan results (JSON) and generated reports (PDF) are stored. You retain full ownership of your source code at all times.

6. Pricing & Payment

Free tier

Upon registration, each user receives 1 free credit. Free scans are limited to public repositories and produce an Executive Summary report.

Credits (one-time purchase)

Credits can be purchased in packs. Credits never expire. Prices are displayed in euros (EUR), inclusive of applicable taxes.

Subscriptions (monthly)

Payments

All payments are processed by Stripe. By making a purchase, you agree to Stripe's terms of service. Prices may be updated with 30 days' notice to active subscribers.

Refunds

• Failed scans: if a scan fails due to a technical error on our side, the credit is automatically refunded to your balance
• Credit packs: unused credits may be refunded within 14 days of purchase, in accordance with the EU consumer right of withdrawal
• Subscriptions: you may cancel at any time; the subscription remains active until the end of the current billing period. No prorated refunds for the current period.

7. User Obligations

You agree to:

• Only scan repositories you own or have explicit authorization to scan
• Not use the Service for any illegal purpose
• Not attempt to circumvent rate limits, authentication, or other security measures
• Not reverse engineer, decompile, or extract any part of the Service
• Not resell or redistribute generated reports without authorization

We reserve the right to suspend or terminate accounts that violate these terms.

8. Intellectual Property

• Your code: you retain full ownership of your source code. We claim no rights over it.
• Reports: generated reports are licensed to you for your internal use. The report format, templates, and Shieldify branding remain our property.
• Service: the Shieldify name, logo, website, application, and underlying technology are the exclusive property of Pierre HERAUD.

9. Limitation of Liability

Shieldify is provided "as is". To the maximum extent permitted by applicable law:

• We do not guarantee that the Service will detect all security vulnerabilities in your code
• We are not liable for any damages resulting from vulnerabilities that were not detected by the Service
• We are not liable for any loss of data, revenue, or profits arising from the use of the Service
• Our total liability is limited to the amount you paid for the Service in the 12 months preceding the claim

Nothing in these terms excludes liability for fraud or willful misconduct.

10. Service Availability

We aim for high availability but do not guarantee uninterrupted access. Planned maintenance will be communicated in advance when possible. We are not liable for downtime caused by third-party services (GitHub, GitLab, Stripe, cloud providers).

11. Account Deletion

You may delete your account at any time from the Settings page. Deletion is permanent and irreversible. All personal data, scan history, and reports are permanently destroyed. Payment records are retained for 10 years as required by French accounting law.

12. Modifications

We may update these terms from time to time. Significant changes will be communicated via email at least 30 days before they take effect. Continued use of the Service after changes take effect constitutes acceptance of the new terms.

13. Governing Law & Disputes

These terms are governed by French law. In case of dispute, the parties will first attempt amicable resolution. Failing that, disputes will be submitted to the competent courts of Montpellier, France.

As a European consumer, you may also use the EU Online Dispute Resolution platform: https://ec.europa.eu/consumers/odr.