Last updated: 30 August 2026
These terms are a contract between you and us. Please read them, especially Section 3 (Authorization) and Section 9 (the service is a tool, not a guarantee). By using VibeCodingSecure you agree to them.
VibeCodingSecure ("the service") is operated by Javier Beltran Garrido, an individual trader (sole trader) established in Cyprus, European Union.
In these terms, "we", "us" and "our" mean the operator; "you" means the person or business using the service.
VibeCodingSecure is an automated security scanner for web applications, in particular apps built with AI or "vibe-coding" tools (such as Lovable, Bolt, v0, Cursor and Replit). You submit the URL of a web application and we check it for common, externally-visible security exposures (for example, exposed API keys and publicly readable databases).
We offer three plans. All prices are in euros (EUR):
Any applicable VAT is calculated and added at checkout by Stripe Tax, based on your country. The total shown at checkout is the amount you pay.
You may only scan a domain that you own, or that you have express permission from its owner to test. By submitting a URL you represent and warrant that you have this right.
Scanning domains that belong to third parties without their authorization is strictly prohibited, may be unlawful, and is grounds for immediate termination of your access. Every scan you run is your sole responsibility: you — not us — are legally responsible for ensuring you are authorized, and you agree to indemnify and hold us harmless against any claim, loss or liability arising from a scan you were not authorized to run.
You agree not to use the service to: test systems you are not authorized to test; attack, overload, disrupt or gain unauthorized access to any system; probe, reverse-engineer or disrupt our own service; resell or programmatically abuse the service without our written permission; or do anything unlawful. Our scans are read-only and lightweight, but you remain responsible for how and where you use the service.
The free scan and the checkout do not require you to create an account. To buy, you complete payment through Stripe Checkout. For the Full Report, we deliver the report to you on screen and/or by email. For Monitoring, we use your email address to send you scan alerts.
Payments are processed by Stripe Payments Europe through Stripe Checkout. Your card details are entered directly with Stripe and are never seen, handled or stored by us. Stripe is a certified PCI DSS Level 1 payment provider. All prices are in euros (EUR); VAT is added where applicable by Stripe Tax according to your location.
We may change our prices, but a change never affects a purchase you have already completed. For Monitoring, any price change applies only from your next billing period, and we will notify you in advance.
The Full Report is digital content supplied immediately after payment. By purchasing, you expressly request that we begin generating and delivering it right away, and you acknowledge that you therefore lose the 14-day right of withdrawal once delivery has begun. If a technical failure on our side means the report is not delivered, you are entitled to a full refund. See our Refund & Cancellation Policy.
Monitoring is a rolling monthly subscription with no minimum term. It renews automatically each month until you cancel. You can cancel at any time; cancellation takes effect at the end of your current paid period, and you keep access until then. We do not refund periods already billed, except where the service failed. Full details are in our Refund & Cancellation Policy.
VibeCodingSecure runs automated checks for a limited set of common, externally-visible security issues. It is provided "as is" and "as available". A scan that finds nothing does not mean your application is secure or free of vulnerabilities. A report is not a professional penetration test, a security audit, or a legal/compliance assessment, and is not a substitute for one. You are responsible for acting on the findings and for the security of your own applications. We do not warrant that the service will be uninterrupted, error-free, or that it will detect every issue.
Nothing in these terms limits any liability that cannot be limited by law — including liability for death or personal injury caused by negligence, for fraud, or your mandatory rights as a consumer.
Subject to that, we are not liable for any indirect, incidental, special or consequential loss, or for loss of data, profits, revenue or goodwill. Our total aggregate liability to you for any claim relating to the service is limited to the total amount you paid us for the product or subscription giving rise to the claim in the 12 months before the claim.
The results of your scans are sensitive security information. We treat them as confidential, we do not sell them or share them with third parties (other than the sub-processors needed to run the service — see the Privacy Policy), and we keep them only as long as needed and then delete them. The Privacy Policy explains what we process and for how long.
The service, this website, and our software and branding are owned by us. When you buy a Full Report, we grant you a licence to use that report for your own internal purposes. You may not copy or resell our software, or present our reports as your own product.
We may suspend or terminate your access if you breach these terms — in particular Section 3 (Authorization) or Section 4 (Acceptable use) — or where the law requires it. You may stop using the service at any time; for Monitoring, cancel as described above.
We may update these terms. The "Last updated" date at the top shows the current version. Material changes that affect an active subscription will be notified to you by email before they take effect. Continuing to use the service after a change means you accept it.
These terms are governed by the laws of the Republic of Cyprus. This does not deprive you of the mandatory consumer-protection rights of your country of residence in the EU.
If you have a complaint, please contact us first at support@vibecodingsecure.com — we aim to resolve issues quickly. The European Commission's online dispute resolution (ODR) platform, formerly at ec.europa.eu/consumers/odr, was discontinued in July 2025; if we cannot resolve a dispute directly, you may refer it to a competent alternative dispute resolution (ADR) body or consumer authority in your country of residence.
Questions about these terms: support@vibecodingsecure.com.
VibeCodingSecure — operated by Javier Beltran Garrido, Cyprus (EU) · support@vibecodingsecure.com