Terms of Service

Graneth ("the Service") is a security layer for AI-generated code: a free, account-less MCP tool (pre_flight_check) that screens code at generation time for AI-hallucinated/slopsquatted packages and hardcoded secrets, plus a paid team dashboard that scans GitHub pull requests with static analysis (Semgrep) and LLM-assisted triage, enforces policy, and issues signed scan receipts.

These Terms govern your use of both the free tool and the paid dashboard. If you use the Service on behalf of an organization, you confirm you have authority to bind that organization.

The dashboard is accessed by signing in with GitHub OAuth, requesting only the scopes the Service needs. You are responsible for all activity under your account and for keeping any issued API tokens confidential.

pre_flight_check requires no account, no registration, and no credit card.

You may only submit repositories and code you own or are authorized to scan. You may not attempt to bypass rate limits or authorization checks, reverse-engineer the scanning engine, resell the Service without agreement, or use it to build a competing product.

Deep Scans and Auto-Fix remediation PRs are paid for with credits, purchased in one-time packs through Stripe Checkout. Credits do not auto-renew, are not a subscription, and do not expire. Repository scanning and pre_flight_check remain free and unlimited.

Purchases are final. Refunds are granted only where required by applicable law or at our sole discretion.

Graneth is built to fail closed: any check that cannot run is reported as an error, never silently marked clean. Even so, static analysis and LLM-assisted triage cannot detect every vulnerability — false positives and false negatives are both possible.

A "CERTIFIED" or passing result is not a warranty that scanned code is free of security issues. You remain responsible for your own security review and final merge decisions.

You retain all rights to the code, repositories, and data you submit. You grant Graneth a limited license to process that content solely to provide the Service — running analysis, generating findings, and, where you request it, opening remediation pull requests.

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

To the maximum extent permitted by law, Graneth's total liability arising from these Terms or the Service is limited to the amount you paid for credits in the twelve months preceding the claim. Graneth is not liable for indirect, incidental, special, or consequential damages.

You may stop using the Service and permanently delete your account data at any time from Settings. We may suspend or terminate access for accounts that violate these Terms. Provisions that by their nature should survive termination — billing, disclaimers, and limitation of liability — continue to apply.

These Terms are governed by the laws of [JURISDICTION], without regard to its conflict-of-laws principles. The Service is operated by [LEGAL ENTITY].

We may update these Terms as the product evolves. Material changes will be reflected by updating the date on this page; continued use after a change constitutes acceptance.