Terms of Service
Version 2026-06-10
1. Important: not a penetration test
cheatcode.ch is an automated, read-only security scanner for AI-built applications. It is not a penetration test, a manual security audit, or a managed security service, and it does not actively exploit, modify, or attempt to damage any system. Automated scanning has inherent limits and may miss vulnerabilities. You remain responsible for the security of your applications.
2. Acceptance of these terms
By using cheatcode.ch you agree to these Terms of Service (including the acceptable-use rules in section 8) and the Privacy Policy. If you do not agree, do not use the service.
3. The service and AI analysis
You submit a target — either a URL you provide or source code you upload as a ZIP archive — and we perform a read-only analysis and return a security score and a list of findings by severity. The analysis uses automated tooling and third-party artificial-intelligence models. When you start a scan, the content of your target (page content reachable from the URL, or the files within your uploaded archive) is transmitted to our scanning infrastructure and to one or more third-party AI providers solely to identify potential security issues and generate your report. We do not use your submitted code or scan targets to train AI models, and we instruct our providers not to do so. AI-assisted analysis is best-effort: it may miss issues, report false positives, or misclassify severity, and it does not constitute automated decision-making producing legal or similarly significant effects concerning you.
4. Authorization to scan
You may only scan an application that you own or that you have explicit written authorization to security-test. You warrant that you have such permission for every scan you run, and you are solely responsible for ensuring it. Scanning systems without authorization may be unlawful.
5. No guarantee of security
Scans are provided on a best-effort basis. A clean result or a high score is not a guarantee that your application is secure. We do not and cannot detect all possible issues — for example, business-logic flaws, issues reachable only behind authentication, non-public code paths, or infrastructure and configuration outside the scope of the scan.
6. Eligibility and accounts
You must be 18 or older and have the legal capacity to enter into these terms. If you use the service on behalf of an organisation, you represent that you are authorised to bind it. Your verified email address is your identifier; you must keep it accurate and are responsible for activity carried out under it.
7. Fees, payment and refunds
Check is CHF 9.90 (one-time, unlocks one scan). Watch is CHF 25 per month and includes 5 scans per billing period. Payments are handled by a third-party payment processor. VAT may apply at checkout. You can cancel Watch at any time from your account. Refund terms for paid scans are set out at the point of purchase.
8. Acceptable use
You agree to act in good faith and to use the service only as permitted here. Specifically: Authorized targets only — scan only applications you own or are explicitly authorized in writing to test; never use the service against any system without permission. Prohibited targets — do not scan third-party websites, critical infrastructure, government systems, or any target you are not authorized to test. Prohibited conduct — do not use the service to attack, disrupt, or gain unauthorized access to any system, to evade security controls, or to violate any applicable law (including Swiss Criminal Code Art. 143bis/144bis and equivalent EU laws). No abuse of the platform — do not attempt to overload, reverse-engineer, or circumvent the rate limits, payment, or access controls of the service itself. We may suspend or terminate access, retain logs, and report unlawful activity to the relevant authorities.
9. Intellectual property
We retain all rights in the platform, the service, and the reports we generate (excluding your submitted content). You keep all rights to the code and material you submit; you grant us a limited, revocable licence to process that material solely to run your scan and deliver your report.
10. Disclaimer of warranties
The service is provided “as is” and “as available”, without warranties of any kind to the extent permitted by law.
11. Limitation of liability
To the extent permitted by law, we are not liable for any security breach, data loss, or damages resulting from vulnerabilities not detected by our scans, nor for indirect or consequential damages. Our total liability arising from the service is limited to the fees you paid for the service in the 12 months preceding the claim. [Final wording and any cap to be confirmed by counsel.]
12. Indemnification
You agree to indemnify us against claims arising from your unauthorized or unlawful use or misuse of the service.
13. Suspension and termination
We may suspend or terminate your access at our discretion, in particular for breach of these terms (including the acceptable-use rules in section 8), and we may retain logs as needed.
14. Changes to the service or these terms
We may modify the service or these terms. Changes take effect when published; your continued use after publication constitutes acceptance. The version you accepted at scan time is recorded against your scan.
15. Severability
If any provision is found invalid or unenforceable, it will be replaced by the nearest enforceable provision reflecting the original intent, and the remaining provisions stay in effect.
16. Governing law and jurisdiction
These terms are governed by Swiss law. The exclusive place of jurisdiction is [COURT / PLACE OF JURISDICTION], Switzerland. [Final wording to be provided by counsel.]
Operated by [COMPANY LEGAL NAME], [REGISTERED ADDRESS], Switzerland. Questions? Contact us.