Last updated: October 29, 2026 | Version 2.1
Scope of these Terms. These Terms govern the FYEO Scanner, the automated security scanning service available through the FYEO portal. They do not govern FYEO's manual security audit services, which are provided exclusively under a separately signed Master Services Agreement and Statement of Work.
These Terms of Service ("Terms") are a binding agreement between you ("you," "your," or "Customer") and FYEO, Inc., a Delaware corporation with a mailing address at P.O. Box 1708, North Conway, NH 03860 ("FYEO," "we," "us," or "our"). They govern your access to and use of the FYEO Scanner — our automated security scanning service for Web3 source code, including full audits, diff scans, and third-party dependency scans — together with the related portal, websites, and APIs (collectively, the "Service").
BY CREATING AN ACCOUNT, CLICKING TO ACCEPT THESE TERMS, OR ACCESSING OR USING THE SERVICE, YOU AGREE TO BE BOUND BY THESE TERMS AND BY OUR PRIVACY POLICY, WHICH IS INCORPORATED BY REFERENCE. IF YOU DO NOT AGREE, DO NOT ACCESS OR USE THE SERVICE.
If you access or use the Service on behalf of an entity, you represent that you are authorized to bind that entity, and "you" refers to that entity. The Service is not directed to, and may not be used by, anyone under 18 years of age.
Relationship to other agreements. If you are also a party to a signed Master Services Agreement and Statement of Work with FYEO for manual security audit services (an "MSA"), those documents govern the manual audit engagement. These Terms govern your use of the Scanner. If FYEO makes Scanner access available to you as part of, or bundled with, an MSA engagement, and a conflict exists as to that Scanner access, the MSA shall control.
You must register for an account to use the Service. Registration is completed by authorizing the FYEO GitHub App and signing in with GitHub. You are responsible for maintaining the security of your account and for all activity under it. You agree to provide accurate information and to keep it current, and to notify us promptly at the contact address below of any unauthorized use. We are not liable for any loss arising from your failure to safeguard your account.
We may refuse registration, or suspend or terminate any account, at our discretion, including where we reasonably believe an account has violated these Terms, creates risk or legal exposure for us, or where continued provision of the Service is no longer commercially viable. We may also terminate an account that has been inactive for twelve (12) months or more, and will provide reasonable advance notice before doing so.
The Service is an automated software tool. The Scanner uses automated analysis, including machine-learning models, to identify a subset of potential security issues in submitted code. It operates without human review unless a plan or separate agreement expressly includes human expert review.
The Service is not a professional security audit, penetration test, or certification, and (except where a plan expressly includes human expert review) is not a substitute for one. Scanner results are provided for informational purposes only. They do not constitute professional, legal, financial, or security advice, do not guarantee that code is secure, complete, or free of vulnerabilities, and do not guarantee detection of any particular vulnerability or class of vulnerability. Automated scanning is inherently limited and may produce false positives, false negatives, or incomplete results. You should not rely on the Service as your sole means of evaluating the security of any code or system.
No standard of professional care. Except for human expert review expressly included in a plan or a separate MSA, FYEO does not undertake, and expressly disclaims, any duty to perform the Service to the standard of care of a professional provider of manual security audit services. Manual audit services, where engaged, are provided under a separate MSA and Statement of Work, which govern those services.
You are solely responsible for your decisions and actions taken in reliance on, or otherwise relating to, any Scanner output, including any decision to deploy, launch, list, or modify any code or system.
Best-effort detection. The Scanner is a best-effort tool. FYEO does not guarantee the accuracy or completeness of any scan, does not guarantee that every actual vulnerability or issue will be identified, and does not guarantee that findings are free of error or false positives. The absence of findings does not mean code is secure or free of vulnerabilities.
The Service is offered through tiered plans. Each paid plan includes a monthly allotment of scan credits ("Credits"), which are consumed when you run scans. Every scan displays its exact Credit price before you confirm it, and the displayed price is the price charged. Scan Credit prices are flat rates determined by scan type and codebase size, as displayed in the Service. The features, limits (including user seats), Credit allotments, and prices of each plan are as displayed in the Service at the time you select or renew a plan. There is no limit on the number of repositories you may connect on any plan.
We may change plan features, limits, Credit allotments, scan Credit prices, and pricing prospectively. A change to the price of your plan will not take effect during your current paid term, and we will provide at least thirty (30) days' notice before any plan price change takes effect at renewal. No change to scan Credit prices will apply to a scan that has already run or is running.
Credits do not expire at the end of a billing cycle; they roll over. Each grant of Credits expires three (3) months after the date it is granted, except the free signup grant described in Section 3.3, which expires thirty (30) days after signup. Credits are consumed on an oldest-expiring-first basis. Your Credit balance is capped at three (3) times your plan's monthly Credit allotment; the cap is applied at the time Credits are granted, and Credits that would exceed the cap at grant time are forfeited and reflected as such in your usage history. Credits are pooled at the account's billing owner and shared across the account's authorized seats. Credits have no cash value, are not transferable between accounts, and are not redeemable or refundable for money except where required by applicable law.
New accounts receive a one-time grant of free Credits (currently fifty (50)), valid for thirty (30) days from signup, as displayed in the Service at registration. The free grant is provided for evaluation, may be modified or discontinued at any time, and is limited to one per customer. We do not require payment information to use the free grant, and we will not charge you when it is used or expires.
No automatic charge. When your free Credits are used or expire, your access to further scanning pauses until you actively select and pay for a plan. We do not convert free access into a paid subscription automatically; a paid subscription begins only when you explicitly select a plan and complete checkout.
When you select a paid plan, you authorize FYEO and our third-party payment processor to charge your payment method the then-current fee for the plan and billing cycle you select (monthly or, where offered, annual). Prices are stated in U.S. dollars unless otherwise indicated and are exclusive of taxes; you are responsible for all applicable taxes. Your plan's monthly Credit allotment is granted when each billing cycle's payment succeeds.
Automatic renewal. Paid subscriptions renew automatically at the end of each billing cycle for another cycle of the same length, at the then-current price, unless you cancel before the renewal date. We will notify you of any price change before it takes effect at renewal. You may cancel at any time through your account settings or by contacting us; cancellation takes effect at the end of the current billing cycle, and you retain access to your paid plan until then.
Credits after cancellation. If you cancel, Credits already granted to your account — including previously purchased top-up packs — remain usable until each grant's own expiry date under Section 3.2. After your subscription ends you will not receive further monthly Credit allotments and cannot purchase top-up packs unless you resubscribe to a paid plan.
Except where required by applicable law, fees are non-refundable and we do not provide refunds or credits for partial billing periods, downgrades, unused features, or unused or expired Credits. This does not limit the automatic return of Credits for failed scans described in Section 3.6. We do not store full payment card details; these are handled by our payment processor.
Customers with an active paid subscription may purchase one-time packs of additional Credits ("top-up packs") at the prices displayed in the Service. Top-up Credits are subject to the same three (3) month expiry, oldest-expiring-first consumption, and balance-cap rules as plan Credits under Section 3.2. Top-up packs are not available to accounts without an active paid subscription. Except where required by applicable law, top-up purchases are non-refundable; Section 3.6 applies to Credits reserved for failed scans.
If a scan fails due to an error, or is cancelled before it starts, the Credits reserved for that scan are automatically returned to your balance in full, without any action required by you. If a scan is cancelled after it has started, 25% of its price is charged (rounded up, and at least one Credit) and the rest of the reserved Credits are returned to your balance. Returned Credits retain the expiry date of the grant they were drawn from.
If you downgrade, your new plan's monthly Credit allotment and balance cap apply from your next billing cycle; the balance cap is applied at the time Credits are granted, based on your then-current plan, and Credits already in your account are not forfeited by a downgrade. Access to features and limits above your new plan's entitlement will cease.
If a renewal payment fails, you may continue to spend Credits already in your account while payment is retried; new monthly Credit allotments are not granted and top-up packs cannot be purchased until payment succeeds. We may suspend the Service for continued non-payment after reasonable notice.
We will not delete the findings and threat-model records already in your account solely because of a downgrade or cancellation, but continued scanning and certain features require Credits and, for certain features, an active qualifying plan.
"Customer Content" means the source code, repository contents, configuration, and other materials you submit to, or make accessible to, the Service for scanning, and any access you grant us (for example, via the GitHub App) for that purpose.
As between you and FYEO, you retain all right, title, and interest in and to your Customer Content. We claim no ownership of it.
You grant FYEO a limited, non-exclusive, worldwide license to access, copy, transmit, process, analyze, and display Customer Content solely as necessary to provide, maintain, secure, and support the Service for you, and as further described in our Privacy Policy and in Section 5. The scope of data retention and model use is set out in Section 5.
Your representations. You represent and warrant that you own, or have all rights, consents, and permissions necessary to submit, the Customer Content and to grant the license above, and that your submission and our processing of the Customer Content will not violate any law or the rights of any third party. You are responsible for ensuring you are authorized to submit any repository or code you do not solely own.
Ephemeral handling of source code. When you run a scan, your repository is cloned to temporary, ephemeral storage solely for the duration of that scan. We delete that copy when the scan ends, and we do not store your repository in our databases.
What we retain. We retain the security findings, reports and threat models generated by a scan, associated with your account, so that you can review them, track history and trends, and so we can support and improve the Service. To explain each issue, these records can include excerpts of the relevant code, such as the affected lines, file paths and function names. They do not include a copy of your repository.
We never train on your code or your scan results. FYEO does not use your source code, or the findings generated from scanning it, to train, fine-tune, or otherwise develop our models. We improve our detection models using findings drawn from FYEO's own professional security audit engagements, used only in de-identified and aggregated form that is not attributable to any client or codebase.
FYEO infrastructure. Scanning is performed on FYEO-operated infrastructure.
GitHub access. Access is provided through the FYEO GitHub App on a per-repository basis: we can access only the repositories on which you install the App. The App has read-only access to repository contents and cannot push code to any branch. It also holds permission to comment on issues and pull requests; FYEO uses that permission only for features you turn on.
Data Processing Addendum. For business customers that require one to meet their data-protection obligations, FYEO makes available a Data Processing Addendum (incorporating Standard Contractual Clauses where applicable), which may be requested as described in our Privacy Policy.
We treat your source code as your confidential and proprietary business information. We access it only to provide the Service, handle it ephemerally as described in Section 5, do not disclose it to third parties except the sub-processors necessary to operate the Service (as described in our Privacy Policy) and services you direct us to share it with, such as an AI assistant you connect to your account, and require those sub-processors to maintain appropriate confidentiality and security. This obligation does not apply to information that is or becomes public through no fault of FYEO, that we already lawfully possessed, or that we are legally compelled to disclose.
You agree not to, and not to permit any third party to:
We may investigate and act on violations, including suspending or terminating access, without refund and without liability.
The Service, including all software, models, methodologies, user interfaces, documentation, and related intellectual property (the "FYEO IP"), is owned by FYEO or its licensors and is protected by intellectual-property laws. Except for the limited right to access and use the Service under these Terms, no rights in the FYEO IP are granted to you. All rights not expressly granted are reserved.
Scan reports. Subject to your active plan and compliance with these Terms, you may use the reports and outputs generated for you by the Service for your internal business purposes. You may not represent any automated Scanner output as a FYEO manual audit, certification, or attestation.
Feedback. If you provide feedback or suggestions about the Service, you grant FYEO a perpetual, irrevocable, worldwide, royalty-free license to use it without restriction or obligation to you.
The Service relies on third-party services, including GitHub for authentication and repository access, a payment processor for billing, and infrastructure and communications providers. Your use of those services is governed by their own terms, and FYEO is not responsible or liable for them or for their availability.
THE SERVICE IS PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS, WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE. TO THE MAXIMUM EXTENT PERMITTED BY LAW, FYEO DISCLAIMS ALL WARRANTIES, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.
WITHOUT LIMITING THE FOREGOING, FYEO DOES NOT WARRANT THAT THE SERVICE WILL DETECT ALL OR ANY VULNERABILITIES, THAT RESULTS WILL BE ACCURATE, RELIABLE, COMPLETE, OR ERROR-FREE, THAT CODE SCANNED WILL BE SECURE, OR THAT THE SERVICE WILL BE UNINTERRUPTED OR TIMELY. THE SERVICE IS A BEST-EFFORT AUTOMATED TOOL; YOU ACKNOWLEDGE THAT AUTOMATED SECURITY SCANNING HAS INHERENT LIMITATIONS, THAT NO SCANNER CAN IDENTIFY EVERY SECURITY ISSUE, AND THAT FINDINGS MAY INCLUDE FALSE POSITIVES AND MAY OMIT ACTUAL ISSUES.
SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF CERTAIN WARRANTIES, SO SOME OF THE ABOVE EXCLUSIONS MAY NOT APPLY TO YOU.
TO THE MAXIMUM EXTENT PERMITTED BY LAW, FYEO SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR EXEMPLARY DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, DATA, GOODWILL, OR OTHER INTANGIBLE LOSSES, OR FOR ANY LOSS OF OR DAMAGE TO DIGITAL ASSETS, TOKENS, FUNDS, OR SMART-CONTRACT VALUE, ARISING OUT OF OR RELATING TO THE SERVICE OR THESE TERMS, WHETHER BASED IN CONTRACT, TORT, STRICT LIABILITY, OR OTHERWISE, AND EVEN IF FYEO HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
FYEO'S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THE SERVICE OR THESE TERMS SHALL NOT EXCEED THE GREATER OF (A) THE TOTAL AMOUNTS YOU PAID TO FYEO FOR THE SERVICE IN THE SIX (6) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM, OR (B) ONE HUNDRED U.S. DOLLARS (US $100).
You acknowledge that these limitations are a fundamental basis of the bargain and that the pricing for the Service reflects this allocation of risk. These limitations apply notwithstanding the failure of any limited remedy of its essential purpose. Some jurisdictions do not allow certain limitations, so some of the above may not apply to you.
You will defend, indemnify, and hold harmless FYEO and its affiliates, and their respective officers, directors, employees, and agents, from and against any third-party claim, demand, loss, liability, or expense (including reasonable attorneys' fees) arising out of or relating to: (i) your Customer Content; (ii) your use of the Service; (iii) your violation of these Terms; or (iv) your violation of any applicable law or the rights of any third party, except to the extent arising from FYEO's gross negligence or willful misconduct.
These Terms apply while you have an account or use the Service. You may stop using the Service and close your account at any time. We may suspend or terminate your access as described in Section 1 or for violation of these Terms. Upon termination, your right to use the Service ceases. Sections that by their nature should survive (including Sections 4, 5, 6, 7, 8, 10, 11, 12, and 14) survive termination.
These Terms are governed by the laws of the State of New Hampshire, without regard to its conflict-of-laws rules, and excluding the United Nations Convention on Contracts for the International Sale of Goods.
Informal resolution first. Before initiating any arbitration, you and FYEO agree to try to resolve the dispute informally. The party raising the dispute will send a written description of it and the relief sought to the other (to FYEO at the contact address below), and both parties will attempt in good faith to resolve it for at least thirty (30) days, including by phone or videoconference if requested.
Arbitration. If the dispute is not resolved, any dispute, controversy, or claim arising out of or relating to these Terms or the Service shall be resolved by binding arbitration administered by JAMS under its Comprehensive Arbitration Rules and Procedures, before one (1) arbitrator. The Federal Arbitration Act governs the interpretation and enforcement of this provision. The seat of arbitration shall be Manchester, New Hampshire; hearings may be conducted in Manchester, New Hampshire or by videoconference. The arbitration shall be conducted in English. Judgment on the award may be entered in any court of competent jurisdiction.
Exceptions. Either party may (a) bring an individual claim in small-claims court if it qualifies, and (b) seek injunctive or equitable relief in a court of competent jurisdiction to protect its intellectual property or confidential information.
Class waiver. Disputes will be resolved on an individual basis. You and FYEO waive any right to participate in a class, collective, or representative proceeding, to the extent permitted by law. If this class waiver is found unenforceable as to a particular claim, that claim shall be severed and heard in the state or federal courts located in New Hampshire, and all other claims shall be arbitrated.
We may update these Terms from time to time. The "Last updated" date and version above indicate when they were last revised. For material changes, we will provide reasonable notice (for example, by email or an in-Service notice) and, where appropriate, require you to accept the updated Terms before continuing to use the Service. We record the version of the Terms you accepted and the date of acceptance. Your continued use after an update takes effect constitutes acceptance. If you do not agree, you must stop using the Service.
FYEO will not be liable for any failure or delay in performance to the extent caused by events beyond its reasonable control, including acts of God, natural disasters, war, terrorism, civil unrest, labor disputes, government action, internet or network failures, power outages, or failures of third-party services or infrastructure providers.
You represent and warrant that you are not located in, ordinarily resident in, or organized under the laws of any country or territory subject to comprehensive U.S. sanctions or embargo, and that you are not identified on any U.S. government list of prohibited or restricted parties (including the U.S. Treasury Department's list of Specially Designated Nationals or the U.S. Department of Commerce's Denied Persons or Entity Lists). You agree not to access, use, export, or re-export the Service in violation of any applicable export-control or sanctions laws, and not to use the Service for or on behalf of any sanctioned or restricted party. You are responsible for complying with all applicable export and sanctions laws.
We may offer features identified as "beta," "preview," "early access," or similar ("Beta Features"). Beta Features are provided for evaluation, may be incomplete or unstable, may be changed or withdrawn at any time, and are provided "AS IS" without warranty of any kind and with no service commitments. To the maximum extent permitted by law, FYEO has no liability arising from your use of Beta Features.
We may provide notices to you by email to the address associated with your account, or by posting within the Service; such notices are effective when sent or posted. You must send formal legal notices to FYEO in writing by email to legal@fyeo.io with a copy by mail to FYEO, Inc., P.O. Box 1708, North Conway, NH 03860; notices to FYEO are effective on confirmed receipt. It is your responsibility to keep your account email address current.
These Terms, together with the Privacy Policy, any applicable Data Processing Addendum, and any applicable MSA, constitute the entire agreement between you and FYEO regarding the Service and supersede prior agreements on that subject. If any provision is held invalid or unenforceable, it will be limited or severed to the minimum extent necessary, and the remaining provisions will remain in effect. Our failure to enforce any provision is not a waiver. You may not assign these Terms without our prior written consent; we may assign them to an affiliate or in connection with a merger, acquisition, or sale of assets. Nothing in these Terms creates a partnership, agency, or employment relationship.
Questions about these Terms may be directed to FYEO, Inc., P.O. Box 1708, North Conway, NH 03860, or by email to hello@fyeo.io.