This policy is part of the Terms of Service. It applies to everything you do with GuardLayer: the website, the scanner, the GitHub App, and the Live database check (including a connected Supabase account).
1. Only check what you are allowed to check
- Only scan code, repositories and files that you own or are authorized to analyze.
- Only connect Supabase organizations and projects that you own or are authorized to check. Connecting gives GuardLayer read-only access that you grant in Supabase; do not use someone else's account, or access you were given for a different purpose.
- Do not use GuardLayer to look for weaknesses in systems you have no permission to test.
2. Don't misuse findings
- Use findings to fix your own systems, or to report problems responsibly to the people who run them.
- Do not use findings, reports or fix suggestions to access, change or leak data you are not authorized to access.
- Do not publish another party's findings, keys or report links without their permission.
3. Don't abuse the Service
- Do not overload, disrupt, probe, or attempt to get around rate limits, plan limits or access controls of the Service.
- Do not reverse engineer the Service, or use it to build a competing product.
- Do not use automated means to create accounts, or share an account to get around plan limits.
- Do not upload malware, or content that is unlawful or infringes someone else's rights.
4. What happens if this policy is broken
We may suspend or end access to the Service, disconnect GitHub or Supabase connections, and remove stored reports when we reasonably believe this policy has been broken. Where the law requires it, we may report unlawful activity to the relevant authorities.
5. Reporting abuse or a security issue
To report misuse of GuardLayer, or a security issue in GuardLayer itself, email hello@guardlayer.io.