Terms of Service

Last updated: 26 October 2026

These Terms of Service (“Terms”) govern your access to and use of the phpwarden hosted dashboard, ingest API, maintained vulnerability feed, and related services (together, the “Service”), operated by phpwarden (“we”, “us”). By creating an account or using the Service you agree to these Terms. If you do not agree, do not use the Service.

The open-source phpwarden command-line scanner is licensed separately under the Apache License 2.0 and is not governed by these Terms.

1. The Service

phpwarden helps you find and prioritise PHP, Composer and WordPress vulnerabilities and collect scan results in a dashboard. The Service is provided on an “as is” and “as available” basis. It is a security aid, not a guarantee: it does not detect every vulnerability, and a clean result does not mean an absence of risk. You remain responsible for securing your own systems.

2. Accounts

You must provide an accurate email address and keep your credentials secure. You are responsible for all activity under your account and under any project ingest tokens or API keys you create. Notify us promptly of any unauthorised use.

3. Acceptable use

You agree not to: use the Service to scan or attack systems you do not own or have permission to test; attempt to disrupt, reverse-engineer or gain unauthorised access to the Service; resell or redistribute the maintained feed; or use the Service in violation of applicable law. We may suspend accounts that abuse the Service.

4. Plans, billing and the maintained feed

Paid plans (currently Pro and Team) and pay-as-you-go API credit packs are billed through our payment processor, Stripe. Subscriptions renew automatically for successive periods until cancelled. Prices are shown on the pricing page and may change on notice for future billing periods. A paid subscription grants access to the continuously-updated feed channel and plan features for the duration of the subscription. Refund and cancellation terms are described in our Refund & Cancellation Policy.

5. Your data

You retain ownership of the scan data and findings you submit. You grant us a limited licence to process and store that data to provide the Service. Our handling of personal data is described in our Privacy Policy.

6. Disclaimers & limitation of liability

To the maximum extent permitted by law, the Service is provided without warranties of any kind, express or implied, including fitness for a particular purpose and non-infringement. We are not liable for any indirect, incidental, special or consequential damages, or for any security incident, breach or loss arising from vulnerabilities the Service did not detect. Our total liability for any claim relating to the Service will not exceed the amount you paid us in the three months before the claim.

7. Termination

You may stop using the Service and delete your account at any time. We may suspend or terminate access for breach of these Terms. On termination, your right to use the Service ends; sections that by their nature should survive (including 5–6 and 8) will survive.

8. Changes & governing law

We may update these Terms from time to time; material changes will be posted here with a new “last updated” date. Continued use after changes constitutes acceptance. These Terms are governed by the laws of the United States and the state in which phpwarden is established, without regard to conflict-of-laws rules.

9. Contact

Questions about these Terms: [email protected].