Legal
Last updated October 14, 2026
These terms apply when you buy a LockedVibe service, submit our intake form, or use lockedvibe.com. LockedVibe is operated by LockedVibe, 9200 NW 39th Ave, Ste 130-3177, Gainesville, FL 32606, USA ("we" or "us"). By buying a service or submitting the intake form, you agree to these terms. Questions: support@lockedvibe.com.
We sell fixed-price security reviews of web apps, mostly ones built with AI coding tools:
Each purchase covers one repository and one app unless we agree otherwise in writing. Turnaround times are targets, not guarantees, and the clock starts once we have the access we need.
A review is a best-effort code and configuration review using AI-powered security analysis with automated evidence checks. No human manually reviews each finding unless we tell you so in writing. It is not a penetration test, red-team exercise, or compliance certification (such as SOC 2, HIPAA or PCI DSS) unless we agree to that in writing. We do not run destructive tests, denial-of-service tests, or social engineering. No review finds every issue, and we do not promise that your app is or will stay secure.
You confirm that you own the app, repository and related infrastructure you send us, or that you have the owner's written permission to share them and to have them tested. You agree to tell us about any third-party systems we should not touch. We may decline or stop work if we have reason to doubt your authorization. You are responsible for any claim that arises because you did not have the right to give us access.
We ask for the least access we need: usually read-only repository access (for example a read-only deploy key or, for an organization-owned repository, a collaborator invite with the Read role) and your live URL. Write access is only needed if you bought fix pull requests. Please don't send us passwords or secret keys by email. How we handle access, code and secrets is described on our Security page, which forms part of these terms.
Depending on the tier, you receive a written report with findings rated by severity and suggested fixes, and pull requests to your repository. Secrets are always masked in reports. You own your code and the fixes we write for you. You are responsible for reviewing and testing any pull request before you merge it, for deploying changes, and for rotating any secrets we flag.
Prices are in US dollars and paid up front through Stripe. Full refund if we find nothing actionable. Otherwise, because the work is delivered once we start, payments are non-refundable unless we fail to deliver. Monitor renews monthly and can be cancelled at any time by emailing support@lockedvibe.com; cancelling stops future charges. Nothing here limits any refund right you have under law that cannot be waived.
We keep your code, findings and app details confidential and use them only to do the work. We won't publish anything that identifies your app without your permission. We may use anonymized, aggregated lessons (for example, "many apps leave a table without row level security") in our guides.
Except as stated in these terms, our services and website are provided "as is" and "as available," without warranties of any kind, express or implied, including warranties of merchantability, fitness for a particular purpose, and non-infringement. You remain responsible for the security of your app, your data, and your users.
To the fullest extent the law allows, our total liability for any claim relating to our services or these terms is limited to the fees you paid us for the service the claim concerns. We are not liable for indirect, incidental, special or consequential damages, including lost profits, lost data, business interruption, or a security incident, whether or not a review took place. Some places don't allow these limits, so they may not fully apply to you.
These terms are governed by the laws of the State of Florida, USA, without regard to its conflict of law rules. Any dispute will be handled in the state or federal courts located in Florida. If you are a consumer in the EU or UK, you also keep the protection of the mandatory laws of the country where you live and can bring claims in your local courts.
We may update these terms. The version posted here when you buy applies to that purchase.
LockedVibe, 9200 NW 39th Ave, Ste 130-3177, Gainesville, FL 32606, USA. Email: support@lockedvibe.com.