Service rules

Terms of use

These Terms of Use describe the current SafetyVibe hackathon prototype and its website security scanning service.

Last updated: 04/10/2026

Who may scan

Only submit a public website that you own or are authorized to assess. You are responsible for obtaining permission from the website owner and complying with applicable law and third-party terms.

Service scope

The public URL scan is unauthenticated and passive by default. It inspects publicly accessible pages and signals; it does not prove that a site is secure, test authenticated IDOR or Supabase RLS, or cover every vulnerability. Results are automated observations and may be incomplete or incorrect.

Deep Supabase authorization tests are a separate workflow with additional inputs and safeguards. Use only owner-authorized test accounts. Do not submit production passwords or privileged service-role keys.

Saved reports and sharing

Successful scans are saved and may receive a unique share link. Anyone with the link can view the report without signing in. Do not scan URLs containing private information or share a report link if its findings are sensitive.

Reports and generated PDFs do not currently have automatic expiry. They remain stored until removed by the operator or the underlying storage is deleted. A report link is not a private account workspace.

Acceptable use

Do not scan systems without authorization. Do not use the service to disrupt, overload, bypass access controls or gain access to a target. Do not treat a score, clean result or generated repair suggestion as a security certification or legal advice.

Availability and operator details

Engines may be unavailable or skipped, and the service may change or be interrupted. The scan is provided as-is, subject to any mandatory rights that cannot legally be excluded.

Operator: SafetyVibe Hackathon Team
Contact: safetyvibe@advertis.ee
Registered address: N/A — hackathon prototype.
Governing law and dispute process: not currently specified for the hackathon prototype.

No paid features are currently offered.