Ethics & scope

• Scan only apps you own or are explicitly authorized to test. We require you to confirm this, and we verify ownership for live URLs.
• No intrusive or destructive checks — only passive analysis of what's already public, plus static analysis of code you connect.
• We don't exploit anything we find. We tell you about it and how to fix it.
• VibeCheck holds itself to the same bar: the product passes its own scan with no critical findings.