Terms of Service

Who we are

Flare is the service at flarehq.dev: a security scanner for apps, especially ones shipped with AI coding tools. These terms are between you and Flare. Questions go through the contact form. There is no published support inbox.

The service

Flare inspects a public URL (and, if you connect them, repositories and databases) and reports exposures with evidence and a suggested fix. Checks are read-only: no logins, no writes, no exploit payloads.

A clean scan means these checks passed. It is not a guarantee that an app is secure, and Flare is not a substitute for a full security review or penetration test. Findings are provided as-is.

• Free, anonymous: one scan per website per network. Every external check runs. You see your worst finding in full; titles for the rest.
• Free, signed in: one tracked site. Rescans, history, and Pro features require a paid plan.
• Pro: full findings, toxic-combination paths, unlimited rescans, up to 10 sites and connections, Guard, checklist, monitoring, Markdown export. Limits and prices are on /pricing.
• The flare-deep CLI, MCP server, and CI action run on your machine and are free. They upload nothing unless you point them at our hosted API.

Your account

You must provide a valid email (or GitHub login) and keep it under your control. You are responsible for activity on the account. We may suspend or close an account that violates these terms, does not pay, or looks like abuse of the scanner.

You can delete the account from the dashboard. That removes scans, projects, connections, checklist, Guard events, and the billing profile we hold. Stripe keeps records it is required to keep.

Acceptable use

Scan apps you own or are authorised to test. Permission is your responsibility even though the scan is read-only. Do not:

• Attack, overload, or gain unauthorised access to systems you do not control.
• Use Flare as a load test, or work around rate limits to generate traffic.
• Automate the public scan API to enumerate hosts you do not own.
• Use Flare for reconnaissance against infrastructure you have no relationship with, including financial, government, healthcare, and critical-infrastructure systems.
• Publish someone else’s findings (hostname, evidence, credentials) without their consent. Share links are for reports you chose to share.

More operational detail is in Responsible disclosure. If a scan looks aimed at systems the caller has no relationship with, we may refuse it and, if warranted, notify the operator.

Billing

Paid plans are charged by Stripe. You authorise Stripe to charge the payment method you provide. Taxes may apply. You can cancel any time in the billing portal; Pro continues until the end of the period already paid. Refunds are at our discretion except where the law requires them.

Promotion codes (including founding offers) are single-use unless we say otherwise, and we can withdraw them.

Your content and our reports

You keep whatever rights you have in the apps you scan. We need a licence to fetch the public URL, run the checks, store findings for your account, and show you the report. We do not claim ownership of your source or data.

Flare, the site, the scanners, and the reports’ format are ours. Do not scrape the product to build a competing scanner, or present our reports as a full audit you did not run.

No warranty

The service is provided as-is. We do not warrant that we will find every exposure, that a finding is complete, or that the service will be uninterrupted. Missed issues, false positives, and downtime happen. You decide what to do with a report, including whether to rotate a key or change production.

Liability

To the extent the law allows, Flare is not liable for lost profits, lost data, or indirect or consequential loss, or for a breach, leak, or outage in an app you scanned. Our total liability for a claim about the service is limited to the amount you paid us in the 12 months before the claim, or AUD $100 if you have not paid. Nothing here limits liability that cannot be limited by law (including for fraud or, in some places, personal injury).

Changes

We may change the product and these terms. Material changes will be dated on this page. Continued use after an update is acceptance of the new terms. If you do not agree, stop using Flare and cancel any paid plan.

Law

These terms are governed by the laws of Australia. If a dispute cannot be resolved through the contact form, the courts of Australia have jurisdiction, except where consumer law in your country says otherwise.

Related

• Privacy: https://flarehq.dev/privacy
• How we scan, and how to report a bug in Flare: https://flarehq.dev/security

Contact

Contact form, topic “legal” (https://flarehq.dev/contact?topic=legal).