Template for the site owner to review with a lawyer before launch. It is not legal advice and the postal address and contact email are placeholders.

Acceptable use

Last updated November 4, 2026.

You may scan a site only if you own it, or if the owner has authorized you to test it. Pointing ShipCheck at someone else’s app to look for secrets is not allowed.

ShipCheck makes passive, read-only requests. You may not use it to brute force, fuzz, exploit, write data, or overwhelm a host. We rate-limit previews, refuse private network addresses, and block free previews of large third-party sites.

Do not upload secrets into a support email. The product stores fingerprints, not the full key. If you find a flaw in ShipCheck itself, use the disclosure contact on the security page.

We can refuse scans that break these rules. The terms of service still apply.