Terms of service

By using Boswell you agree to these terms.

What Boswell does

Boswell audits repositories you connect, reports findings, and can open pull requests you request. It never pushes to your default branch or merges anything: every change is a pull request for you to review. Findings are automated analysis — they can miss problems and can be wrong — and are not a guarantee that your application is secure.

Your responsibilities

• Only connect repositories you have the right to share with Boswell and its processors.
• Only point live verification at systems you own or are authorised to test, using test accounts you control. Boswell sends real requests to the URL you provide.
• Review every pull request and finding before acting on it, and keep your own backups.
• Don't use Boswell to attack, overload or probe systems you don't own.

Plans and billing

Paid plans are billed through Stripe and renew until cancelled. You can cancel at any time; your plan stays active until the end of the period you've paid for.

Availability and liability

Boswell is provided as is. To the extent the law allows, we aren't liable for indirect or consequential losses, and our total liability is limited to what you paid for Boswell in the 12 months before the claim.

Ending your use

You can stop at any time and ask for your data to be deleted (see the privacy policy). We may suspend accounts that break these terms.

Contact

Questions about these terms: replying to any email Boswell has sent you.