Terms of service

These terms cover how you use Patchable — the free Outside Scan, the paid reports and audits, and anything else we put behind patchable.dev. By running a scan, buying a report, or using the Patchable Verified badge, you agree to what's below.

We've kept this short and in plain English. The legal weight is the same.

What Patchable is

Patchable is a one-time, automated check of a website or codebase you own or are authorised to test. We sell three tiers:

• Outside Scan. A remote scan of a domain you give us, plus a written report and stack-aware fix prompts for your coding agent.
• Full Audit. Everything in Outside Scan, plus an in-depth codebase audit that runs locally inside your coding agent (Claude Code, Cursor, Codex, Aider, and similar). We send you the audit playbook and prompts; the agent runs them against your code on your machine. Your source code is never uploaded to Patchable.
• Enterprise. Everything in Full Audit, plus a compliance and sales packet, hosted document portal, and additional rescans.

Patchable is a snapshot in time. We are an aid to your security and launch work, not a substitute for it. A clean report does not mean your product is free of vulnerabilities, and the findings we surface are the ones our checks could see on the day we ran them.

Who can use Patchable

You need to be at least 18 and able to enter a contract on your own behalf or on behalf of an organisation you're authorised to bind. If you're buying on behalf of a company, "you" in these terms means that company.

Authorisation to scan

This is the important one. When you submit a domain to the Outside Scan, or run our Full Audit playbook against a codebase, you are telling us you have the right to do that. Concretely:

• You own the domain, or you have written authorisation from the owner to security-test it.
• You own the codebase, or you have authorisation from the owner to run an automated audit against it.
• Submitting someone else's domain or code without authorisation is a misuse of Patchable and may also be a crime in your jurisdiction. We will cooperate with law enforcement.

You're responsible for the consequences of any scan or audit you initiate — including, in rare cases, alerts triggered on your own monitoring or your hosting provider's.

How the local audit works

The Full Audit and Enterprise tiers deliver a set of prompts and a playbook that you run inside your own coding agent against your own code. We do this on purpose: your source code never leaves your environment, and you keep full control over what the agent reads and writes.

This also means you are responsible for reviewing any changes the agent suggests or applies. Coding agents make mistakes. Review diffs, run your tests, and use version control. Patchable is not liable for code changes you accept from an agent acting on our prompts.

Acceptable use

Don't use Patchable to:

• Scan or audit systems you don't own or aren't authorised to test.
• Reverse-engineer, scrape, or republish our scanners, prompts, playbooks, or reports as your own product.
• Resell or sublicense Patchable services without a written agreement with us.
• Misrepresent the Patchable Verified badge — see below.
• Interfere with our infrastructure, attempt to bypass rate limits, or stress-test us without authorisation.

We can suspend or terminate access if you do any of the above, and refund decisions in those cases follow our refund policy.

Your account, your email

The Outside Scan does not require a login. Paid purchases are tied to the email address you give at checkout — keep it accurate and accessible. Reports, rescan links, and the Patchable Verified badge are delivered to that address.

Reports, prompts and the licence we give you

The reports, fix prompts, playbooks and PDFs we deliver to you are licensed for your internal use and for sharing with your team, investors, customers, and auditors. You may quote findings, paste prompts into your coding agent, and include the PDF in due-diligence data rooms. You may not repackage our materials as a separate product or service for third parties.

You keep all rights to your own code, your own domain, and any output your coding agent produces when running our audit. We do not claim ownership of anything generated on your machine.

The Patchable Verified badge

If your audit qualifies, we issue a Patchable Verified badge you can display on your site. The badge points back to a verification page that shows the date of the audit and the tier. You may display it only while it's valid, and only for the scope (domain or codebase) it was issued for. We may revoke a badge if it's misused or if you ask us to.

Payments and refunds

Prices are shown at checkout in the currency listed there. Payments are processed by our payment provider; we don't store full card numbers. All purchases are one-time, not subscriptions.

Refunds are governed by our refund policy, which forms part of these terms. The short version: because the value is delivered the moment you read the report or run the audit, sales are final — with specific exceptions for failures on our end, duplicate charges, and material misrepresentation.

Privacy

What we collect and how we handle it is set out in our privacy policy. In short: we collect what we need to run the scan, deliver your report, and stay in touch about it. The Full Audit is designed so we never see your source code — that stays on your machine.

Third-party tools

Patchable works with third-party coding agents (Claude Code, Cursor, Codex, Aider and others) and integrates with services you already use (your DNS, hosting, payment provider). We are not responsible for those tools' availability, output, or terms. Your agreement with each of them stands on its own.

No security guarantee

We work hard to make our checks accurate and our advice sound, but no automated audit can guarantee that a product is secure, compliant, or bug-free. Patchable is provided as is and as available, without warranties of merchantability, fitness for a particular purpose, or non-infringement, to the maximum extent permitted by law.

Limitation of liability

To the maximum extent permitted by law, Patchable's total liability for any claim arising out of or related to these terms or our services is limited to the amount you paid us in the twelve months before the claim arose (or, if you used only the free Outside Scan, one hundred euros). We are not liable for indirect, incidental, special, consequential or punitive damages, including lost profits, lost data, or reputational harm.

Nothing in these terms excludes liability that cannot be excluded under your local law — for example, certain consumer rights and our own gross negligence or wilful misconduct.

Indemnity

If a third party brings a claim against us because you scanned or audited something you weren't authorised to, or because you misused a report or the Verified badge, you'll cover our reasonable defence costs and any resulting damages.

Suspension and termination

You can stop using Patchable at any time. We may suspend or terminate access for serious or repeated breaches of these terms, for non-payment, or if continuing to provide the service would expose us to legal risk. Where we terminate without cause, the refund policy applies.

Changes to these terms

We may update these terms as the product evolves. The "effective from" date at the top tells you when the current version took effect. Material changes will be flagged on this page, and where you have an active service with us, we'll let you know by email. Continuing to use Patchable after a change means you accept the updated terms.

Who we are

Patchable is operated by Swiftmade OÜ, registered in Estonia (registry code 14173141, VAT ID EE101997148), with its registered office at Pärnu mnt 148, 11317, Tallinn, Estonia. References in these terms to “we”, “us” and “our” mean Swiftmade OÜ; “you” and “your” mean the person or business using our products.

Governing law

These terms are governed by the laws of Estonia. Disputes will be resolved by the courts of Estonia, without prejudice to any mandatory consumer rights you have in your country of residence.

Questions

Email hi@patchable.dev. We answer.