Skip to main content
VibeReview VibeReview
Product Why ACSM Integrations Pricing
Learn Blog Docs Knowledge base Events & webinars
Developers Engineering teams Non-technical teams vibe-coding CISOs AppSec teams adopting AI AI-native startups
OWASP ASVS OWASP MASVS PCI DSS ISO/IEC 27001 SOC 2 HIPAA GDPR CISA Secure-by-Design NIST SSDF
Sign in Get started
← Legal

we45, Inc. · VibeReview

Acceptable Use Policy

What you can and can't do with VibeReview.

Effective May 22, 2026

All policies

  • Privacy Policy
  • Terms of Service
  • End User License Agreement
  • AI Disclaimer
  • Acceptable Use Policy
  • Data Processing Agreement

Effective Date: May 22, 2026

Last Updated: May 22, 2026

This Acceptable Use Policy ("AUP") governs your use of the VibeReview platform and services provided by we45, Inc. ("Company," "we," "us," or "our"). This AUP is incorporated into and supplements our Terms of Service. Capitalized terms not defined herein have the meanings set forth in the Terms of Service.

Violation of this AUP may result in suspension or termination of your account, with or without notice.

1. General Conduct

You agree to use the Service in a lawful, ethical, and responsible manner. You shall not use the Service in any way that:

  • Violates any applicable federal, state, local, or international law or regulation
  • Infringes or misappropriates the intellectual property or proprietary rights of any third party
  • Violates the privacy or other rights of third parties
  • Is harmful, fraudulent, deceptive, threatening, harassing, defamatory, or obscene

2. Prohibited Uses

You shall not:

2.1 Service Abuse

  • Attempt to gain unauthorized access to the Service, other accounts, or connected systems
  • Circumvent, disable, or interfere with any security, rate-limiting, or access-control feature
  • Probe, scan, or test the vulnerability of the Service or any connected system without authorization
  • Overload, flood, or launch denial-of-service attacks against the Service's infrastructure
  • Use automated tools (bots, scrapers, crawlers) to access the Service except through published APIs
  • Exploit any bug, error, or design flaw to gain an unintended advantage or access

2.2 Data and Content Abuse

  • Submit, connect, or process repositories or data that you do not have the legal right to access or analyze
  • Use the Service to process, store, or transmit malware, viruses, or other harmful code
  • Upload content that contains illegal material, including child sexual abuse material or content that promotes terrorism
  • Use the Service to collect, harvest, or mine personal data of third parties without authorization
  • Deliberately submit adversarial inputs designed to manipulate AI model outputs for malicious purposes

2.3 Competitive and Commercial Abuse

  • Use the Service or its outputs to develop, train, or improve a competing product or service
  • Benchmark the Service against competitors for publication without our prior written consent
  • Resell, redistribute, or sublicense access to the Service or its outputs
  • Use the Service to provide security scanning or analysis as a service to third parties, unless under an Enterprise agreement that permits such use
  • Systematically extract or scrape guardrail content, threat model data, or other intellectual property from the Service

2.4 Misrepresentation

  • Represent that AI-generated outputs from the Service constitute a professional security audit, certification, or compliance attestation
  • Misrepresent your identity, affiliation, or authorization when creating an account or connecting repositories
  • Use the Service's outputs in a manner that falsely implies endorsement by the Company
  • Claim compliance with security standards or frameworks solely based on use of the Service

3. Repository and Integration Conduct

When connecting repositories and third-party integrations:

  • Only connect repositories that you own or have explicit authorization to analyze
  • Ensure that repository access tokens and OAuth credentials are kept secure
  • Promptly revoke repository connections if your authorization to access the repository is revoked
  • Do not connect repositories containing classified, export-controlled, or otherwise legally restricted content without appropriate authorization
  • Comply with the terms of service of all connected platforms (GitHub, GitLab, etc.)

4. Reporting and Enforcement

4.1 Reporting Violations

If you become aware of any violation of this AUP, please report it to security@we45.com. We take all reports seriously and will investigate promptly.

4.2 Investigation

We reserve the right to investigate suspected violations of this AUP. We may review account activity, usage patterns, and connected repository metadata as part of our investigation, subject to our Privacy Policy.

4.3 Consequences

Violations of this AUP may result in, at our sole discretion:

  • Warning notifications
  • Temporary suspension of account access
  • Permanent termination of your account
  • Removal of offending content or configurations
  • Reporting to law enforcement or relevant authorities
  • Legal action to recover damages

4.4 No Liability for Enforcement

We shall not be liable for any action taken in response to violations of this AUP, including suspension or termination of your account.

5. Fair Use and Rate Limits

The Service is subject to fair use policies and rate limits that vary by subscription plan. These limits are designed to ensure equitable access for all users. Exceeding published limits may result in throttling, temporary suspension, or a requirement to upgrade your plan.

6. Modifications

We may update this AUP from time to time. Material changes will be communicated via email or in-app notification at least 15 days before taking effect. Continued use of the Service after changes constitutes acceptance.

7. Contact

For questions about this Acceptable Use Policy:

we45, Inc.

30 N Gould St, Sheridan, WY 82801

Security reports: security@we45.com

Legal: legal@we45.com

Website: https://vibereview.app

Product

  • Features
  • Integrations
  • Pricing
  • Built for
  • Compliance
  • Changelog

Developers

  • Docs
  • Knowledge base
  • CLI
  • MCP setup
  • GitHub

Company

  • Blog
  • About
  • Contact
  • Events & webinars
  • Learn
  • Security

Legal

  • Privacy
  • Terms
  • EULA
  • AI Disclaimer
  • Acceptable Use
  • DPA
  • Status
SOC 2 Type II certified ISO 27001 certified

SOC 2 Type II · ISO 27001 certified. Independently audited controls for security, availability, and confidentiality.

From the makers of securityreview.ai
VibeReview VibeReview © 2026 VibeReview
Privacy · Terms