Terms of Service

Last updated: June 21, 2026

These terms govern your use of RedRun. Security testing is powerful and regulated, so please read the authorized-use section carefully - it's the most important part.

01Acceptance

By creating an account or using RedRun (redrun.app, scan.redrun.app, app.redrun.app, and the scanning service), you agree to these Terms and to our Privacy Policy. If you are using RedRun on behalf of an organization, you represent that you are authorized to bind that organization.

02The service

RedRun is a detection-only security testing service. It probes web apps, APIs, and AI features to identify vulnerabilities and proves each finding with the exact request and response. It does not exfiltrate data, escalate access, or run destructive payloads. RedRun is a tool to assist your security efforts - see the disclaimers below.

03Authorized use & scope - important

You may use RedRun to test only systems that you own or are explicitly authorized in writing to test. Active (intrusive) scans are gated behind domain-ownership verification, and by running one you represent and warrant that you have the necessary authorization.

Unauthorized scanning is a serious violation of these Terms and may be illegal. We may suspend or terminate accounts we reasonably believe are engaged in it.

04Accounts

Provide accurate information, keep your credentials secure, and notify us of any unauthorized use. You are responsible for activity under your account.

05Acceptable use

06Plans & licensing

RedRun offers a free scan and paid/licensed features. Fees, limits, and license terms for paid features are presented at the point of purchase and form part of these Terms. Free features are provided as-is and may change.

07Disclaimers

The service is provided "as is" and "as available," without warranties of any kind, express or implied. Security testing is inherently best-effort: RedRun does not guarantee that it will find every vulnerability, and a clean scan does not mean a system is secure. RedRun is not a substitute for a comprehensive security audit or professional penetration test, and its results are informational. You are responsible for validating findings and for your own security decisions.

08Limitation of liability

To the maximum extent permitted by law, RedRun and its operators will not be liable for any indirect, incidental, special, consequential, or punitive damages, or for lost profits or data, arising from your use of the service. Our total liability for any claim will not exceed the greater of the amounts you paid us in the three months before the claim or USD 100.

09Indemnification

You agree to indemnify and hold RedRun harmless from claims, damages, and expenses arising out of your use of the service, your content or targets, or your breach of these Terms - including, in particular, any scanning you conduct without proper authorization.

10Intellectual property

RedRun and its software, content, and trademarks are owned by us. You retain ownership of the data and targets you submit; you grant us the limited rights needed to operate the service and deliver your reports.

11Termination

You may stop using RedRun and request deletion at any time. We may suspend or terminate access for breach of these Terms or to protect the service. Sections that by their nature should survive (e.g. disclaimers, liability, indemnification) will survive termination.

12Changes

We may update these Terms as the service evolves. We'll update the "last updated" date and, for material changes, take reasonable steps to notify you. Continued use after changes means you accept them.

13Governing law

These Terms are governed by the laws of the Republic of Kazakhstan, without regard to conflict-of-laws rules, and the courts located there will have exclusive jurisdiction over any disputes, except where applicable law provides otherwise.

14Contact

Questions about these Terms: bekedil072@gmail.com.

Note:These terms were written in good faith to reflect how RedRun actually works. RedRun is an early-stage product, so they haven't been formally reviewed by legal counsel yet - we keep them current as the product evolves. If anything here is unclear, reach out.