pwnmyvibecode_

terms

Terms of use

Last updated September 23, 2026.

These terms are an agreement between you and PwnMyVibeCode, the operator of pwnmyvibecode.com. By using the site in any way, including submitting an address, opening a report or reading a guide, you agree to them. If you don't agree, don't use the site.

The short version: only check sites you own or have permission to check. A check only looks at what the site already shows the public, the same way a browser does. Results can be wrong or incomplete, it's all free and provided as is, and PwnMyVibeCode is not responsible for what happens to your site or anyone else's.

1. Who can use the service

You must be at least 18, or the age of majority where you live. If you use the service for a company or other organization, you confirm you're authorized to accept these terms for it, and "you" includes that organization.

2. Only check sites you're allowed to check

Each time you submit an address, you confirm that you own that site or have the site owner's permission to run an automated check on it. You alone are responsible for every address you submit and for getting any permission you need. Don't submit sites belonging to anyone else without their permission.

3. What a check does, and what it doesn't

A check is automated, passive and read only. It:

  • sends at most 30 ordinary GET and HEAD requests, the same kinds of request a web browser sends when someone visits a page;
  • for anyone, only requests the page you submit and the same page over plain http;
  • only when the site proves the requester controls it (with a verification tag on its home page or a DNS record made from a key held in the requester's browser), also requests the files that page loads and a short list of well known public paths (such as /.env or /.git/config) that anyone on the internet can request;
  • identifies itself with the user agent PwnMyVibeCode-Checker/1.0 (+https://pwnmyvibecode.com/about);
  • never connects to private, internal or local network addresses.

A check never logs in, submits forms, guesses passwords, sends attack payloads, tries to get around a login or other access control, or changes anything on the site. If a check reports a file or a key, it's because the site itself served it to the public.

A check is not a penetration test, vulnerability assessment, security audit or certification, and it isn't professional security, legal or compliance advice.

4. What checks are not

You agree that:

  • a check is a small number of normal requests for publicly available content, and is not hacking, an attack, or unauthorized access to any system;
  • PwnMyVibeCode doesn't access, collect or use any content that the checked site doesn't already give to every visitor;
  • checks are designed to add no more load than a single visitor, so outages, slowdowns, errors, data loss, breaches or other incidents on a site that happen around the time of a check are not caused by the check and are not PwnMyVibeCode's responsibility;
  • you won't bring any claim against PwnMyVibeCode arising from a check you requested, or from what a report shows.

5. Results and no reliance

A report describes only what could be seen from the outside at the moment of the check. It can be incomplete, out of date or simply wrong, including false alarms and missed problems. A good grade doesn't mean a site is secure, and a bad one doesn't mean it has been compromised. The summary at the top of a report is written with the help of an AI model and may contain mistakes.

Fixes, code snippets, AI agent prompts, guides, incident write ups and the zero days list are general information. They may not suit your setup. Review and test any change before you ship it. You are solely responsible for your site, your code, your data and any decision you make based on what the site shows you.

6. Acceptable use

You agree not to:

  • submit a site you don't own or aren't permitted to check;
  • add a verification tag or record to a site you don't control, or have one added without the owner's permission;
  • automate submissions, submit addresses in bulk, or try to get around rate limits or bot checks;
  • use the service or its results to attack, harass, extort or harm anyone, or to find targets to attack;
  • try to make the service request internal, private or third party systems it isn't designed to reach, or otherwise misuse, probe, overload or disrupt it;
  • scrape, copy or resell the service or its content;
  • use the service in any way that breaks the law or someone else's rights.

PwnMyVibeCode can block any address, network or visitor, and refuse any check, at its discretion.

7. For site owners

If you own a site and don't want it checked, email hello@pwnmyvibecode.com from an address at that domain. PwnMyVibeCode will block the domain and its subdomains. You can ask for an existing report about your site to be deleted the same way.

8. Third party content and links

The site links to and quotes other sites and sources, such as security advisories, news reports and CISA's Known Exploited Vulnerabilities catalog. PwnMyVibeCode doesn't control them and isn't responsible for their content, accuracy or availability.

9. No warranty

The service and everything on the site are provided "as is" and "as available", without warranties of any kind, express or implied, including warranties of accuracy, completeness, merchantability, fitness for a particular purpose, non infringement, and uninterrupted or error free operation. PwnMyVibeCode doesn't warrant that a check will find every problem or that any fix will work.

10. Limitation of liability

To the fullest extent the law allows, PwnMyVibeCode and anyone involved in running it will not be liable for any indirect, incidental, special, consequential, exemplary or punitive damages, or for any loss of profits, revenue, data, goodwill or business, service interruption, security incident, breach or cost of substitute services, arising from or related to the service, a check, a report or these terms, however caused and even if PwnMyVibeCode was told it was possible. PwnMyVibeCode's total liability for all claims is limited to the greater of the amount you paid PwnMyVibeCode in the 12 months before the claim (the service is free, so usually nothing) or 50 US dollars.

Some places don't allow some of these limits. Where that's the case, they apply only as far as the law allows, and nothing in these terms limits rights you have that can't be limited by contract.

11. Indemnity

You will defend, indemnify and hold harmless PwnMyVibeCode and anyone involved in running it from any claim, demand, loss, liability, damages, fine or cost (including reasonable legal fees) brought by anyone, including the owner of a site you checked, that arises from your use of the service, any address you submit, your breach of these terms, or your violation of any law or anyone's rights.

12. Changes to the service

The service is free. PwnMyVibeCode may change, limit, suspend or stop any part of it at any time, without notice and without liability.

13. Governing law and disputes

These terms are governed by the laws of the place where PwnMyVibeCode is established, without regard to conflict of law rules. Any dispute will be handled by the courts of that place, unless the law where you live gives you the right to bring it somewhere else. Before bringing any claim, you agree to contact PwnMyVibeCode first and give it 30 days to try to resolve it.

14. The rest

These terms and the privacy policy are the whole agreement between you and PwnMyVibeCode about the service. If a court finds part of these terms unenforceable, the rest still applies. If PwnMyVibeCode doesn't enforce a term, that isn't a waiver of it. You can't transfer these terms; PwnMyVibeCode can. Sections 3 to 5 and 8 to 14 continue after you stop using the service.

15. Changes to these terms

PwnMyVibeCode may update these terms. The date at the top shows the latest version, and using the site after a change means you accept it. Questions go to hello@pwnmyvibecode.com.