GitRekt is an automated security hygiene scanner. It looks for common, machine-detectable problems — leaked secrets, risky patterns, vulnerable dependencies, and insecure configuration. It is not a comprehensive security audit, it cannot find every issue, and it may report false positives. Treat the results as a helpful starting point, not a guarantee.
All purchases are final. We do not offer refunds. Because a report reveals security findings the moment it is unlocked, viewing the report constitutes delivery of the service. A refund will not be granted on the basis that an issue was already fixed, was a false positive, or "didn't exist" — the report reflects the state of the repository at the time it was scanned.
We clone your repository only to scan it, and the clone is deleted immediately afterward. The report is shown once and is deleted when you leave the report page — save your own copy if you want to keep it. We retain a minimal record that a scan was run and that these Terms were accepted.
The service is provided "as is", without warranty of any kind. To the maximum extent permitted by law, GitRekt is not liable for any damages arising from use of, or reliance on, the service or its results. You are responsible for reviewing and acting on the findings.