Terms of Service

1. Acceptance of Terms

By downloading, installing, or using Deva, including the Deva CLI and the Deva extension (“the Application”), you agree to these Terms of Service (“Terms”). If you do not agree, do not use the Application.

2. Description of Service

Deva scans source code for security vulnerabilities. Scans run on your machine. Depending on your plan, Deva can also validate findings, generate fixes, map findings to compliance controls, and produce dependency, SBOM, and evidence reports.

3. Accounts

Standard scans in the Deva CLI and extension do not require an account. Other features require an account and an eligible plan. If you create an account, you are responsible for keeping your credentials confidential and for all activity under it. Paid plans and trials are subject to the terms shown when you start them.

4. Permitted Use

You agree to use the Application only for lawful purposes. You may not:

• Use the Application to scan, test, or exploit systems you do not own or have written authorization to test
• Use AI features to generate malicious software, harmful content, or content that violates applicable law
• Attempt to access other users' accounts or data
• Interfere with or disrupt the Application's services or infrastructure
• Redistribute, resell, or sublicense the Application in whole or in part

5. AI Features

The Application includes optional AI features, such as finding validation and fix generation. With a local model, prompts and code context stay on your machine. With a cloud model, the prompt and the code context for that request are sent to the model provider and are subject to that provider's terms.

• AI-generated output (code suggestions, security analysis, recommendations) is provided as-is and does not constitute professional advice
• You are responsible for reviewing and validating any AI-generated code before use

6. Privacy

Your use of the Application is also governed by our Privacy Policy, which describes what data we collect, how it is used, and how it is protected. The Privacy Policy is incorporated into these Terms by reference.

7. Intellectual Property

The Application and its original content, features, and functionality are owned by DevSecCode and are protected by applicable intellectual property laws. You may not copy, modify, distribute, reverse engineer, or create derivative works of the Application. Content you create using the Application remains yours.

8. Third-Party Services

The Application relies on third-party services, such as Google Cloud, sign-in providers, payment processors, and the AI model providers you choose. Your use of these services is subject to their respective terms. We are not responsible for the availability, accuracy, or conduct of any third-party service.

9. Disclaimer of Warranties

The Application is provided “as is” and “as available,” without warranty of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, and noninfringement.

Security scan results are informational and do not guarantee that your code is free of vulnerabilities. The Application does not replace professional security audits or accreditation processes (such as ATO, CMMC certification, or FedRAMP authorization).

10. Limitation of Liability

To the maximum extent permitted by law, DevSecCode and its contributors shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of the Application, including but not limited to loss of data, loss of profits, or business interruption.

11. Termination

We may suspend or terminate your access to the Application at any time for violation of these Terms. You may stop using the Application at any time. Sections 9, 10, and 12 survive termination.

12. Governing Law

These Terms shall be governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to conflict of law principles.

13. Changes to These Terms

We may update these Terms at any time. Material changes will be communicated through the Application or our website. Continued use after changes are posted constitutes acceptance of the revised Terms.

14. Contact

For questions about these Terms, contact us at: contact@devseccode.com