Terms of service
These terms cover the Stingward report, a paid security check of one software project. The free Stingward tool (the command line, the Claude Code plugin and the GitHub Action) is covered by its Apache 2.0 license, not by these terms.
Who we are
Stingward is run by Isaque Moutta, an individual in Brazil ("we" and "us"). Write to support@stingward.com about anything in these terms.
Who sells the report
Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle takes the payment, issues the invoice, charges sales tax or VAT where it applies and sends refunds. Paddle's buyer terms also apply to your purchase.
What you get
For US$ 29 (R$ 99 when you buy from Brazil), paid once, we check one project that you send as a zip file or as one GitHub repository.
- Stingward reads the code and an automatic review goes over each finding.
- You get a PDF report in the language you chose, with a grade from A to F, a summary in plain words, where each problem is, why it matters, how to fix it and what to fix first.
- After you fix things, you can send the new version of the same project once, free, within 30 days of the first report.
Sales tax or VAT may be added depending on where you live. Paddle shows the total before you pay.
What it does not cover
The report reads the code you send. It looks for common, known mistakes and is not a guarantee that the app is secure.
- It does not test the running app, your servers, your cloud settings or anything that is not in the code.
- Like any automatic check, it can miss problems, and the review can be wrong about a finding.
- It says how to fix each problem. Making the fix is up to you.
- It is information to help you, not a certification or legal or professional advice.
Your part
Send only code that is yours or that you have permission to check, and confirm it when you order. Do not use the service to check someone else's project without permission, to send malicious code or to try to break the service. We may refuse or end an order that does, and refund it.
Keep your own copy of the report: it is deleted after 30 days.
Time limits
- Send your project within 7 days of paying. If nothing arrives, we refund you in full.
- The report is usually ready in minutes. If it is not ready within 24 hours of receiving your project, we refund you in full.
- The zip can be up to 25 MB. A project we cannot check (over our limits, with no code we can read, or in a file we cannot open) is refunded in full.
- The report and its link work for 30 days. Then the report is deleted.
Refunds
The refund policy says when you get your money back. Most refunds are automatic.
Your data
The privacy policy says what we collect, who else handles it and when it is deleted. In short: your code is deleted as soon as the report is ready, always within 48 hours.
Liability
We work for the report to be right, but we cannot promise that it finds every problem or that every finding is correct. As far as the law allows, we are not liable for losses caused by a problem the report missed, by a wrong finding or by changes you make because of the report, and our total liability for an order is the amount you paid for it. Nothing in these terms limits rights that consumer law gives you and that cannot be waived.
Changes
We may change these terms. The version published when you paid applies to your order. The date below says when they last changed.
Law
These terms are governed by the laws of Brazil. If you buy as a consumer, you also keep the protection of the mandatory laws of the country where you live and can go to its courts.
Last updated: October 22, 2026.