Legal
Terms of service
Draft. These terms are being finalized and are not yet in effect.
These terms are an agreement between you and Entropy Logic LLC (“Avento”, “we”, “us”) for your use of the hosted Avento service: Quick Scans, Full Scans, the Avento dashboard and API, Avento in ChatGPT and other MCP clients, and this website (together, the “Service”). By using the Service you agree to these terms. If you use it on behalf of an organization, you confirm you are authorized to accept these terms for it.
1. The Service
Avento looks for security issues in web applications. A Quick Scan checks a live website passively. A Full Scan checks a project’s source repository and its live deployment together, and reports a finding as CONFIRMED when the issue seen in the code is also reproduced live. Quick Scans are available without an account, within usage limits. Avento accounts include a Free plan, and paid plans add more scans, projects and members; paid plans are covered by section 5. The open-source Avento scanning engine and command-line tool are licensed separately under the MIT License; these terms cover the hosted Service.
2. Authorization to scan
Scanning a system you are not allowed to test can be unlawful. Use the Service only on websites, applications, repositories and backend services that you own or operate, or that you have explicit permission to test. Each time you start a scan, you confirm that you have that authorization, and you are responsible for the targets you choose.
Avento limits what each scan does. Full Scans run active checks only on domains you have verified in Avento, other targets get passive checks only, and aggressive checks run only when you turn them on. Avento does the minimum needed to confirm a finding and does not exploit what it finds. These limits do not replace your own authorization.
3. Acceptable use
Use the Service only in compliance with applicable law. You must not:
- try to get around rate limits, plan limits, domain verification, robots.txt opt-outs or other safeguards, including by rotating identities, accounts or network addresses;
- use the Service, or its results, to attack, overload, disrupt or gain unauthorized access to any website, system or data;
- interfere with or try to gain unauthorized access to the Service, other workspaces, or the systems behind it;
- upload or connect content you do not have the right to share with us;
- use the Service to harass anyone, or in a way that violates the rights of others; or
- resell or provide the Service to others as a standalone offering without our written permission.
4. Accounts, workspaces and connections
To create an account you must be at least 16 years old and give us an email address that you control and confirm. Keep your password and API tokens secure; you are responsible for activity under your account, including through tokens you create and apps you connect, such as ChatGPT. Workspace owners decide who belongs to a workspace and are responsible for its members’ use of it. Tell us promptly at support@avento.run if you think someone else has used your account.
When you connect a GitHub repository or a deployment to a project, you authorize Avento to access it to run the scans you request, until you disconnect it or delete the project or your account. Avento asks GitHub only for read-only access to the repositories you choose and does not change your code.
5. Paid plans, billing and cancellation
Plans and prices. The paid plans, their prices and their limits (such as Full Scans each month, projects and members) are shown on our website and at checkout. Prices are in U.S. dollars; any applicable taxes are shown at checkout. To buy a paid plan you must be old enough to enter a binding contract where you live.
Automatic renewal. Paid plans are subscriptions. When you subscribe, you authorize us, through our payment processor Stripe, to charge your payment method the plan’s price at the start of each billing period shown at checkout. Your subscription renews automatically until you cancel.
Cancelling. You can cancel at any time from the Account page of the dashboard or by emailing support@avento.run. Cancellation takes effect at the end of your current billing period: you keep your plan’s limits until then and are not charged again. After that, your workspace moves to the Free plan’s limits; your projects and scan history remain until you delete them or your account.
Refunds. If you are not satisfied with your first payment for a plan, email us within 14 days of it and we will refund it in full. Otherwise, payments are non-refundable, and we do not give refunds or credits for partial periods or unused scans, except where the law requires it or as described below.
Changing plans. You can change plans from the Account page. Any price difference, including any proration, is shown before you confirm the change.
Price changes. We may change plan prices. We will email you at least 30 days before a new price applies to your subscription, and it will apply from your next billing period after that notice. If you don’t want to pay the new price, cancel before it applies.
Failed payments. If a payment fails, Stripe may try again. If we still can’t collect it, we may move your workspace to the Free plan’s limits until the payment is made.
If we end a paid plan. If we discontinue a paid plan, materially reduce what it includes, or end your subscription for a reason other than your breach of these terms, we will refund the unused part of your current billing period.
6. What the results are, and aren’t
Findings describe what Avento observed during one scan: CONFIRMED findings were seen in the source code and reproduced on the deployment, OBSERVED findings were seen live, and POTENTIAL findings were seen in the code only. Every report lists the checks that did not run. Results can be incomplete or wrong, and a scan with no findings does not mean an application is secure. Avento is not a penetration test, security audit, or compliance certification. Fix recommendations are suggestions: review them, and test changes, before you apply them. Use your own judgment, and qualified professionals where it matters, before acting on results.
7. Availability and changes
We work to keep the Service available, but it is provided without any uptime commitment. We may change, limit, suspend or discontinue any part of it, including usage limits, at any time; section 5 explains what happens to paid plans. We may suspend or block access, or stop a scan, that we reasonably believe violates these terms or puts the Service or others at risk.
8. Third-party services
You can use Avento through ChatGPT and other MCP clients, connect repositories through GitHub, and pay through Stripe. Those services are provided by third parties under their own terms and policies, and we are not responsible for them, including for how an assistant interprets or presents Avento’s results.
9. Ownership
We own the Service, including its software, checks and branding, except for the open-source components licensed to you under their own licenses. You keep all rights to your code, websites and data, and give us permission to access and process them only to provide the Service to you. You may use, share and keep the results Avento returns to you for any lawful purpose.
10. Feedback
If you send us suggestions or feedback, we may use them without obligation to you.
11. Disclaimer of warranties
THE SERVICE AND ALL RESULTS ARE PROVIDED “AS IS” AND “AS AVAILABLE”. TO THE FULLEST EXTENT PERMITTED BY LAW, WE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, ACCURACY, AND NON-INFRINGEMENT, AND ANY WARRANTY THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE OR SECURE, OR THAT IT WILL FIND EVERY ISSUE.
12. Limitation of liability
TO THE FULLEST EXTENT PERMITTED BY LAW, AVENTO WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, DATA OR GOODWILL, ARISING FROM OR RELATED TO THE SERVICE OR THESE TERMS, INCLUDING ANY SECURITY ISSUE A SCAN DID NOT FIND. OUR TOTAL LIABILITY FOR ALL CLAIMS RELATED TO THE SERVICE WILL NOT EXCEED THE GREATER OF THE AMOUNT YOU PAID US FOR THE SERVICE IN THE 12 MONTHS BEFORE THE CLAIM AND US$100. Some jurisdictions do not allow these limitations, so they may not all apply to you.
13. Indemnity
You will defend and indemnify Avento against claims, losses and costs (including reasonable legal fees) arising from your misuse of the Service or your violation of these terms or of anyone else’s rights, including scanning a target you were not authorized to test.
14. Ending use
You can stop using the Service at any time. You can delete your account on the Account page of the dashboard, after cancelling any paid subscription; we delete your data as described in our privacy policy. Disconnect Avento in ChatGPT or any other app you linked. We may suspend or close an account that violates these terms. Amounts already owed, and sections 6 and 9 through 15, continue to apply after you stop.
15. Governing law and disputes
These terms are governed by the laws of the State of Missouri, United States, without regard to its conflict-of-laws rules. Any dispute arising from these terms or the Service will be brought exclusively in the state or federal courts located in Missouri, and you and we consent to their jurisdiction. If you are a consumer, this does not take away any protection given to you by the mandatory law of the country where you live, or your right to bring proceedings in its courts.
16. Changes to these terms
We may update these terms. We will post changes on this page and update the date at the top; significant changes will be announced on the website, and emailed to account holders, before they take effect. Continuing to use the Service after changes take effect means you accept them.
17. Contact
Entropy Logic LLC, Columbia, Missouri, United States. Email support@avento.run. If any part of these terms is found unenforceable, the rest remains in effect. These terms, with our privacy policy, are the entire agreement between you and us about the Service.