Licence Terms

1. What VerdictGit is

VerdictGit ("the Software") is self-hosted software for storing vulnerability-triage decisions ("verdicts") and applying them to scanner reports. It is delivered as a downloadable program (with an optional container image) and is installed, operated and hosted by you, on infrastructure you own or control. There is no VerdictGit cloud service, and the Software does not depend on any server of ours to run. References to "we", "us" or "the vendor" mean the publisher of VerdictGit; "you" means the company named on your licence key (the "Licensed Organisation").

2. Your licence

Subject to these terms and to payment of the applicable fee, we grant the Licensed Organisation a non-exclusive licence to:

• install and run the Software on infrastructure it owns or controls, in as many instances as it reasonably needs (for example production and test);
• use the Software for its own code, its own scanner reports and its own findings; and
• allow its employees, and its contractors working on its behalf, to use the Software under this licence.

The licence is flat per company. There are no per-seat, per-scan, per-finding or per-repository charges, and no feature tiers: every licence includes the complete product.

3. Founding Licence

The Founding Licence is offered to the first 50 companies only, on these terms:

• Price: a one-time payment of $999. No subscription, no renewal, nothing further to pay for the licence itself.
• Duration: lifetime. The right to use the Software — the version line delivered to you and every version we release afterwards — does not expire.
• Updates: all future updates are included, forever, at no additional charge.
• Delivery: the licence is issued as a signed offline licence key naming the Licensed Organisation. It is verified locally by the Software; there is no activation server.
• Transfer: the licence is not transferable, except that it passes automatically to a successor organisation on an acquisition of, or merger involving, the Licensed Organisation. Let us know after such an event and we will re-issue the key in the successor's name.

Founding licences are covered by the 30-day money-back guarantee in our Refund Policy.

4. Standard subscription

The Standard licence is a subscription at $349 per month, flat per company (a yearly licence key is available on the same flat logic). While your subscription is active, you may use the Software under section 2 without restriction. If the subscription is cancelled or lapses, the never-hostage promise in section 6 applies — your data remains fully accessible, and only the writing of new verdicts pauses, after the grace period described there.

5. Evaluation installs

The Software also runs without a licence key, in evaluation mode. Evaluation mode is provided so you can test the Software on your own infrastructure before buying; it is not a substitute for a licence for ongoing production use.

6. The never-hostage promise

This section is a contractual commitment, not a marketing line:

• Expiry, lapse or cancellation of a licence — including cancellation by you — never removes or restricts your access to your own verdict data.
• Reading findings and verdicts, viewing history, ingesting new scanner reports and exporting your data (including the auditor export) always function, licensed or not.
• The only thing that ever pauses is the writing of new verdicts, and only once a licence has expired and a further 30-day grace period has passed. Supplying a renewed key restores writes immediately; no restart or data migration is needed.
• Your verdict files are plain YAML in a git repository you own, in the open format described in section 8. They remain readable — by you, by your auditors, by any tool — whether or not you ever run the Software again.

7. Your responsibilities

• Use the Software lawfully, and only on findings, reports and code you are entitled to process.
• Run it on infrastructure you secure yourself: your network, your access controls, your backups. The Software's security posture assumes the install is operated by you, inside your environment.
• Keep your licence key confidential within your organisation, as you would any licence credential.
• Decide what your verdicts say. The Software records and applies your team's decisions; the decisions themselves — including any accepted risk — are yours.

8. Restrictions — and your format

You may not:

• redistribute, resell, rent, lease or sublicense the Software itself, or provide it as a hosted service to third parties;
• remove or alter licence, copyright or attribution notices in the Software; or
• use the Software to build a competing verdict-store product offered to third parties.

None of this touches your data. The verdict file format is an open specification with a published JSON Schema: you may read, generate, transform and share verdict files freely, forever, with or without a licence. The format is yours; the matching engine is the product.

9. Updates and support

Updates are delivered as signed release packages you download and install on your schedule — the Software never updates itself silently. Standard subscriptions include all updates released while the subscription is active; Founding Licences include all updates, permanently (section 3).

Support is provided by email, at the address published on this website. We aim to answer within two business days; that is a best-effort target, not a service-level agreement, and no uptime or response-time guarantee is offered or implied. Founding customers are additionally invited to feed directly into the product roadmap.

10. Warranty disclaimer

The Software is provided "as is" and "as available". To the maximum extent permitted by law, we disclaim all warranties, express or implied, including merchantability, fitness for a particular purpose and non-infringement. We do not warrant that the Software will be error-free, that matching will catch every counterpart finding, or that it will meet requirements we have not stated in writing. You are responsible for verifying the Software's output in your own environment — as the design intends: uncertain matches are always presented to a human rather than applied silently.

11. Limitation of liability

To the maximum extent permitted by law, our total liability arising out of or relating to the Software and these terms is capped at the amounts you paid us for the Software in the twelve months before the claim arose; for a Founding Licence, the cap is the one-time fee you paid. We are not liable for indirect, incidental, consequential or punitive damages, or for lost profits, lost data-processing capacity or decisions made in reliance on the Software's output — including any triage decision the Software stored or applied at your direction. Nothing in these terms limits liability that cannot be limited by law.

12. Ending a licence

You may stop using the Software at any time. We may terminate a licence only for material breach of these terms — for example, redistribution of the Software — and only after giving you written notice and 30 days to cure the breach. Termination ends the right to use the Software; it does not and cannot reach into your repository: your verdict files remain yours under sections 6 and 8.

13. Changes to these terms

We may revise these standard terms for future purchases, and will note the version and date at the top of this page. The terms in force when your licence key was issued govern your licence; in particular, Founding Licence terms — lifetime duration and all updates included — will not be changed for licences already issued.

14. A note on these terms

These terms are the vendor's standard terms v1.0. They are written to be plain and fair; if your procurement team needs a DPA or redlines, contact us — via the address published on this website — and we will work through it with you.