legal
terms of service.
effective 2026-07-16 · plain-language v1
1. The service
breakit runs autonomous, AI-driven exploratory tests against web applications you point it at, and produces reports of what it found. It is provided "as is", without warranty of any kind. Findings are best-effort signals — including findings marked as reproduced — and are not a guarantee that your application is (or is not) free of defects or vulnerabilities.
2. Only test what you’re allowed to test
You may only run breakit against applications you own or have explicit permission to test. Automated exploration can submit forms, follow links, and exercise APIs on the target. You are solely responsible for the targets you choose and for any consequences of testing them. We may suspend accounts used to test third-party systems without authorization.
3. Accounts & fair use
Free and anonymous tiers have daily run limits; Pro raises them (with a monthly soft cap). Limits exist to keep the shared engine responsive — we may throttle abusive patterns. You are responsible for activity under your account and for keeping your credentials safe.
4. Billing
Pro is a monthly subscription handled by Stripe. You can cancel any time from the customer portal (settings → manage in stripe); access continues to the end of the paid period. If a renewal payment fails we keep your access during the retry window, then downgrade to Free. No surprise charges.
5. Your data
Run configurations, findings, and reports are stored so you can revisit them; you can delete runs from the dashboard. Stored site credentials and API keys are encrypted at rest (AES-256-GCM). Page content from tested sites passes through the AI provider selected for the run (Gemini or Anthropic) to generate findings. Share links make a report readable by anyone who has the link. Anonymous runs are link-accessible by design, since there is no account to scope them to.
6. Acceptable use
No testing of systems you lack permission for, no attempts to abuse the engine to attack third parties, no reselling of the hosted service without an agreement. Active security probes are opt-in and gated behind domain-ownership verification.
7. Liability
To the maximum extent permitted by law, breakit’s liability is limited to the amount you paid in the 3 months before a claim. We are not liable for indirect or consequential damages, or for actions taken (or not taken) based on report contents.
8. Changes
We may update these terms as the product evolves; material changes will be announced on this page with a new effective date. Continued use after a change means acceptance.
Questions: support@breakit.dev. See also our privacy policy.