Terms
Last updated 7 November 2026
The deal between you and Shipmate, in plain words. If something here is unclear, ask us before you buy.
1. Who we are
Shipmate runs this site and the services on it. "We" means Shipmate. "You" means the person or company using the site or buying a service.
2. What we offer
Three things. A free check that reads your public pages. Lockdown, a fixed-price review of your app with fixes sent as pull requests. Pentest, a fixed-price manual test with a report and a letter for your buyers. Each service's page says what's included.
3. Written permission
We only test systems you own or have permission to test. Before Lockdown or Pentest starts, you sign a short permission document that sets the scope and the dates. We don't test anything outside it.
4. The free check
The free check is passive. It reads the public pages and files of your domain the way any visitor's browser would. It doesn't log in, send attack traffic or try to break anything. You confirm you own the domain or may check it.
5. Prices and refunds
Prices are fixed and shown before you pay. Lockdown is paid in full up front. Pentest is paid half up front and half on delivery. If we can't start the work, for any reason, you get a full refund.
6. Timing
We give targets, not deadlines. Target: 2 days for the free check, 3 business days for Lockdown and 5 business days for Pentest, counted from signed permission and access. If we'll miss one, we tell you early.
7. What a test can't do
No test finds everything. Our report covers what we tested, how, and what we found in that time. The letter is evidence that testing took place. It is not a certification, and your auditor decides what counts.
8. Your code and data
You keep ownership of your code, data and our fixes once paid. We use what you share only to do the work and keep it confidential. You approve every change before it's merged. How long we keep things is in the privacy page.
9. Liability
Our total liability for any service is capped at the fee you paid for it. We aren't liable for indirect losses such as lost profit or lost data, except where the law doesn't allow that limit.
10. Changes and contact
We may update these terms. When we do, the date at the top changes, and work already agreed stays under the terms you signed. Questions go through the contact page.