Terms

This is a draft that counsel has not reviewed. It says in plain words how Sting Shield, its $9.99 plan and this website work. Last updated October 23, 2026.

What Sting Shield is

Sting Shield is software that reads the code you connect and looks for security holes and legal-risk patterns, and can look at a website you prove is yours from the outside. It writes findings in plain words with steps to fix them.

The plan

• $9.99 a month, per account. Stripe takes the payment. Sting Shield never sees your card number.
• It covers up to 3 apps, nightly scans of apps connected through GitHub, "Scan now" up to 5 times a day, and an outside look at up to 3 domains you prove are yours.
• Cancel any time from the billing page (Stripe's customer portal). Cancelling stops the next charge. What happens to the rest of a month already paid for will be written here by counsel.
• No person reviews your findings in this plan. A program does the checks. A person's review may be offered later as an extra; it has no price yet and is not part of this plan.

Only scan what is yours

Acceptable use: connect only code you own or are authorised to test, and add only domains you own or are authorised to test. Sting Shield looks at a domain only after a DNS TXT record proves it is yours, and you agree not to use it to look at anyone else's code or site. We may close an account that breaks this rule.

What the results are, and are not

• The checks are heuristic. They read code for known patterns. They can miss real problems and can flag things that are fine. A heuristic finding says "Found in code (not tested live)".
• No person reviews findings in the $9.99 plan.
• A finding or a report is not legal advice. Legal-risk flags say what was found, not what the law requires of you. They never say you are compliant.
• Sting Shield holds no SOC 2 report or other certification, and a scan does not give you one.
• No guarantee. We do not guarantee that your software is safe, that it is free of holes, or that it meets any law, standard or buyer's requirement. Scans run every night and when you ask; between scans nothing is watching.

Sting Shield never runs your code

It reads files. It does not install, build or run them. Your code is deleted after each scan. See the privacy page for what is kept and for how long.

Limitation of liability (draft)

To the fullest extent the law allows: Sting Shield is provided as it is, without warranties of any kind; Sting Shield is not liable for indirect, incidental or consequential losses, such as lost profits, lost data or a breach of your systems; and Sting Shield's total liability for any claim about the service is limited to what you paid for it in the 12 months before the claim. Counsel will review and may change this section.

Asking a person

The form on the home page saves a question for a person to answer. It is not a contract and does not start a scan.

Please do not put secrets in the form

Do not type a password, key, token or customer's personal information into the request form. If you do, tell us so it can be deleted.

Using the website

Do not attack the site, probe it for weaknesses without asking, send automated or false requests, or try to read another account's pages. To report a security problem you found, use the contact in security.txt.

Still to be written by counsel

Governing law, how disputes are handled, refunds, and the final wording of the liability section. They are left open in this draft on purpose, and the draft should not be treated as final until they are written.

Contact

No contact address has been published yet. Until one is, use the request form on the home page and a person will reply.