Terms of Service

Version 2026-11-01

Rattle provides automated, compute-metered security assessments of repositories and authorized non-production environments. By enrolling a target you accept these terms and the Rules of Engagement, version 2026-11-01.

You must have authority to submit source code and to test every enrolled hostname. Production systems, third-party systems without written authorization, denial-of-service testing, destructive actions, credential theft and persistence are outside the permitted scope.

You control scope and must keep authorization current. Revoke a target or cancel a run when authority ends. DNS ownership proof is an additional technical check, not a substitute for legal authorization.

Purchased credit funds assessment compute in USD. Hosted Checkout shows the amount before payment. A return from Checkout does not add credit; only a verified paid receipt does. Run budgets cap requested compute and unused held credit is released after metering is reconciled. Contact support@rattle.fyi about billing errors or refunds; applicable consumer rights remain in force.

Reports describe observed evidence within a limited scope and time. They are not a certification or guarantee that a system is secure. You remain responsible for reviewing and safely applying remediation. Service availability and assessment completion are not guaranteed.

To the extent permitted by applicable law, the service is provided as available without implied warranties. Nothing in these terms excludes liability or rights that cannot lawfully be excluded. Material changes will be identified by a new terms version. Questions and notices: support@rattle.fyi.