Last updated: December 2025
By accessing or using Rukia ("the Service"), you agree to be bound by these Terms of Service. If you do not agree to these terms, do not use the Service.
Rukia is a security vulnerability scanning platform that analyzes Next.js and TypeScript codebases for potential security issues including XSS, CSRF, SQL injection, API key exposure, and other vulnerabilities. The Service integrates with GitHub to access and analyze your repositories.
By connecting your GitHub account, you authorize us to access your repositories in read-only mode for the purpose of security scanning. You can revoke this access at any time through your GitHub settings. You must only grant access to repositories you have the right to scan.
The Service operates on a token-based system. Tokens are consumed when performing security scans. Token packages are non-refundable once purchased. We reserve the right to modify token pricing with 30 days notice.
You agree not to:
THE SERVICE IS PROVIDED "AS IS" WITHOUT WARRANTIES OF ANY KIND. We do not guarantee that our scans will detect all vulnerabilities in your code. The Service is a tool to assist in security review, not a replacement for professional security auditing. You are solely responsible for the security of your applications.
We shall not be liable for any indirect, incidental, special, consequential, or punitive damages resulting from your use of the Service. Our total liability shall not exceed the amount you paid for the Service in the 12 months preceding the claim.
You retain all rights to your code and repositories. We retain all rights to the Service, including our scanning algorithms, user interface, and brand. Scan results are owned by you and can be used for any lawful purpose.
We may terminate or suspend your account at any time for violation of these terms. You may terminate your account at any time by disconnecting the GitHub integration and contacting us. Upon termination, your data will be deleted according to our Privacy Policy.
We reserve the right to modify these terms at any time. We will notify users of significant changes via email or through the Service. Continued use after changes constitutes acceptance of the new terms.