Terms of service

Afterprompt is a service of Ironleaf Technologies, a business licensed in Dubai, United Arab Emirates. In these terms, “we” means Ironleaf Technologies. Contact: security@afterprompt.io.

Afterprompt checks websites and source code for common security issues and suggests fixes. It offers a free passive website scan, a free plan for code scans with monthly limits, and a Pro subscription billed monthly or yearly, as described on the pricing page. A one-time audit pass was sold until October 2026; passes already bought stay valid until they expire.

Results come from automated checks at a point in time. They don't prove that an application is secure, don't replace a professional security audit, and can include false positives or miss issues. A grade or a badge is not a certification.

Only connect repositories and verify sites that you control or are allowed to test, and follow our acceptable use policy. You stay responsible for your code, your secret keys and the fixes you apply.

You must be at least 18 years old, or the age of majority where you live, to use the service. You sign in with GitHub, so keep your GitHub account secure. You can delete your account at any time from your dashboard.

Ironleaf Technologies sells the paid plans. Payments are processed by Stripe: your card details go straight to Stripe, and we never see them.

Prices are shown before you buy, including any tax. Subscriptions renew every month or every year, as chosen at checkout, until you cancel them from your dashboard, and you keep access until the end of the period you paid for. A founding price, offered to the first customers, stays the same for as long as that subscription stays active; it ends if the subscription is cancelled. A free trial offered at an event needs a card and becomes a paid subscription at the end of the trial unless you cancel before.

Refunds are explained in our refund policy. Stripe's own terms also apply to the payment.

Plans include monthly limits (code scans, monitored sites) shown on the pricing page. We may suspend accounts that abuse the service, for example by mass scanning other people's sites, getting around rate limits or trying to break out of our sandboxes.

You keep all rights to your code. We use it only to run the scans you ask for, as explained in our privacy policy. We don't store your source code, only the findings.

We work to keep the service available, but we don't promise a specific uptime. We may change or stop features; if we stop a paid feature, we'll tell you in advance and refund the unused part of your subscription.

To the extent the law allows, our total liability for any claim related to the service is limited to the amount you paid us in the 12 months before the claim, and we are not liable for indirect losses such as lost profits or lost data. Nothing in these terms limits liability that can't be limited by law.

You can delete your account at any time: this cancels your subscription and erases your data. We may suspend or close accounts that break these terms.

We'll post changes on this page and, for important ones, email account holders at least 14 days before they apply.

These terms are governed by the laws of the Emirate of Dubai and the federal laws of the United Arab Emirates, and disputes go to the courts of Dubai. If you are a consumer, you keep the protection of the mandatory laws of the country where you live.