Terms of Service
Last updated August 24, 2026
1. The service
PostureProof ("the Service") connects to your identity and code providers with read-only access and verifies a fixed set of security controls, producing a score, remediation guidance, and — on paid plans — a public verification badge. The Service is operated by Vuln U, LLC.
2. What a verification means
A PostureProof verification reflects the state of specific, named controls at a point in time, as reported by your provider's APIs. It is not a certification, an audit, a guarantee of security, or a substitute for a formal assessment (such as SOC 2). A passing result does not warrant that your organization is secure or free from compromise.
3. Acceptable use
You may only connect providers and organizations that you are authorized to administer. You may not use the Service to probe, assess, or represent the posture of organizations you do not control, except through features expressly provided for that purpose (such as the verification API, which returns only already-public verification states).
4. Plans, billing & cancellation
Paid plans are billed monthly in advance via Stripe. You may cancel at any time from your dashboard; access continues through the end of the current billing period. Fees are non-refundable except where required by law. Enterprise terms may be set out in a separate agreement.
5. Availability
The Service is provided on an "as is" and "as available" basis. Except where a separate Enterprise agreement states otherwise, we make no uptime or service-level commitment.
6. Disclaimer & limitation of liability
To the maximum extent permitted by law, the Service is provided without warranties of any kind. Vuln U, LLC will not be liable for any indirect, incidental, or consequential damages, or for any security incident, breach, or loss arising from your use of or reliance on the Service. Our total liability is limited to the fees you paid in the twelve months preceding the claim.
7. Changes
We may update these terms; material changes will be reflected by the "last updated" date above. Continued use after changes constitutes acceptance.
8. Contact
This document is provided as a general starting point and does not constitute legal advice. Have counsel review before relying on it.