Terms of Service

1. Scope and provider

These terms govern your purchase and use of the Vettalon website, Vettalon Pro and Vettalon Team (together, the "Paid Products"). The Paid Products are provided by Dudu Technology Ltd. (嘟嘟數位科技有限公司, "we", "us"), a company incorporated in Taiwan.

Contact: info@dudustudio.monster. By buying or using a Paid Product you agree to these terms. If you buy on behalf of a company or organisation, you confirm you are authorised to accept these terms for it.

2. Open-source core

The vettalon open-source core (the command-line auditor) is licensed under the Apache License 2.0, and that license governs its use. The payment, license-key and refund sections of these terms apply only to the Paid Products.

3. Orders and payment

Orders for the Paid Products are processed by our online reseller, which acts as the Merchant of Record for the transaction. The reseller collects payment, issues your receipt, and calculates and remits sales tax or VAT for your location. The reseller is named on the checkout page and on your receipt, and its buyer terms also apply to your payment.

Prices on this site are in US dollars and exclude tax. Businesses and government agencies in Taiwan can request a quote in New Taiwan dollars; the individual quote then applies.

4. License

Vettalon Pro: a one-time payment gives one named user a perpetual license to install the product on up to 3 of their own devices. Versions released within 12 months of purchase are included. After that, you can renew the update plan for US$49 per year to keep receiving new versions. If you don't renew, you can keep using the versions you already have, forever.

Vettalon Team: an annual subscription for up to 10 named users within one organisation, including all updates and priority email support during the term. If the subscription expires without renewal, the Team license ends.

Your license key and download link are emailed to the address you used at checkout once payment completes.

You may not resell, rent or distribute license keys, let more users or devices use the product than your license allows, or circumvent license checks. We retain all copyright and other intellectual property in the Paid Products; any right not expressly granted here is reserved.

5. Lawful use

Use Vettalon only on code and systems you own or are explicitly authorised to test.

Supply-chain hunting reviews the public source of published third-party packages. Vettalon only produces disclosure drafts and never sends them automatically. Whether and where to send a disclosure is your decision, and you are responsible for following each project's disclosure policy and applicable law.

You may not use Vettalon to gain unauthorised access to anyone's systems or data, or for any unlawful purpose. Sandbox PoCs run in an isolated container on your own machine and must not be repurposed against third-party systems.

6. Third-party AI models

AI review uses the model-provider account or API key you configure (for example Anthropic, OpenAI or Google), or a model running locally on your machine. Your relationship with, and any charges from, a model provider are governed by that provider's terms. Code snippets go straight from your machine to the provider you choose; we never receive them.

7. Nature of results and disclaimer

AI and static analysis can miss issues and can report false positives. Vettalon's reports support human judgement. They do not guarantee that code is free of vulnerabilities and do not replace a qualified security professional.

To the extent permitted by law, the Paid Products are provided "as is", without any express or implied warranty, including merchantability or fitness for a particular purpose.

8. Limitation of liability

To the maximum extent permitted by law, our total liability to you is limited to the amount you actually paid for the relevant Paid Product in the 12 months before the event giving rise to the claim. We are not liable for indirect, incidental or consequential damages, including lost profits or lost data.

Nothing in these terms excludes consumer rights that cannot be excluded under applicable law.

9. Refunds

Refunds follow our Refund Policy: you can get a full refund within 14 days of your first purchase or of any renewal charge.

Read the Refund Policy

10. Changes

We may update these terms. The updated version will be posted on this page with a new effective date, and material changes will be announced at least 14 days before they take effect. Later changes will never reduce the scope of a license you have already bought.

11. Governing law and jurisdiction

These terms are governed by the laws of the Republic of China (Taiwan). The Taiwan Taipei District Court has jurisdiction as the court of first instance, without affecting any right a consumer has under applicable law to bring proceedings in their home courts.