Plain terms for a
trust product.

Guardrails analyzes published IDE extension releases and presents the results as public exact-release reports. You can also analyze extensions installed on your machine with the local CLI, import portable report bundles into your browser, monitor watched extensions for meaningful changes, and coordinate review decisions in a team workspace.

Public reports, the detection catalog, scoring methodology, and validation results are published openly so you can check our work.

You may need an account to use monitoring or a team workspace. Keep your credentials safe, use an accurate contact address, and remember that you are responsible for the activity of members you invite to your workspace.

Workspace owners and admins control roles, notification targets, and audit exports for their team.

Do not abuse the service: no attempts to bypass rate limits, disrupt availability, access data that is not yours, or repackage our reports as another product without attribution.

Automated access should use the published API endpoints within documented limits. If you need more capacity, talk to us before hammering the service.

Every report is point-in-time evidence about one exact release. Analysis is static and behavioral review is bounded; findings marked INCOMPLETE mean we could not verify enough to decide.

A clean report is not a guarantee that an extension is safe, and a finding is not a legal determination. Use reports as one input alongside your own review and policies. The scoring methodology page explains how decisions are produced.

The Free plan costs nothing. Team and Business plans are introduced as early-access offerings and may carry fees once billing is enabled for your workspace; anything you are charged for will be stated at checkout before payment.

Paid subscriptions are billed through Stripe. You can change or cancel through the billing portal, and cancellation stops future charges while preserving your historical records.

Guardrails depends on third parties it does not control: marketplace registries for package metadata, Stripe for payments when enabled, and delivery providers such as email, Slack, or Jira for notifications you configure. Their availability and terms are their own.

Editor names and marketplace references describe where monitored extensions are published; GuardRails is not affiliated with or endorsed by those platforms.

Our handling of received, retained, and controllable data is described on the privacy policy page. Imported report bundles stay in your browser until you choose to move them.

You can stop using Guardrails at any time. We may suspend accounts or workspaces that violate these terms or create risk for other users; where practical, we will explain what happened and what restores access.

The service is provided as is. To the fullest extent permitted by law, Guardrails is not liable for indirect or consequential damages, or for decisions you make based on reports alone.

Nothing in these terms limits liability that cannot be limited by law.

We will post changes here and update the effective date below. Continued use after a change means acceptance. Governing law: [operating entity and jurisdiction to be confirmed]. Questions: hello@abscissa.dev for anything commercial or account-related, security@abscissa.dev for vulnerabilities.