Use the signal. Understand the limit.
These terms explain the current GAAAS service in plain language. They do not turn an automated scan into a security assurance.
The service
GAAAS provides a registry, automated checks of supported public AI-agent repositories, related domain checks and reports. The first completed scan of a supported repository is free and published immediately after explicit acknowledgement. A verified-domain re-scan is available once after first successful DNS verification. Other re-scans may be unavailable while checkout is not offered.
Your responsibilities
Submit only public repository URLs and a domain you are entitled to identify in connection with the scan. Do not use GAAAS to overload the service, submit secrets or private code, evade limits or misrepresent a report. Signing in and scanning a repository does not establish GitHub ownership; domain DNS verification proves only control of the named domain.
If a public repository has already been associated with another account, use support to request review of the claim. A claim is not transferred automatically.
Reading and sharing results
Findings are static, automated indicators from a source snapshot. They can miss problems, report false positives or differ from a running deployment. The score, grade and DNS status are distinct from independent review, certification, regulatory compliance or a warranty. Check the method, scan time, scope, source and limitations before making decisions.
Publication and corrections
GAAAS may temporarily hide critical-finding details on public reports for 30 days; after that, those details may become public automatically. The private owner assessment can contain more detail. Corrections, suspected abuse and privacy requests can be submitted through the support form. We may correct or remove content when review warrants it, but do not promise a specific response time or outcome.
Availability and changes
Scans depend on public source access, domain checks and service availability. Quotas and supported files may limit a scan. We may update the interface, checks or these terms; a report remains tied to its stated method and scan time. Use of the service is at your own risk and should not replace a professional security review.