Guarantee & Refund Policy

This is a conditional accuracy warranty, not a satisfaction guarantee, and these are its terms:

2.1 What counts as a demonstrably false finding. A specific finding in your Report is "demonstrably false" only if, with respect to the Audited Snapshot (the exact commit or submission your Report identifies):

• •(a) the code, pattern, or construct the finding describes does not exist in the cited file in the Audited Snapshot; or
• •(b) the defect or vulnerability asserted by the finding cannot exist in the Audited Snapshot as submitted, established by reproducible evidence.

2.2 What does not count. Disagreements about severity, priority, or style; findings your Report presents as informational, advisory or otherwise hedged rather than as a definite defect; findings that are true of the Audited Snapshot but mitigated by code, configuration, or infrastructure outside what you submitted; findings mooted by changes made after the Audited Snapshot; findings within classes the applicable Audit Methodology identifies as best-effort or excluded; and a quoted fragment that does not match the Audited Snapshot verbatim where the code, pattern, or construct it describes is nonetheless present in the cited file.

2.3 How to claim.

1. 1.Submit within 30 days of Report delivery via support@validash.com, identifying the finding you are disputing, by the identifier your Report shows for it where one is shown, and your evidence of falsity.
2. 2.Preserve the evidence: the audited commit (or submitted archive) must remain available to us unmodified for verification. A claim we cannot verify against the Audited Snapshot cannot be granted: this is the reason for the rule, not a trapdoor.
3. 3.We will verify the claim against the Audited Snapshot and decide it reasonably and in good faith within 10 business days, applying the definition in 2.1. We may issue a corrected Report alongside any decision.
4. 4.If any finding is confirmed false: the full fee for that audit is refunded to your original payment method within 10 business days. One refund per audit (the remedy is that audit's fee, regardless of the number of false findings, they're all free at that point).

2.4 Exclusions. Claims arising from submissions designed to induce false findings (adversarial or manipulated inputs targeting the analysis itself), or where you materially breached the Terms (including submitting code you lacked rights to submit), are excluded.

2.5 Scope of remedy. The False-Finding Refund is the sole and exclusive remedy for any claimed inaccuracy in a Report, and our total liability for Report accuracy will never exceed the fee paid for that audit. Acceptance of a refund resolves all claims arising from that Report's findings.