The deal, in plain English

CodeTruss analyzes repositories you connect and produces reports: architecture maps, health scores, findings, issue roadmaps, and — only when you explicitly approve them — automated fix pull requests. Analysis is static and read-only; we never execute your code and never push to your default branch. CodeTruss also provides a downloadable local CLI that analyzes agent changes on your machine. Optional --llm review supplies a bounded task, reviewed diff, review instructions, and response schema to the provider you select under your provider account; its client may add runtime instructions or metadata. Only an explicit sync sends a redacted receipt to CodeTruss; it never sends the patch.

You are responsible for your account credentials and for the people you invite to your organization. Your code, and the findings and reports generated from it, remain yours. We claim no ownership over anything CodeTruss produces about your repositories.

The CLI is proprietary CodeTruss software, not open source. Subject to these Terms and the license included with the package, we grant you a limited, revocable, non-exclusive, non-transferable license to download, install, and use it for your own internal code-quality work. You may not sell, sublicense, redistribute, or publicly host it, or reverse engineer it except where applicable law does not allow that restriction. Third-party components remain subject to their own licenses.

Only connect repositories you own or have permission to analyze. Don’t use CodeTruss to probe other people’s code, to attempt to extract secrets from codebases you don’t control, or to disrupt the service (e.g. deliberately pathological repositories or abusive scan volumes). The product is scoped to defensive code-health work, and so is your use of it.

Paid plans are billed monthly through Stripe. You can cancel any time from the billing portal in your dashboard; your plan stays active until the end of the period you already paid for, and we don’t do partial-month refunds. Prices may change, but never mid-cycle and never without notice. The free tier is free — no card required.

CodeTruss is provided as is, while in active development. Findings can be wrong or incomplete: a clean scan is not a guarantee that your code is healthy or secure, and a finding is not a guarantee that something is broken. A CLI PASS receipt is likewise evidence about the checks that ran, not a guarantee of correctness or security. Automated fix PRs are suggestions — review them like you would review any contributor’s work before merging. If CodeTruss causes you loss, our total liability is capped at what you paid us in the twelve months before the claim.

You can stop using CodeTruss whenever you like — uninstall the GitHub App and nothing of ours can touch your repositories. We may suspend accounts that break section 4, and we’ll say why. Your CLI license ends when these Terms end. Data deletion works as described in the privacy policy.

If these terms change materially we will update this page and its date, and email account owners. Questions: zack@codetruss.com.