Terms of service

Fortify Core performs scheduled refresh-only Terraform plans against cloud accounts you connect, classifies detected differences by severity, notifies the destinations you configure, and generates remediation pull requests in your source control. Features vary by plan as described on the pricing page.

You are responsible for the accuracy of account information, for safeguarding credentials, for the activity of every user in your workspace, and for promptly removing users who leave your organisation. Enterprise plans include SSO and role-based access control to help with this.

Trials run 14 days with no card required and convert only if you choose a plan. Paid plans bill monthly in advance in US dollars and renew automatically until cancelled. Charges are based on the daily average of managed resources across connected environments during the billing period.

Cancellation takes effect at the end of the current period; the service remains available until then. Fees already paid are non-refundable except where required by law or where an SLA credit applies. Prices may change with 30 days' notice, effective at your next renewal.

You must hold authorisation for every cloud account and repository you connect, comply with the acceptable use policy, and review remediation pull requests before merge. Self-healing applies only to the classes of drift you explicitly enable, with the delays and volume ceilings you set.

You retain all rights in your data. We use it only to provide and secure the service, as described in the privacy policy and data processing addendum. Each party protects the other's confidential information with at least reasonable care.

Fortify Core retains all rights in the platform, its software and its documentation. You receive a non-exclusive, non-transferable right to use the service during your subscription. Feedback you provide may be used without restriction or obligation.

Enterprise subscriptions carry a 99.9% availability commitment and the response targets set out in the SLA. Team and Scale plans are provided on a commercially reasonable efforts basis with the support channels listed on their plan.

We warrant that the service will perform materially as documented. Otherwise the service is provided "as is". Drift detection depends on the accuracy of provider APIs and the credentials you supply; we do not warrant that every change in your infrastructure will be detected or that a generated pull request is correct without review.

Neither party is liable for indirect, incidental, special or consequential damages, or for lost profits or data. Each party's aggregate liability is limited to the fees paid or payable in the twelve months preceding the claim. These limits do not apply to breaches of confidentiality, indemnity obligations, or liability that cannot be limited by law.

Either party may terminate for material breach not cured within 30 days of notice. We may suspend access immediately for non-payment after notice, or where continued use presents a security or legal risk. On termination we delete or return your data as set out in the data processing addendum.

Material changes are announced to workspace administrators at least 30 days before taking effect. Continuing to use the service after that date constitutes acceptance.

These terms are governed by the laws of the State of Delaware, excluding its conflict of law rules, with exclusive venue in the state and federal courts of Delaware. Legal notices: legal@fortifycore.io.