Terms of Service
Effective date: August 10, 2026
These Terms of Service ("Terms") govern your access to and use of magebean.com, the Magebean Security Dashboard, hosted Magebean APIs, and related services (collectively, the "Services"). By creating an account, purchasing a plan, or using the Services, you agree to these Terms.
If you use the Services on behalf of an organization, you represent that you have authority to bind that organization. In that case, "you" includes the organization.
1. The Services
Magebean provides tools for defining Magento security baselines, running and recording assessments, ingesting Magebean CLI results, managing findings and remediation, reviewing evidence, monitoring baseline drift, and generating reports.
The Magebean CLI is open-source software and is governed by the license distributed with its source code. These Terms govern hosted services, accounts, APIs, downloads, and website features, but do not replace the open-source license for your use of the CLI itself.
2. Accounts and workspace administration
You must provide accurate account information and keep it current. You are responsible for:
- safeguarding account credentials and authentication methods;
- activity performed through your account;
- assigning appropriate workspace roles and permissions;
- promptly removing access for people who no longer require it; and
- notifying us at support@magebean.com if you suspect unauthorized access.
Workspace owners and administrators may access, manage, export, and delete workspace data and may control your access to that workspace.
3. Authorized security use
You may use Magebean only on Magento stores, applications, infrastructure, and endpoints that you own or are expressly authorized to assess. You are responsible for obtaining permission before scanning or testing any system.
You must not use the Services to:
- access, scan, disrupt, or test systems without authorization;
- introduce malware, exploit vulnerabilities, evade access controls, or interfere with service availability;
- upload secrets, payment-card data, unlawful content, or data you are not permitted to process;
- misrepresent scan results, reports, certifications, or compliance status;
- reverse engineer or circumvent limits of the hosted Services except where applicable law expressly permits it;
- resell or provide access to the Services except under an authorized plan or written agreement; or
- use the Services in violation of law or another person's rights.
We may rate-limit, suspend, or restrict activity that threatens the security, integrity, or availability of the Services or third-party systems.
4. Security results and professional judgment
Magebean identifies observable signals and helps organize verification work. Results may contain false positives, false negatives, incomplete evidence, or recommendations that require professional review.
Magebean does not guarantee that a Magento environment is secure, free from vulnerabilities, compliant with law, or protected from incidents. Magebean is not a penetration test, legal opinion, PCI DSS certification, OWASP certification, Adobe endorsement, or substitute for qualified security, legal, or compliance advice. You remain responsible for scope, risk decisions, remediation, operational controls, and compliance obligations.
5. Your data
You retain ownership of content and data you submit to the Services ("Customer Data"). You grant Magebean a limited, non-exclusive right to host, process, transmit, reproduce, and display Customer Data only as needed to provide, secure, support, and improve the Services and to comply with law.
You represent that you have all rights and permissions necessary to submit Customer Data and instruct us to process it. You are responsible for configuring submissions and evidence so they do not contain credentials, payment-card data, or unnecessary personal information.
We may create aggregated or de-identified information that does not reasonably identify you, your organization, or a Magento instance, and use it to operate, secure, analyze, and improve Magebean.
Our handling of personal information is described in the Privacy Policy.
6. Plans, fees, and payment
Some Services are free; others require a paid plan. Current plan features, instance limits, and recurring prices are shown on the Pricing page or in an applicable order form.
For paid plans:
- you authorize Magebean and its payment provider to charge applicable recurring fees and taxes;
- subscriptions renew automatically for the stated billing period until cancelled;
- you may cancel before renewal, with cancellation taking effect at the end of the current paid period;
- fees are non-refundable except where required by law or expressly stated otherwise; and
- we may change prices or plan limits with advance notice before the change applies to a subsequent renewal period.
If payment is overdue, we may restrict paid features after providing reasonable notice. Downgrading or cancelling may reduce limits or access to stored data; you should export required information before the change takes effect.
7. Magebean materials
Magebean and its licensors retain all rights in the hosted Services, website, documentation, designs, trademarks, and other materials excluding Customer Data and separately licensed open-source software. No rights are granted except those expressly stated in these Terms.
If you provide feedback, you grant Magebean a worldwide, perpetual, irrevocable, royalty-free right to use that feedback without restriction or obligation to you.
8. Third-party services and open source
The Services may interoperate with Magento, Adobe Commerce, hosting platforms, source repositories, payment providers, or other third-party services. Your use of third-party services is governed by their terms. Magebean is not responsible for third-party products, content, availability, or security.
Open-source components remain subject to their applicable licenses. References to Magento, Adobe, OWASP, PCI DSS, or other standards and trademarks do not imply sponsorship, certification, or endorsement.
9. Confidentiality
Each party may receive non-public information that a reasonable person would understand to be confidential. The receiving party will use confidential information only to perform under these Terms and will protect it using reasonable care. This obligation does not apply to information that is public through no fault of the recipient, already lawfully known, independently developed, or lawfully received from another source.
A party may disclose confidential information when required by law after providing notice where legally permitted.
10. Service changes and availability
We may modify the Services to improve security, reliability, functionality, or compliance. We do not promise uninterrupted or error-free availability. Maintenance, emergencies, dependencies, abuse prevention, and events outside our reasonable control may affect access.
We may discontinue a material paid feature or Service by providing reasonable notice where practicable. This section does not limit any commitments in a separate signed agreement.
11. Suspension and termination
You may stop using the Services at any time. We may suspend or terminate access if you materially breach these Terms, create a security or legal risk, fail to pay applicable fees, or use the Services in a way that could harm Magebean, our users, or third parties.
Where reasonable, we will provide notice and an opportunity to cure. We may act immediately when necessary to prevent harm, comply with law, or respond to a serious security issue.
Upon termination, your right to use the hosted Services ends. Provisions that by their nature should survive—including ownership, confidentiality, payment obligations, disclaimers, and limitations of liability—will survive.
12. Disclaimers
TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE." MAGEBEAN DISCLAIMS ALL EXPRESS, IMPLIED, AND STATUTORY WARRANTIES, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, ACCURACY, AND SECURITY.
Nothing in these Terms excludes warranties or rights that cannot lawfully be excluded.
13. Limitation of liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW, MAGEBEAN WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, DATA, BUSINESS, OR GOODWILL, ARISING FROM OR RELATED TO THE SERVICES.
MAGEBEAN'S TOTAL LIABILITY ARISING FROM OR RELATED TO THE SERVICES WILL NOT EXCEED THE AMOUNT YOU PAID TO MAGEBEAN FOR THE SERVICES DURING THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM. FOR FREE SERVICES, MAGEBEAN'S TOTAL LIABILITY WILL NOT EXCEED CAD $100.
These limits apply regardless of the legal theory and to the extent permitted by law. They do not limit liability that cannot legally be limited.
14. Governing law
These Terms are governed by the laws of British Columbia and the federal laws of Canada applicable there, without regard to conflict-of-law rules. The courts located in British Columbia will have exclusive jurisdiction, unless applicable consumer law requires otherwise.
15. Changes to these Terms
We may update these Terms to reflect changes to the Services, law, or business practices. We will post the revised Terms and update the effective date. If a material change affects an active paid subscription, we will provide reasonable advance notice. Continued use after the effective date of revised Terms constitutes acceptance where permitted by law.
16. Contact
Questions about these Terms may be sent to:
Magebean Support