Terms of service
The short version: we take a careful, read-only look at the public side of an app you own, and send you a plain-English report with fix suggestions. It's a helpful check, not a guarantee. If we can't check your site or we're late, you get your money back, and you can get a refund within 7 days of delivery if you're not happy.
1. Who we are
Milo Kits (milokits.com) is run by Erhan Civelek, an individual based in Istanbul, Turkey, trading as Milo Kits ("we", "us"). Contact: hello@milokits.com. By ordering a check, requesting a free mini-check or using the site, you agree to these terms.
2. The service
- Free mini-check: we email you the top 3 issues we spot on the public side of your app.
- Quick Check ($29): an outside-in review of one live URL, with a report covering things like exposed secrets, database exposure, exposed files, admin routes and security headers, and a suggested fix prompt for each finding.
- Deep Check ($79): everything in the Quick Check, plus up to 10 extra pages, subdomains or API routes, optional review of database rules you send us, an outside review of sign-in and payment flows, and one free re-check.
- Delivery: we aim to deliver reports within 24 hours of a complete order.
Reports are prepared with help from an AI assistant and reviewed by the operator before they're sent.
3. What we do and don't do
Our checks are passive. We make a small number of ordinary, rate-limited requests and look at what anyone on the internet can already see. We don't try to break in, guess passwords, exploit vulnerabilities, overload your app or log in as your users. If a public key is already visible, we may confirm whether a database answers anonymous read requests by asking for at most one record, and we don't store its contents.
4. You must own the site, or be authorized to test it
You may only submit sites you own or have explicit permission to have tested. By submitting a URL, you confirm (warrant) that this is true and that you consent to the checks described here. You're responsible for any claims arising from a URL you weren't entitled to submit. If we have reason to believe a site isn't yours, we may decline or cancel the check and refund you.
5. No guarantee
A Launch Check is a best-effort review of the publicly visible parts of your app at the time we look. It's not a penetration test, security audit or certification, and it can't find every issue. A clean or cleaner report doesn't mean your app is secure. Apps change, so a later change can undo a fix or introduce a new problem.
6. Using our fix suggestions
Fix prompts and recommendations are suggestions. Review every change (and the code your AI tool writes) before deploying it, keep backups, and test in a safe environment where you can. You're responsible for the changes you make to your app.
7. Payments and refunds
Prices are one-off and shown in USD. Lemon Squeezy is the merchant of record for our sales. It processes your payment and handles taxes and receipts, and its buyer terms also apply to your purchase. Local taxes may be added at checkout.
- Full refund if we can't check your site (for example it's offline, behind a login or the URL is wrong) or if your report isn't delivered within 48 hours of a complete order.
- No-questions-asked refund within 7 days of delivery if you're not happy with your report. Just email hello@milokits.com.
These refund promises are in addition to any rights you have under the consumer law that applies to you.
8. Your report
Your report is yours to use however you like for your own app, including sharing it with your team or developers. We won't publish it or anything that identifies your app without your permission. We may use anonymized, aggregated learnings (for example "missing headers are common") to improve our checks and guides.
9. Acceptable use
Please don't use Milo Kits to target sites you don't own, to find weaknesses to exploit, or in any way that breaks the law. Don't send us passwords, private keys or service-role keys.
10. Limitation of liability
To the fullest extent the law allows, our total liability for any claim relating to a check or report is limited to the amount you paid for that check (which is zero for a free mini-check). We're not liable for indirect or consequential losses such as lost profits, lost data, or problems caused by changes you make to your app, or by security issues our check didn't find. Nothing in these terms limits liability that can't be limited by law, such as for fraud, gross negligence or wilful misconduct, or your mandatory rights as a consumer.
11. Newsletter
Ship It Safe is free and you can unsubscribe at any time. Sponsored content in the newsletter or on our guides is always labelled.
12. Changes to these terms
We may update these terms from time to time. The version in effect when you place an order applies to that order.
13. Governing law
These terms are governed by the laws of the Republic of Turkey. The courts and enforcement offices of Istanbul have jurisdiction over any dispute, without prejudice to any mandatory right you have as a consumer to bring a claim where you live (including before Turkish consumer arbitration committees).
14. Contact
Questions, refunds or anything else: hello@milokits.com. You can also find us on X at @milokits. See also our privacy policy.