Last Updated: July 6, 2026
By accessing or using the Pantheon Security website (pantheonsecurity.io) or MEDUSA software, you agree to be bound by these Terms of Service. If you do not agree, do not use our services.
MEDUSA is distributed under the GNU Affero General Public License v3.0 (AGPL-3.0). The full license text is available at github.com/Pantheon-Security/medusa.
Key points of the AGPL-3.0 license:
MEDUSA is a static application security testing (SAST) tool that scans source code for security vulnerabilities. It is provided free of charge under the AGPL-3.0 license.
Our website provides information, documentation, and resources related to MEDUSA and security best practices.
You agree to use our services only for lawful purposes. You must not:
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED.
MEDUSA is a security scanning tool that may produce false positives or miss vulnerabilities. We make no guarantees about:
Important: MEDUSA should be one component of a comprehensive security strategy, not the sole security measure.
IN NO EVENT SHALL PANTHEON SECURITY BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUES, WHETHER INCURRED DIRECTLY OR INDIRECTLY, OR ANY LOSS OF DATA, USE, GOODWILL, OR OTHER INTANGIBLE LOSSES.
MEDUSA source code is licensed under the AGPL-3.0 license and hosted on GitHub. The community is encouraged to contribute, fork, and modify the software according to the AGPL-3.0 license terms.
The Pantheon Security name, logo, and website content are owned by Pantheon Security. You may not use our trademarks without prior written permission.
If you contribute to MEDUSA via pull requests, issues, or other means, you agree that:
MEDUSA is self-contained and does not install external security tools. Its own open-source Python dependencies are each governed by their own licenses; Pantheon Security is not responsible for third-party software.
Your use of our services is also governed by our Privacy Policy. MEDUSA does not collect or transmit your source code or scan results.
If you discover a security vulnerability in MEDUSA, please report it responsibly to security@pantheonsecurity.io. See our Security Policy for details.
We reserve the right to modify these Terms of Service at any time. Significant changes will be announced via our GitHub repository or website. Continued use of our services after changes constitutes acceptance of the new terms.
We reserve the right to terminate or suspend access to our services immediately, without prior notice, for conduct that we believe violates these Terms or is harmful to other users, us, or third parties.
These Terms shall be governed by and construed in accordance with the laws of the United States, without regard to its conflict of law provisions.
Any disputes arising from these Terms or our services shall be resolved through good faith negotiation. If negotiation fails, disputes shall be subject to binding arbitration.
If any provision of these Terms is found to be unenforceable or invalid, that provision shall be limited or eliminated to the minimum extent necessary, and the remaining provisions shall remain in full force and effect.
These Terms, together with the AGPL-3.0 license and our Privacy Policy, constitute the entire agreement between you and Pantheon Security regarding our services.
For questions about these Terms of Service: