Security & Legal Disclaimers
1. General Security Analysis Disclaimer
CorvixMCP analyzes configuration exports, Infrastructure-as-Code (IaC) plans, and role policies to trace theoretical and deterministic escalation pathways. While CorvixMCP assists development and security teams in identifying hidden multi-hop vulnerabilities and circular privileges, no automated tool can detect 100% of security threats or configuration anomalies.
The output of CorvixMCP does not constitute a formal cybersecurity audit, certification, or penetration test report.
2. Surgical Remediation Code Snippets
CorvixMCP provides automated surgical remediation code snippets (such as Terraform HCL patches, AWS IAM JSON updates, and Kubernetes RBAC adjustments) to sever identified vulnerable paths:
- Remediation snippets are generated algorithmically based on static permission graphs.
- Human Verification Required: You must always inspect, test, and validate suggested remediation changes in a non-production staging environment prior to applying them in production infrastructure.
- CorvixMCP is not responsible for any operational service interruptions, permission lockouts, or downtime caused by applying generated remediation recommendations.
3. Merchant of Record & Fulfillment
Our order process and software fulfillment are powered by Lemon Squeezy as our Merchant of Record. Lemon Squeezy provides customer service inquiries and handles returns on our behalf in accordance with their terms.
4. Third-Party Trademarks
Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure, Kubernetes, Terraform, HashiCorp, Ansible, and Red Hat are registered trademarks of their respective owners. Reference to these technologies in CorvixMCP documentation or software denotes compatibility with their standard configuration formats and implies no endorsement, affiliation, or sponsorship.
5. Contact
If you have any questions or require clarification regarding our software disclaimers, please reach out to support@corvixmcp.dev.