Question 1

What exactly do I get with each access plan?

Accepted Answer

You receive complete, unrestricted access to all eight AI-powered security modules for the full duration of your chosen plan — 30 days ($300), 60 days ($580), or 90 days ($750). This includes unlimited vulnerability scans across SAST, DAST, and IAST engines, AI-driven code review with semantic understanding, the full custom rule engine with YAML and Python support, complete REST and GraphQL API access, native CI/CD plugins for GitHub Actions, GitLab CI, Jenkins, and Azure DevOps, advanced compliance reporting with pre-built mappings for SOC 2 Type II, ISO 27001, GDPR, HIPAA, and PCI-DSS, real-time threat intelligence feeds with IOC correlation and MITRE ATT&CK mapping, webhook and SIEM integrations for Slack, PagerDuty, Splunk, and Elastic, plus priority email support with a guaranteed under-four-hour response time. There are absolutely no usage caps, hidden fees, or feature restrictions during your access period.

Question 2

Which cryptocurrencies do you accept?

Accepted Answer

We accept Bitcoin (BTC), Ethereum (ETH), USDT (TRC-20), and USDC (ERC-20) through our NOWPayments integration. All transactions are processed non-custodially, meaning we never hold your funds. Once your on-chain payment receives the required confirmations, your vidarstealer account is activated automatically and you receive immediate access to the full platform. We do not store wallet addresses, private keys, or any payment credentials on our servers.

Question 3

How does the AI code review engine work under the hood?

Accepted Answer

Our engine goes far beyond traditional pattern-matching SAST. It performs deep semantic analysis of your source code, building abstract syntax trees and data-flow graphs to understand business logic, authentication flows, and trust boundaries. The models identify insecure deserialization, SQL and NoSQL injection, command injection, authentication bypasses, race conditions, and business logic flaws. Each finding is enriched with a CVSS v3.1 severity score, a realistic exploit scenario, an attack path visualization, and a machine-generated secure refactor with a line-by-line diff. The system learns from your codebase structure to reduce false positives over time.

Question 4

Can I write and deploy my own detection rules?

Accepted Answer

Absolutely. The custom rule engine supports both YAML-based declarative rules for common patterns and full Python scripts for complex logic requiring stateful analysis or external API calls. You can define rules targeting code anti-patterns, infrastructure misconfigurations (Terraform, CloudFormation, Kubernetes manifests), compliance control violations, and runtime behavioral anomalies. Rules integrate directly into CI/CD pipelines via webhooks, can be triggered through the REST API, and support version control via Git sync. Granular RBAC ensures only authorized team members can publish or modify production rules.

Question 5

What compliance frameworks are supported out of the box?

Accepted Answer

We provide comprehensive, audit-ready compliance modules for SOC 2 Type II, ISO 27001, GDPR, HIPAA, and PCI-DSS. Each module includes pre-mapped security controls, automated evidence collection from your scans and configurations, gap analysis against framework requirements, remediation timelines with assigned owners, and exportable documentation packages formatted for third-party auditors. You can also define custom controls for internal security policies or industry-specific regulations, and the system will track compliance posture across all frameworks simultaneously.

Question 6

How do the CI/CD integrations function in practice?

Accepted Answer

We distribute native plugins for GitHub Actions, GitLab CI, Jenkins, CircleCI, and Azure DevOps. Each plugin authenticates securely via short-lived tokens and supports configurable policies: block merge requests that introduce critical or high-severity findings, post annotated PR comments with exact file locations and remediation guidance, trigger differential scans on changed files only for sub-30-second feedback, and enforce security gates based on custom rule outcomes. All integrations support monorepos, matrix builds, and parallel job execution without pipeline degradation.

Question 7

What are the actual scan performance benchmarks?

Accepted Answer

Code repository SAST scans complete in under 60 seconds for repositories up to 500,000 lines of code. Infrastructure and container image scans typically finish in 2-5 minutes depending on layer depth. The AI review engine processes large monorepos in parallel across distributed workers, and findings stream in real-time so engineers do not wait for full scan completion. Differential scans on pull requests average 8-15 seconds. Our infrastructure is globally distributed with edge nodes in North America, Europe, and Asia-Pacific to minimize latency.

Question 8

How is my source code and data protected?

Accepted Answer

All data in transit is protected with TLS 1.3 and perfect forward secrecy. Data at rest is encrypted with AES-256-GCM. We operate under a strict code isolation policy: your source code is never used to train our AI models, never persisted beyond your active scan window, and never shared with third parties. For organizations with stringent requirements, we offer isolated tenant deployments and an on-premise option for fully air-gapped networks. Our infrastructure undergoes annual third-party penetration testing and maintains SOC 2 Type II certification.

Question 9

What happens when my month of access ends?

Accepted Answer

Your platform access expires after 30 days from activation. You may purchase another month at any time with no change in pricing. We do not auto-renew, store payment methods, or engage in subscription trickery. All scan history, custom rules, compliance reports, and configuration settings remain preserved for 90 days post-expiration, allowing seamless reactivation without loss of institutional knowledge. You will receive email reminders 7 days and 1 day before expiration.

Question 10

What is your refund policy?

Accepted Answer

You should know the answer by yourself.

Question 11

Can I use vidarstealer for client engagements and consulting work?

Accepted Answer

Yes. Your single subscription explicitly covers use across multiple internal projects and external client engagements. Many independent penetration testers, security consultants, and MSSPs use our platform as a core component of their service delivery. We recommend creating isolated workspaces for each client to maintain data segregation and confidentiality. Each workspace supports independent rule sets, API keys, and reporting boundaries, ensuring client data never commingles.

Question 12

What support channels are available and what are response times?

Accepted Answer

All subscribers receive access to a dedicated private Telegram channel for direct support. Support is provided in Russian only, and business hours are in Moscow time (MSK, UTC+3). We guarantee a response time of under four hours during business days. Critical infrastructure issues are escalated to on-call engineering with a one-hour response SLA. We also maintain comprehensive technical documentation covering API reference, rule engine syntax, CI/CD configuration, and compliance mapping guides.

❓ FREQUENTLY ASKED QUESTIONS