Terms of sale and licence
Last updated: 1 November 2026.
Who sells Surface
Surface is sold by José Sosa, a sole trader based in Bari, Italy. P.IVA 08960590720.
You can reach me at founder@cvss-associates.com.
What you buy
You buy a one-time licence to the Surface security skills. $89 total. You pay once.
The sale is complete when you get the confirmation email with your licence key.
Updates
Every future update and version of Surface, including Surface 2, is included at no extra cost, for as long as I make Surface. I'll keep Surface working as described, as the law requires. If an update makes Surface worse for you, you can keep using the version you have.
What the licence lets you do
- One licence is for one named person. You can use it for your own projects or your work for an employer or client. Each person needs their own licence.
- You can't redistribute the skills. That means sharing or reselling the skill files themselves, free or paid.
- You can't transfer the licence to someone else.
How you get it
You need an agent that reads skills from .agents/skills (Claude Code, Cursor, Codex, Berd, Grok Bot or any such agent), and Node to run npx.
Surface is digital. Nothing is shipped. You install it with npx surface add and your licence key, or you download a ZIP.
14-day money-back guarantee
By law, consumers in the EU can withdraw within 14 days, using the form below or by email.
Try Surface for 14 days, no questions asked. If you're not happy, email founder@cvss-associates.com within 14 days of buying and we'll refund you in full. You don't need to give a reason. The refund goes back to the payment method you used, within 14 days of your email. When you get a refund, your licence ends, so please delete your copies of Surface. This applies to everyone, including business buyers. It's on top of your rights under the law, not instead of them.
This doesn't affect your legal rights if Surface doesn't work as described.
Buying for a business
If you buy for a business, you aren't a consumer. The consumer withdrawal rules apply to consumers only.
What Surface isn't
- It's not a security audit.
- It's not a guarantee that your app is secure.
The skills help your coding agent check its work. You are still responsible for your app.
Liability
Surface is a set of security skills. There's no guarantee your agent will find every vulnerability.
My liability is limited to the amount you paid for Surface, except where the law doesn't allow a limit. For example, liability for fraud or gross negligence can't be excluded.
I'm not liable for indirect or consequential loss, such as lost profits or data, except for fraud or gross negligence.
Which law applies
These terms are governed by Italian law. If you are a consumer in the EU, you keep the protections of your own country's consumer law.
If you are a consumer, you can bring a claim in the courts where you live. If you buy for a business, the courts of Bari have exclusive jurisdiction.
These terms are in English.
Your data
See the Privacy notice.
Changes
I may update these terms. The version that applies to you is the one on this page when you bought.
Contact
José Sosa · Bari, Italy · founder@cvss-associates.com
Model withdrawal form
(complete and return this form only if you wish to withdraw from the contract)
- To José Sosa, Bari, Italy, founder@cvss-associates.com:
- I/We (*) hereby give notice that I/We (*) withdraw from my/our (*) contract of sale of the following goods (*)/for the provision of the following service (*),
- Ordered on (*)/received on (*),
- Name of consumer(s),
- Address of consumer(s),
- Signature of consumer(s) (only if this form is notified on paper),
- Date
(*) Delete as appropriate.