Terms of service

• You are responsible for the accuracy of your account details and for keeping your credentials secret.
• You must use hardware-backed or phishing-resistant MFA for any account with privileged access.
• You are responsible for who you invite, and for removing access when someone leaves.
• You may not share an account between individuals.

We may suspend an account that presents an active risk to other customers or to the integrity of the platform, with notice where the circumstances allow it.

Vulnetra is a defensive security tool. You agree not to use it, directly or indirectly, to:

• Gain unauthorised access to any system you do not own or have written permission to test.
• Conduct denial-of-service, stress or resource-exhaustion attacks.
• Scan third-party infrastructure you have not been authorised to assess.
• Probe, overload or reverse-engineer the Vulnetra platform itself outside our disclosure programme.
• Use findings or evidence obtained from the platform to harass, defraud or gain unfair advantage.

We actively monitor for scan traffic that targets systems outside a customer's declared scope and will stop jobs that breach this section.

You retain all rights in the findings, evidence and reports produced from your scans. We claim no ownership of your vulnerability data and we do not use it to train models, benchmark other tenants, or for our own commercial purposes.

You grant us the narrow licence required to operate the service: to host, process, transmit and display your data to you and to the recipients you configure.

Connecting Jira, Slack or another third party is your decision and is governed by that provider's terms as well as yours. We are responsible only for the integrity of the synchronisation we perform on your instruction.

If a third-party service is unavailable or changes its API materially, synchronisation may pause. We will notify you and restore it when we can; we cannot guarantee a third party's uptime.

• Fees are as stated in your order form, invoiced monthly or annually in advance.
• Annual plans are invoiced once and are non-refundable, save where we agree otherwise in writing.
• We may change pricing with at least 60 days notice before a renewal date.
• Manual penetration-testing engagements are scoped and quoted separately, per target.

Each party will keep the other's confidential information confidential and use it only to perform this agreement. This obligation survives termination by three years, and indefinitely for trade secrets and for findings and evidence.

We own Vulnetra, including the software, designs, scanner checks and documentation. You own your data and your configurations.

You may not resell, rebrand or create derivative works from the platform. A white-label report feature is the one permitted distribution path.

We warrant that the service will perform materially as documented and that we will provide it with reasonable skill and care. We do not warrant that scanning will find every vulnerability — no automated or manual testing method does.

Except as expressly stated, the service is provided without further warranty of any kind, including implied warranties of merchantability or fitness for a particular purpose.

To the maximum extent permitted by law, neither party is liable for indirect or consequential loss, or for loss of profit, revenue or data, arising out of this agreement.

Each party's total aggregate liability is limited to the fees paid or payable by you in the twelve months before the event giving rise to the claim. Nothing in this agreement limits liability for death or personal injury caused by negligence, fraud, or anything else that cannot lawfully be limited.

Subscriptions renew automatically for successive terms unless cancelled with 30 days notice before the renewal date.

Either party may terminate for material breach that is not cured within 30 days. On termination we will export your data for 30 days, after which it is deleted in line with the retention schedule in our privacy policy.

These terms are governed by the laws of India, with the exclusive jurisdiction of the courts in Mumbai, Maharashtra, unless your order form specifies otherwise.

We will give 30 days notice of material changes to these terms by email and in-product. Continuing to use Vulnetra after that notice means you accept the change.

Questions about these terms: legal@vulnetra.io.