These Terms are the deal.

These Terms of Service (the "Terms") are an agreement between you and PenThreatAI ("PenThreatAI," "we," "us," or "our") governing your use of our websites, applications, desktop and command-line software, agents, and related services (together, the "Service"). By creating an account, clicking to accept, or using the Service, you agree to these Terms and to our Privacy Policy. If you do not agree, do not use the Service. If you use the Service on behalf of an organization, you represent that you have authority to bind that organization, and "you" includes it.

1. Eligibility and accounts

You must be at least 18 years old, or the age of majority where you live, and legally able to enter this agreement. You must provide accurate information, keep it current, and keep your credentials confidential. You are responsible for all activity under your account, whether or not you authorized it. You may maintain only one account unless we agree otherwise. Team accounts are controlled by the team administrator, who may add, remove, and manage members and may access content created within the team.

Authorized security testing only.

2. Authorized security testing and acceptable use

The Service is a security research and penetration testing tool. You may use it only on systems, networks, applications, and data that you own or for which you hold explicit, current, and sufficient written authorization from the owner, and only within the scope of that authorization. You are solely responsible for obtaining, documenting, and complying with such authorization and with all laws that apply to you, including computer misuse, data protection, export, and privacy laws in every relevant jurisdiction.

You must not use the Service to access, disrupt, damage, or exfiltrate data from any system without authorization; to develop or deploy malicious software against third parties; to harm, harass, or defraud any person; to violate the rights of others; to circumvent security, rate limits, quotas, or safety measures of the Service; to reverse engineer or scrape the Service; or to resell or provide the Service to third parties without our permission. We may, but are not obligated to, monitor, moderate, restrict, or refuse any use or content that we believe violates these Terms, applicable law, or the policies of our providers.

AI can be wrong. You own the call.

3. AI features, agents, and execution environments

The Service uses artificial intelligence models and automated agents that may generate text, plan actions, run commands, browse the web, and process files at your direction. AI output and agent actions can be inaccurate, incomplete, outdated, or inappropriate, and may fail or behave unexpectedly. You are responsible for reviewing, validating, and deciding whether to act on any output or finding, and for every action taken by an agent on your behalf. Nothing in the Service is professional, legal, or security advice, and it does not guarantee that any system is secure or that any vulnerability exists or has been fixed.

By default, agent commands run in cloud sandboxes that we may reset, suspend, or delete at any time. If you enable local execution through our desktop or command-line software, commands run directly on your device with the privileges of your user account and without isolation. You accept all risk of local execution, including data loss or damage to your systems, and should use it only on devices dedicated to testing with appropriate backups.

Your Input. Your Output. Our license to run it.

4. Your content

You retain ownership of the prompts, files, findings, and other material you submit ("Input") and, as between you and us, of the output the Service generates for you ("Output"). You grant us a worldwide, non-exclusive, royalty-free license to host, process, transmit, store, reproduce, and display Input and Output as needed to provide, secure, support, and improve the Service and to comply with law. You represent that you have all rights needed to submit your Input and that it does not violate law or third-party rights.

Input and Output may be processed by third-party model, search, and infrastructure providers under their own terms, as described on our Security & Trust page, and we do not control or guarantee the practices of those providers, including whether they use data for training. Output may not be unique, and similar Output may be provided to other users. If you create a shared link, the shared content becomes accessible to anyone with the link and may be viewed, copied, or indexed. Any feedback or suggestions you provide may be used by us without restriction or compensation.

Plans, credits, and abuse controls.

5. Plans, billing, and payments

Some features require a paid plan, seats, or usage credits. Prices, included usage, limits, and features are described in the Service and may change. Subscriptions renew automatically at the then-current price for the same term until cancelled. You authorize us and our payment processor to charge your payment method for recurring fees, seat changes, usage purchases, automatic reloads you enable, and applicable taxes. You may cancel at any time through your account settings, and cancellation takes effect at the end of the current billing period.

Except where required by law or as described in our refund guidelines, all payments are final and non-refundable, and we do not provide refunds or credits for partial periods, unused usage, downgrades, or unused seats. Usage credits and balances have no cash value, are non-transferable, may expire, and are forfeited when your account is closed. Plan changes may be prorated. If a payment fails or is disputed, we may suspend or downgrade your account until the balance is paid. We may change prices or plans with reasonable notice, and continued use after the change takes effect constitutes acceptance. We may offer trials, promotions, discounts, or experimental pricing on any terms we choose and may modify or withdraw them at any time.

6. Referral program and promotional credits

We may offer referral rewards, sign-up bonuses, or other promotional credits. Eligibility, amounts, and conditions are described in the Service and may change at any time. Rewards and credits have no cash value, are non-transferable, and may be limited, delayed, withheld, reversed, or revoked at our discretion, including where we suspect self-referral, duplicate or disposable accounts, spam, or other abuse. We may modify, pause, or end any program at any time without liability.

7. Usage limits and abuse controls

Usage limits, starter bonuses, referrals, and similar eligibility controls may be tied to privacy-preserving account identity signals. Deleting and recreating an account does not reset usage limits or referral eligibility, and you may not circumvent rate limits, quotas, or protective measures. We may adjust limits at any time to protect the Service, manage capacity, or respond to provider availability.

Suspension, software license, third parties.

8. Suspension and termination

We may suspend, restrict, or terminate your access to all or part of the Service at any time, with or without notice, if we believe you have violated these Terms or applicable law, if your payment is disputed, charged back, or flagged as fraudulent, if required by law or a provider, or to protect the Service, our users, or third parties. You may stop using the Service or delete your account at any time. On termination, your right to use the Service ends, we may delete your content and data after a reasonable period, and no refund is owed for termination due to your breach. Sections that by their nature should survive, including those on content, payments, disclaimers, liability, indemnity, and disputes, survive termination.

9. Intellectual property and software

The Service, including its software, models, prompts, design, and trademarks, is owned by PenThreatAI or its licensors and protected by intellectual property laws. Subject to these Terms, we grant you a limited, revocable, non-exclusive, non-transferable license to access and use the Service, and to install and use our desktop and command-line software on devices you control, for your internal security work. You may not copy, modify, distribute, sell, lease, or create derivative works of the Service except as permitted by law. All rights not expressly granted are reserved.

10. Third-party services and links

The Service relies on and may link to third-party services, including model providers, hosting, sandboxes, payments, and authentication. We are not responsible for third-party services, their availability, or their terms, and your use of them may be subject to their own agreements.

As-is service. Limited liability. Your indemnity.

11. Disclaimer of warranties

To the maximum extent permitted by law, the Service, all Output, and all software are provided "as is" and "as available" without warranties of any kind, whether express, implied, or statutory, including warranties of merchantability, fitness for a particular purpose, title, non-infringement, accuracy, and uninterrupted or error-free operation. We do not warrant that the Service will meet your requirements, that Output will be correct or complete, that any security assessment is exhaustive, or that use of the Service will make any system secure or compliant with any law or standard.

12. Limitation of liability

To the maximum extent permitted by law, PenThreatAI and its affiliates, officers, directors, employees, agents, licensors, and providers will not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of profits, revenue, data, goodwill, or business, or for the cost of substitute services, arising out of or relating to the Service or these Terms, however caused and under any theory of liability, even if advised of the possibility of such damages.

To the maximum extent permitted by law, our total aggregate liability for all claims arising out of or relating to the Service or these Terms will not exceed the greater of the amounts you paid us for the Service in the twelve months before the event giving rise to the claim or one hundred U.S. dollars. These limitations do not apply to liability that cannot be limited under applicable law, and nothing in these Terms limits any statutory rights you have as a consumer that cannot be waived.

13. Indemnity

To the maximum extent permitted by law, you will defend, indemnify, and hold harmless PenThreatAI and its affiliates, officers, directors, employees, agents, and licensors from and against any claims, liabilities, damages, losses, fines, and expenses, including reasonable legal fees, arising out of or relating to your Input, your use of the Service, actions taken by agents at your direction, any security testing you conduct, your breach of these Terms, or your violation of any law or third-party right.

Export, changes, law, and the rest.

14. Export controls and sanctions

You may not use or export the Service in violation of applicable export control or sanctions laws. You represent that you are not located in, organized under, or ordinarily resident in a country or territory subject to comprehensive sanctions, and that you are not on any restricted-party list.

15. Changes to the Service and these Terms

We may modify, suspend, or discontinue any part of the Service at any time. We may update these Terms from time to time. We will post the updated Terms with a new date and, where appropriate or required by law, provide additional notice. Changes take effect when posted unless we state otherwise. Your continued use after the effective date constitutes acceptance, and if you do not agree you must stop using the Service.

16. Governing law and disputes

These Terms are governed by the laws of the United States and of the state in which PenThreatAI is organized, without regard to conflict-of-law rules, and any dispute will be brought exclusively in the state or federal courts located there, except that either party may seek injunctive relief in any court of competent jurisdiction. Before filing a claim, you agree to contact us and attempt in good faith to resolve the dispute informally for at least thirty days. To the maximum extent permitted by law, claims must be brought in your individual capacity and not as a plaintiff or class member in any class or representative action. If you are a consumer in a jurisdiction whose mandatory laws give you additional rights or a different forum, those rights are not affected by this section.

17. General

These Terms, together with the Privacy Policy and any plan-specific terms presented in the Service, are the entire agreement between you and us regarding the Service. If any provision is held invalid, it will be enforced to the maximum extent permissible and the remaining provisions remain in full effect. Our failure to enforce any provision is not a waiver. You may not assign these Terms without our consent; we may assign them in connection with a merger, acquisition, or sale of assets. Nothing in these Terms creates a partnership, agency, or employment relationship. Questions about these Terms can be sent through in-app support chat or our Security & Trust page.

Terms you can scroll.