Terms of Service

1 Acceptance of Terms

These Terms of Service ("Terms") constitute a legally binding agreement between you ("User," "you," or "your") and Strata Security ("Strata Security," "we," "us," or "our"), governing your access to and use of the Strata Security application security assessment platform, website at strata-security.com, and all associated services (collectively, the "Service").

By creating an account, accessing, or using the Service, you acknowledge that you have read, understood, and agree to be bound by these Terms and our Privacy Policy, which is incorporated by reference. If you do not agree to these Terms, you must not use the Service.

If you are using the Service on behalf of an organization, you represent and warrant that you have authority to bind that organization to these Terms, and that "you" in these Terms refers to both you individually and that organization.

2 Eligibility and Account Registration

Age Requirement

You must be at least 18 years of age and capable of forming a legally binding contract to use the Service. By creating an account, you represent that you meet this requirement.

Account Creation

You must provide accurate, complete, and current registration information. You are responsible for maintaining the confidentiality of your credentials and for all activity that occurs under your account. You must promptly notify us of any unauthorized use of your account at security@strata-security.com.

Organizational Accounts

When creating an account on behalf of a company or other legal entity, you represent that you are authorized to bind that entity. Organization owners are responsible for all actions taken by members they invite to the organization.

One Account Per User

Each person may maintain only one personal account. Creating multiple accounts to circumvent plan limits or abuse protections is prohibited.

3 Authorized Use and Prohibited Conduct

Authorization Requirement

This is our most important rule. You may only upload, scan, or analyze software, applications, binaries, source code, repositories, or any other content ("Content") that you:

• Own outright, including all intellectual property rights; or
• Have received explicit written authorization from the owner to assess, pentest, or security-review; or
• Are legally entitled to assess under the applicable terms of a security research program, bug bounty program, or engagement contract.

You are solely responsible for obtaining all necessary permissions, licenses, and authorizations before using the Service on any software, application, or system. Uploading or scanning Content without proper authorization may constitute unauthorized access or computer fraud under applicable law.

Prohibited Conduct

You agree not to:

• Upload, scan, or analyze any application, binary, or source code that you do not own or are not explicitly authorized to assess;
• Use the Service to conduct unauthorized penetration testing, vulnerability scanning, or security assessments of third-party systems;
• Attempt to gain unauthorized access to any part of the Service, its infrastructure, or other users' data;
• Use the Service to develop malware, spyware, exploit kits, or other malicious software;
• Reverse engineer, decompile, or disassemble the Service itself (excluding authorized security research disclosed under our responsible disclosure policy);
• Circumvent, disable, or interfere with any security features of the Service;
• Upload Content that is unlawful, harmful, infringing, or violates any third party's rights;
• Use automated tools, scripts, or bots to access the Service in ways that exceed your plan's rate limits or damage Service performance;
• Resell, sublicense, or redistribute the Service without our written authorization;
• Misrepresent your identity, affiliation, or authorization to assess any Content;
• Use the Service in any jurisdiction where doing so would violate applicable law.

Abuse Prevention

We employ automated and manual review processes to detect abuse. We reserve the right to investigate suspicious activity and to suspend or terminate accounts that violate these Terms or engage in abusive behavior, without prior notice. Evidence of suspected illegal activity may be reported to law enforcement.

4 Subscriptions and Billing

Free Tier

We offer a free tier with limited functionality. No payment information is required to access the free tier. Free tier usage is subject to daily and total limits as described on our pricing page.

Paid Plans

Paid subscriptions are billed in advance on a monthly or annual basis through our payment processor, Stripe. By providing payment information, you authorize us to charge your payment method for recurring subscription fees.

Automatic Renewal

Subscriptions automatically renew at the end of each billing period unless you cancel before the renewal date. You can cancel your subscription at any time through your account billing settings.

Refunds

We do not offer refunds for partial billing periods. If you cancel a paid subscription, you will retain access to paid features until the end of your current billing period. We may, at our discretion, offer refunds in exceptional circumstances.

Price Changes

We may change subscription prices with at least 30 days' advance notice. Continued use of the Service after a price change constitutes acceptance of the new pricing.

Taxes

Prices listed exclude applicable taxes. You are responsible for all taxes arising from your subscription, which may be collected by Stripe on our behalf where required.

Non-Payment

If payment fails, we may suspend access to paid features and attempt to re-charge your payment method. Accounts with persistent non-payment may be downgraded to the free tier or terminated.

5 Intellectual Property

Our Property

The Service, including its software, algorithms, user interface, documentation, trademarks, and all other content provided by Strata Security, is owned by or licensed to Strata Security and is protected by copyright, trademark, patent, and other intellectual property laws.

License to You

Subject to these Terms, we grant you a limited, non-exclusive, non-transferable, revocable license to access and use the Service for your internal security assessment purposes. This license does not include the right to sublicense, copy, modify, distribute, sell, or create derivative works of the Service.

Your Content

You retain ownership of all Content you upload to the Service. By uploading Content, you grant us a limited, non-exclusive license to process, store, and analyze that Content solely for the purpose of providing the Service to you. We do not claim ownership of your Content and will not use it for any purpose beyond delivering and improving the Service.

Feedback

If you provide us with feedback, suggestions, or ideas about the Service, you grant us a non-exclusive, royalty-free, perpetual license to use that feedback without any obligation to you.

6 Uploaded Content and Scan Data

Your Responsibility

You are solely responsible for all Content you upload. You represent and warrant that you have the right to upload the Content and that it does not violate any applicable law, third-party rights, or these Terms.

Scan Results

Security findings, vulnerability reports, and analysis results generated by the Service are provided for informational purposes only. Results should be independently verified before acting on them. Strata Security makes no warranty regarding the accuracy, completeness, or fitness of scan results for any particular purpose.

Data Retention

Uploaded files and scan results are retained according to your plan's data retention policy (30 days for Free tier, 1 year for Pro, indefinitely for Team, unless you delete them earlier). Deleted data may remain in backups for up to 30 additional days before permanent removal.

No Sensitive Data

Do not upload Content that contains personal data of individuals, protected health information, financial account numbers, government identification numbers, or other regulated personal data beyond what is incidentally present in the application being assessed. If such data is present, you are responsible for ensuring you have appropriate authorization and that its processing complies with applicable law.

7 Confidentiality

We treat all Content you upload and the security findings generated from it as confidential. We will not share your scan data, vulnerability findings, or organization information with third parties except as required to provide the Service, comply with legal obligations, or as described in our Privacy Policy.

Organization data is logically isolated between organizations. We employ access controls to prevent one organization's data from being accessible by another.

8 Disclaimers

We do not warrant that:

• The Service will be uninterrupted, error-free, or available at any particular time;
• The Service will identify all vulnerabilities in any application or code;
• Scan results will be accurate, complete, or free from false positives or false negatives;
• The Service is suitable for any particular compliance requirement or security standard;
• The Service will meet your specific security requirements.

Security assessment is inherently probabilistic. The absence of findings in a scan result does not mean the assessed software is free from vulnerabilities. You remain responsible for your own security posture and for taking appropriate action on findings.

9 Limitation of Liability

In no event shall our total cumulative liability to you for all claims arising out of or related to these Terms or the Service exceed the greater of (a) the amount you paid to us in the twelve (12) months immediately preceding the claim, or (b) one hundred US dollars (USD $100).

Some jurisdictions do not allow the exclusion or limitation of certain types of liability. In such jurisdictions, our liability is limited to the fullest extent permitted by applicable law.

10 Indemnification

You agree to indemnify, defend, and hold harmless Strata Security and its officers, directors, employees, contractors, agents, licensors, and suppliers from and against any claims, liabilities, damages, judgments, awards, losses, costs, and expenses (including reasonable attorneys' fees) arising from or relating to:

• Your violation of these Terms;
• Your use of the Service, including any Content you upload;
• Your infringement of any intellectual property right, privacy right, or other right of any third party;
• Your use of the Service to conduct unauthorized security testing of third-party systems; or
• Your violation of any applicable law or regulation.

11 Termination

Termination by You

You may terminate your account at any time by contacting us at support@strata-security.com or through account settings. Upon termination, your data will be deleted in accordance with our data retention policy and Privacy Policy.

Termination by Us

We may suspend or terminate your account immediately, without prior notice or liability, for any of the following reasons:

• Violation of these Terms, especially the authorized-use requirements;
• Fraudulent, abusive, or illegal activity;
• Non-payment of subscription fees;
• Conduct that poses a risk to the Service or other users.

Effect of Termination

Upon termination, your right to use the Service ceases immediately. Provisions of these Terms that by their nature should survive termination — including intellectual property, limitation of liability, indemnification, and governing law — will continue to apply.

12 Export Compliance

The Service may be subject to export control laws and regulations, including the U.S. Export Administration Regulations (EAR) and the International Traffic in Arms Regulations (ITAR). You agree to comply with all applicable export and import laws. You represent that you are not located in, and will not use the Service in, any country subject to a U.S. embargo or trade sanction, and that you are not listed on any U.S. government denied-party list.

13 Security Research Limitations

Strata Security is designed to assess software that you own or are authorized to test. It is not intended or authorized for use as a tool to discover vulnerabilities in production systems without the explicit consent of the system owner.

While we support the security research community, the following activities are expressly prohibited when using the Service:

• Scanning mobile applications downloaded from app stores without explicit authorization from the app developer;
• Scanning open-source software binaries without verifying that your use complies with the applicable open-source license and any restrictions on security testing;
• Using scan results to conduct attacks against systems you do not own or are not authorized to test.

Academic and security researchers seeking to use the platform for legitimate research should contact us at security@strata-security.com to discuss appropriate terms.

14 Changes to These Terms

We may update these Terms from time to time. When we make material changes, we will notify you by email (to the address on your account) and/or by prominent notice in the Service at least 14 days before the changes take effect. Your continued use of the Service after the effective date of updated Terms constitutes your acceptance.

For minor changes (such as corrections to typos or clarifications that do not materially affect your rights), we may update these Terms without advance notice, with the effective date shown at the top of this page.

15 Governing Law and Disputes

These Terms shall be governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to its conflict of law provisions.

Any dispute arising from or relating to these Terms or the Service shall first be addressed through good-faith negotiation. If unresolved within 30 days, disputes shall be submitted to binding arbitration under the rules of the American Arbitration Association (AAA), conducted in English. Each party shall bear its own costs unless the arbitrator awards otherwise.

Notwithstanding the above, either party may seek injunctive or other equitable relief in a court of competent jurisdiction to protect intellectual property rights or confidential information.

You waive any right to a jury trial or class action proceeding in connection with any dispute arising from these Terms.

16 Contact Information

If you have questions about these Terms, please contact us:

• General legal inquiries: legal@strata-security.com
• Privacy matters: privacy@strata-security.com
• Security disclosures: security@strata-security.com
• Support: support@strata-security.com
• Website: strata-security.com/contact