01 The agreement
These Terms of Service (the "Terms") form a binding agreement between CyberDebunk ("we") and the entity or person agreeing to them ("Customer", "you"). They govern your access to and use of cyberdebunk.com, the CyberDebunk application, APIs, and any related services (collectively, the "Service").
By creating an account, clicking "I agree", or using the Service, you accept these Terms. If you are accepting on behalf of an organization, you represent that you have authority to bind that organization, and "you" refers to that organization.
02 Your account
You must be at least 16 years old, or the digital-consent age of your jurisdiction, whichever is higher. You agree to provide accurate registration information and keep it current.
You are responsible for all activity that occurs under your account, including by users you invite. You will safeguard your credentials, enable multi-factor authentication where offered, and notify us at [email protected] immediately if you suspect unauthorized use.
03 The Service
CyberDebunk provides a SaaS platform for vulnerability discovery, dependency analysis, infrastructure scanning, automated compliance support, and related security workflows. We grant you a non-exclusive, non-transferable, revocable right to access and use the Service for your internal business purposes during your subscription term.
Beta features
We may make features available as "beta", "preview", or "early access". These are provided as-is, may change or be removed without notice, and are not subject to the same SLA as generally-available features.
Updates
We update the Service continuously. We may add, change, or remove features at our discretion, but will not materially degrade core functionality during a paid term without offering you a refund of the unused prepaid portion.
04 Acceptable use
You agree not to:
- Use the Service to scan, probe, or analyze any system, network, or asset that you do not own or have explicit, written permission to assess.
- Use findings or output from the Service to compromise systems you are not authorized to test.
- Reverse engineer, decompile, or attempt to extract the source code of the Service, except to the extent expressly permitted by law.
- Resell, sublicense, or commercially exploit the Service, except as expressly permitted (e.g. via our partner program).
- Upload malicious code, conduct denial-of-service tests against our infrastructure, or otherwise interfere with the Service.
- Use the Service to violate any applicable law, including export controls and sanctions.
We may suspend access - with or without notice depending on severity - for violations.
05 Your data & ours
Customer Data
You retain all rights to the data you connect, upload, or generate inside the Service ("Customer Data"). You grant us a limited license to host, process, and display Customer Data solely to provide and improve the Service for you. We do not use Customer Data to train cross-tenant models.
Aggregated data
We may use aggregated, de-identified data - counts, distributions, anonymized vulnerability prevalence - to improve the Service and produce industry insights. Such data cannot be re-identified to you.
Privacy
Our handling of personal data is governed by our Privacy Policy and, for B2B customers, by a Data Processing Agreement (DPA) available on request from [email protected].
06 Fees & payment
- Plans & pricing: as set out in your order form or as communicated at the time of purchase.
- Billing cycle: monthly or annually in advance, in EUR or USD. Auto-renewal applies unless cancelled.
- Taxes: fees are exclusive of VAT and similar taxes, which are added at the applicable rate.
- Late payment: after 14 days past due we may suspend the Service. Reactivation is automatic on payment.
- Refunds: annual plans are refundable pro-rata for the unused term during the first 30 days. After that, fees are non-refundable except as required by law.
- Price changes: we may change prices with 60 days' notice; changes take effect at your next renewal.
Free plan
The free plan is offered without charge for individuals and small teams within posted usage limits. We may modify or discontinue the free plan, with reasonable notice.
07 Term & termination
The agreement starts when you create an account and continues until terminated. You may cancel any time from Settings → Billing; cancellation takes effect at the end of your current paid period.
We may terminate or suspend the Service for: (a) material breach of these Terms uncured 30 days after written notice; (b) immediate breach of acceptable use; (c) non-payment after 30 days past due; (d) bankruptcy or insolvency.
Effect of termination
Upon termination, your access ends. We provide a 30-day window during which you can export Customer Data. After that, we delete it within 90 days (subject to legal retention obligations and rolling backup expiry).
08 Warranties
We warrant that we will provide the Service with reasonable skill and care, in accordance with any published SLA for paid plans (for example 99.9% monthly uptime where offered). For breaches of this warranty, your sole remedy is the SLA service credit if applicable to your plan.
Disclaimer. Except as expressly stated, the Service is provided "as is" and "as available". We disclaim all other warranties, express or implied, including merchantability, fitness for a particular purpose, and non-infringement, to the maximum extent permitted by law. We do not warrant that the Service will identify every vulnerability, that findings will be free of false positives, or that use of the Service will make your systems secure.
09 Limitation of liability
To the maximum extent permitted by law, neither party is liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, lost data, or lost business opportunity, arising out of or relating to these Terms, even if advised of the possibility.
Each party's aggregate liability under these Terms is capped at the fees paid or payable by you to CyberDebunk in the 12 months immediately preceding the event giving rise to liability. For free plans, the cap is EUR 100.
Nothing in these Terms limits liability that cannot be limited by law, including liability for fraud, willful misconduct, gross negligence, death or personal injury, or under §§ 309, 310 BGB.
10 Indemnity
You will defend us from third-party claims arising out of (i) your Customer Data, (ii) your use of the Service in breach of these Terms or applicable law, or (iii) your scanning of systems you were not authorized to assess, and pay any finally-awarded damages and reasonable costs.
We will defend you from third-party claims that the Service, when used as permitted, infringes the third party's intellectual property rights, and pay any finally-awarded damages. Our indemnity does not cover claims arising from Customer Data, modifications you made, or use of the Service in combination with non-CyberDebunk products.
11 General
Governing law & venue
These Terms are governed by the laws of the Federal Republic of Germany, excluding its conflict-of-laws rules and the UN Convention on Contracts for the International Sale of Goods. Exclusive venue is the courts of Berlin, Germany. Where you are a consumer, this clause does not deprive you of the protections of mandatory law in your jurisdiction.
Changes
We may update these Terms. Material changes will be announced by email or in-app notice at least 30 days before they take effect. Continued use after the effective date means acceptance.
Assignment
You may not assign these Terms without our prior written consent, except to a successor in connection with a merger or acquisition. We may assign freely, with notice.
Force majeure
Neither party is liable for delay or failure caused by events beyond reasonable control, including natural disasters, internet outages, and acts of government.
Entire agreement
These Terms, together with the Privacy Policy, DPA (where applicable), and any order form, are the entire agreement and supersede prior agreements on the subject.