Terms of Service

1. The Service

Pentry.ai provides automated, AI-assisted security scanning for web applications you own or are authorized to test. We orchestrate passive reconnaissance (subdomain enumeration, HTTP probing, web crawling, signature-based vulnerability scanning) and AI-driven analysis to produce findings + remediation guidance.

2. Account

You must be at least 18 years old and have authority to bind the entity (if any) you represent. You’re responsible for keeping your credentials secure and for every action taken under your account. Notify us at [email protected] immediately if you suspect compromise.

3. Authorized Use Only

You agree to only scan targets you own or have explicit written authorization to test.

• Verification of each target via DNS, HTML file, or meta tag is mandatory before active scans.
• Scans are non-destructive — they read, they do not modify or exploit. But unauthorized scanning of third-party systems may still violate the Computer Fraud and Abuse Act (US), the Computer Misuse Act (UK), the GDPR (EU), and analogous laws elsewhere.
• You indemnify Pentry.ai for any claim, fine, or damages arising from unauthorized scans initiated through your account.

4. Prohibited Uses

• Scanning systems you don’t own or aren’t authorized to test.
• Reverse-engineering, scraping, or republishing the Service.
• Sharing your credentials with people outside your organization.
• Using the Service to violate any applicable law.
• Interfering with Service operation (load attacks, abuse of free tier, etc.).

5. Plans, Fees & Billing

Paid plans are billed monthly or annually via Stripe. Fees are exclusive of taxes; you’re responsible for any taxes Stripe doesn’t collect.

• Subscriptions auto-renew until canceled.
• You can cancel anytime from Billing. Cancellation takes effect at the end of the current term.
• See our Refund Policy for refund eligibility.

6. Findings, Ownership, and Confidentiality

Reports we generate about your targets are your property. We retain a license to process them as needed to deliver the Service (storage, validation, notification), and to use anonymized + aggregated patterns for product improvement (e.g. tuning detection rules). We never share your identifiable findings with third parties.

7. Third-Party Components

The Service uses third-party tools whose outputs we incorporate into your reports — including nuclei (ProjectDiscovery), CAI / alias1 (Alias Robotics), and various other open-source tools. We choose, configure, and validate these, but ultimate accuracy depends on them.

8. AI Outputs — Disclaimer

AI-generated analyses can be wrong. We validate findings with a second AI reviewer and HTTP probes to reduce false positives, but you must verify before acting on remediation advice. Pentry.ai is not a substitute for human security review on high-stakes systems.

9. Service Availability

We aim for 99.5% uptime but don’t guarantee uninterrupted service. Scheduled maintenance is communicated via our status page. Unplanned downtime is announced there in real time.

10. Termination

You can delete your account anytime from Profile → Danger Zone. We may suspend or terminate accounts that violate these Terms, with notice when reasonably possible. On termination, we retain audit data for up to 12 months for compliance and abuse prevention; everything else is purged within 30 days.

11. Limitation of Liability

To the maximum extent permitted by law, Pentry.ai’s aggregate liability for any claim arising from the Service is limited to the fees you paid in the 12 months before the claim. We are not liable for indirect, incidental, consequential, special, or punitive damages.

We provide the Service “as is” without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, or non-infringement.

12. Indemnification

You agree to indemnify and hold harmless Pentry.ai, its officers, employees, and agents from any claim, loss, or expense arising from your use of the Service, your User Content, your violation of these Terms, or your violation of any law or third-party right.

13. Changes

We may update these Terms. Material changes will be announced via email and/or in-app notice at least 30 days before they take effect. Continued use after the effective date constitutes acceptance.

14. Governing Law

These Terms are governed by the laws of Delaware, USA, without regard to conflict-of-laws principles. Disputes will be resolved in the state or federal courts located in Wilmington, Delaware, unless your local consumer-protection law mandates otherwise.

15. Contact

General questions: [email protected]
Legal: [email protected]
Security disclosure: [email protected] (see also our security policy).