Terms of Service

1. Agreement

These terms govern your use of the Sentrasec application-security platform — including the web application, API, command-line interface, and MCP server (together, the "Service"). By creating an account or using the Service you agree to these terms. Sentrasec is the trading name of the operator of this Service; registered entity details will be published here upon completion of incorporation.

2. The Service

Sentrasec provides automated security analysis: static code analysis, dependency and secrets scanning, dynamic testing, infrastructure and configuration checks, and related reporting. The open-source components are licensed separately under their repository licenses; these terms cover the hosted Service and accounts.

3. Authorized targets only

You may only scan code, applications, and infrastructure that you own or are explicitly authorized to test. Using the Service against systems without permission is prohibited and may be unlawful. You are responsible for having authorization for every target you submit, and for complying with the laws that apply to you.

4. Accounts

Keep your credentials and API keys confidential; you are responsible for activity under your account. Credentials you connect to Sentrasec are stored encrypted at rest, as described in the Privacy Policy. Workspace owners control membership and data in their workspace. We may suspend accounts that breach these terms or put the Service or others at risk.

5. Subscriptions and billing

Paid plans, prices, and billing terms are shown at purchase. Subscriptions renew automatically until cancelled; cancellation takes effect at the end of the current billing period. Refunds are handled per our refund policy. Enterprise agreements may supersede these terms where they conflict.

6. Your content

You retain all rights to code, configurations, and artifacts you submit. You grant us the limited license needed to process them to provide the Service — to run scans, produce findings, and store results in your workspace. Handling of personal data is described in the privacy policy.

7. No guarantee of completeness

No security tool finds every vulnerability. Scan results reflect the rules, analyzers, and data available at scan time. A clean report is not a certification that a system is free of vulnerabilities, and findings do not constitute legal or professional advice. Security decisions remain your responsibility.

8. Disclaimer and liability

The Service is provided "as is" without warranties of any kind, to the maximum extent permitted by law. To the same extent, our aggregate liability arising out of the Service is limited to the amounts you paid for it in the twelve months preceding the claim; we are not liable for indirect, incidental, or consequential damages.

9. Termination

You may stop using the Service and delete your account at any time. We may terminate or suspend access for material breach of these terms. Sections that by their nature should survive (including 6–8) survive termination.

10. Changes

We may update these terms; material changes will be announced on this page with a new "last updated" date, and continued use after the effective date constitutes acceptance. Governing law and venue will be finalized alongside entity registration and published here.

11. Contact

Questions about these terms: legal@sentrasec.ai. General help: support.