Terms of Service | AURIX SHIELD

Effective Date: September 28, 2026

These Terms of Service govern access to and use of AURIX SHIELD and related websites, applications, security services, documentation, and features.

By creating an account, accessing, or using AURIX SHIELD, you agree to these Terms. If you do not agree to these Terms, you should not use the Service.

1. Definitions

AURIX SHIELD: The security analysis and management platform provided under these Terms.
Service: The AURIX SHIELD platform, applications, and features.
Website: An authorized web property submitted for security analysis.
Account: The user account created to access the Service.
User: The individual or authorized representative using the Service.
User Content: Any information or data submitted to the Service by the user.
Security Data: Technical data and context generated by the Service.
Target: The website, application, or repository being analyzed.
Domain Verification: The process used to establish or confirm authorization to manage a target.
Website Scan: The security analysis workflow for web properties.
GitHub Security: Security analysis functionality applied to authorized GitHub repositories.
Finding: A security issue detected and tracked by the Service.
Verification: The Fix & Verify workflow to determine if an original finding remains present.
Monitoring: The scheduled analysis of authorized targets.
AURIX AI: The AI-assisted security explanation and investigation feature.
Free Plan: The no-cost tier of the Service, subject to its specific limits.
Pro Plan: The paid tier of the Service, subject to its specific features and quotas.

2. Eligibility and Authority

You must have the legal capacity required to enter into these Terms under applicable law.

If you use AURIX SHIELD on behalf of a company or organization, you represent that you are authorized to bind that entity to these Terms.

3. Account and Account Security

You agree to provide accurate account information and to maintain your account credentials securely.

You are responsible for the activity that occurs under your account. You must notify AURIX SHIELD promptly of any suspected unauthorized access.

Access is subject to the authentication and security controls provided by the platform, and you may review your account settings and plan information within the Service.

4. Description of AURIX SHIELD

AURIX SHIELD provides security functionality including:

Website Security
Domain Verification
GitHub Security
Security findings
Fix & Verify
Monitoring
AURIX AI / Ask AURIX
Security reporting and related functionality

The core workflow is designed to: Detect → Explain → Fix → Verify → Monitor.

AURIX SHIELD is a security analysis and management platform. It does not provide an absolute security guarantee for your applications or infrastructure.

5. Domain Verification

AURIX SHIELD may require or use domain/target verification before enabling certain website security functionality. You are responsible for having authorization to verify and scan the target.

Domain verification:

Does not transfer ownership of a domain
Does not establish legal ownership
Is used to establish or confirm authorization/control for the requested service

Depending on the verification method supported by the Service, verification may involve verification information, records, tokens, DNS/HTTP information, verification status, and related technical information.

Attempting to verify or scan a domain without authorization is strictly prohibited.

6. Website Security Scanning

Users may submit authorized websites and targets for security analysis. Current website security capabilities may involve discovery, HTTP probing, crawling, security detection, application security analysis, security findings, and comparison with previous scan results.

The platform may use security engines such as Katana, httpx, Nuclei, and OWASP ZAP. AURIX SHIELD does not promise that these engines detect every vulnerability.

Scan results are informational security analysis outputs and should not be treated as a guarantee that a target is secure. Users remain responsible for ensuring they have authorization to scan the target.

7. GitHub Security

AURIX SHIELD can provide GitHub Security functionality when the user authorizes the required GitHub access.

This may cover repository authorization, repository analysis, source-code analysis, dependency analysis, secret detection, code analysis, security findings, verification, and scan history.

Current engines may include CodeQL, Gitleaks, Trivy, OSV-Scanner, and AURIX Custom. AURIX SHIELD does not claim to detect every security issue in a repository.

Users are responsible for ensuring they have the necessary rights and authorization to connect and analyze repositories. AURIX SHIELD does not publicly expose private repository content.

8. Security Findings

AURIX SHIELD may create persistent security findings during analysis.

Findings may include a finding identifier, severity, scanner engine, detection rule, target, repository, file, evidence, fingerprint, finding state, verification state, scan history, and timestamps.

Finding states may include NEW, EXISTING, REAPPEARED, RESOLVED, or CHANGED.

Finding severity and detection results are generated by security analysis and should be reviewed and verified by the user.

9. Fix & Verify

Fix & Verify helps users determine whether an original security detection remains present.

Verification may use an engine-specific method. Examples currently implemented include:

AURIX Custom — targeted verification
Gitleaks — file-local verification
OSV-Scanner — lockfile/dependency verification
Trivy — filesystem verification
CodeQL — repository-wide analysis

AURIX SHIELD does not promise that verification can prove the absence of every security issue. A successful verification result means the specific verification workflow did not detect the original issue under the applicable verification method. It does NOT mean the entire application is secure.

10. Monitoring

Monitoring may allow users to track authorized targets over time.

This may include the monitored target, monitoring state, schedule, timezone, monitoring runs, scan results, finding changes, monitoring history, and security notifications.

AURIX SHIELD does not promise uninterrupted monitoring or guaranteed notification delivery.

11. AURIX AI / Ask AURIX

AURIX AI provides AI-assisted security explanations and investigation support.

Ask AURIX may use relevant security context such as findings, severity, scanner, repository, file, rule, evidence, and verification information.

AURIX AI output is informational assistance and is not itself a security verification result. AI output may be incomplete or incorrect and should be reviewed by the user. AURIX AI does not replace security testing, professional security review, or human judgment.

12. User Content and Security Data

Users retain their rights in content and data they submit or authorize for processing, subject to the rights necessary for AURIX SHIELD to provide the Service.

This may include websites/targets, repository information, source code, dependencies, security findings, scan information, prompts/questions, and uploaded information where supported.

AURIX SHIELD does not claim broad ownership of your User Content. We may process User Content as necessary to provide the requested Service.

For detailed data-processing practices, please review our Privacy Policy.

13. Acceptable Use

Users must use AURIX SHIELD only for lawful and authorized security purposes.

You are prohibited from:

Scanning systems without authorization
Attempting to bypass domain verification
Using the Service to attack or disrupt systems
Unauthorized access attempts
Abuse of scanning infrastructure
Uploading malicious content intended to compromise the Service
Interfering with the Service
Attempting to bypass authentication or access controls
Abusing rate limits or quotas
Reverse engineering or circumventing security controls where prohibited by law
Using the Service in violation of applicable laws or third-party rights

Detailed prohibited-security behavior is outlined in the separate Acceptable Use Policy.

14. Third-Party Services

AURIX SHIELD may integrate with or rely on third-party services necessary to provide functionality.

Examples may include GitHub, authentication infrastructure, cloud infrastructure, database infrastructure, AI infrastructure, email delivery, payment services, monitoring/error services, and security analysis infrastructure.

These third-party services may have their own terms and policies.

15. Plans, Free and Pro

AURIX SHIELD may offer Free and Pro plans. The exact features, quotas, limits, and availability may vary by plan and may be displayed within the Service or pricing page.

Free functionality does not create a promise that the Service will remain free forever.

16. Billing and Subscriptions

Paid plans may involve subscription or other paid access depending on the plan offered. Applicable prices are shown before purchase.

This may involve billing status, subscription status, payment processing, taxes where applicable, cancellation, and failed payments.

Detailed cancellation rules are governed by our Refund & Cancellation Policy.

17. Refunds and Cancellation

Cancellation and refund terms are governed by the separate Refund & Cancellation Policy.

18. Intellectual Property

AURIX SHIELD's software, platform, interface, branding, documentation, design, trademarks, and proprietary technology remain protected by applicable intellectual-property rights.

Users receive a limited right to access and use the Service according to these Terms. AURIX SHIELD does not claim ownership over user-generated security findings or user source code.

19. Feedback

If users voluntarily provide feedback, suggestions, or feature requests, AURIX SHIELD may use that feedback to improve the Service, subject to applicable law. Confidential source code or security data does not automatically become product feedback.

20. Security and Service Limitations

Security scanning is not exhaustive, and no scanner detects every vulnerability. Findings may contain false positives or false negatives.

Availability of the Service may change. Scans may fail or be incomplete. Third-party systems can affect functionality. Monitoring and notifications may fail or be delayed. AI output can be inaccurate. Verification applies only to the specific verification workflow.

Users remain responsible for their own security decisions. AURIX SHIELD does not guarantee that a website, application, repository, domain, or system is secure.

21. Disclaimer of Warranties

To the maximum extent permitted by applicable law, the Service is provided on an "as is" and "as available" basis.

22. Limitation of Liability

To the maximum extent permitted by applicable law, AURIX SHIELD shall not be liable for indirect, incidental, special, consequential, or similar damages arising out of or related to these Terms or the Service.

These limitations apply subject to rights or liabilities that cannot legally be excluded or limited under applicable law.

23. Indemnification

Subject to applicable law, you agree to indemnify and hold harmless AURIX SHIELD from claims arising out of your unauthorized scanning, unauthorized repository access, violation of these Terms, violation of applicable law, or infringement of third-party rights.

24. Suspension and Termination

Access may be suspended or terminated where reasonably necessary for reasons including violation of these Terms, abuse, security threats, unauthorized use, legal requirements, payment issues, or attempts to compromise the Service.

You may stop using the Service or cancel your account according to applicable product procedures. Provisions that naturally survive termination—such as intellectual property, disclaimers, liability limitations, and indemnification—shall remain in effect.

25. Changes to the Service

AURIX SHIELD may modify, improve, suspend, or discontinue features. We do not promise permanent availability of any feature.

26. Changes to These Terms

These Terms may be updated when the Service, legal requirements, or policies change. For material changes, we will provide notice where required by applicable law. The effective date will be updated when the Terms change.

27. Electronic Communications

Communications may be provided electronically through email, account notifications, the Service, or other electronic methods supported by the platform.

28. Governing Law and Disputes

Applicable law and dispute procedures will be determined according to the applicable legal framework and any future designated jurisdiction once finalized.

29. General Provisions

These Terms embody standard principles including severability, waiver, assignment, entire agreement, order of precedence, no partnership/agency, force majeure, and notices, as applicable under the governing framework.