These Terms of Service ("Terms") govern your access to and use of Sintropyc — the desktop security agent, command-line tools, website and related services (together, the "Service") operated by Sintropyc ("we", "us"). By requesting access to, installing or using the Service you agree to these Terms. If you do not agree, do not use the Service.
1. What Sintropyc is
Sintropyc opens your web or desktop application in an isolated sandbox, exercises it like an attacker, attempts to demonstrate vulnerabilities with recorded evidence, and can propose fixes. It is an assistive engineering tool. It does not replace a professional security audit, penetration test, or your own review and judgement.
2. Authorization & scope
You may only run active testing against systems that you own or are explicitly authorized in writing to test. You are solely responsible for confirming that authorization before each run.
- Localhost, loopback and private-network targets run automatically because they are your own machine.
- Public or third-party targets must not be tested without verified ownership or written permission.
- You must not use the Service to attack, disrupt, or gain unauthorized access to any system, to exfiltrate real data, to deploy persistence or backdoors, or for any unlawful purpose.
Unauthorized scanning or exploitation may be illegal in your jurisdiction. You accept full responsibility for how you direct the Service.
3. No guarantee — security is never 100%
Sintropyc does not, and cannot, find every bug or vulnerability in your application. No security tool, scanner, or agent — including this one — is 100% accurate or complete. It may miss real issues (false negatives) and it may report issues that are not exploitable (false positives). A clean result is not a certificate that your application is secure.
Proposed fixes are suggestions generated automatically. They may be incomplete, incorrect, or may introduce new problems. You must review, test and approve every change before relying on it or shipping it to production.
The security of your application, your data and your infrastructure remains entirely your responsibility. Any decision you make based on the Service's output — and any consequence of that decision — is yours alone. All risk of using the Service stays with you.
4. Service provided "AS IS"
The Service is provided "AS IS" and "AS AVAILABLE", without warranties of any kind, whether express or implied, including but not limited to implied warranties of merchantability, fitness for a particular purpose, accuracy, non-infringement, or that the Service will be uninterrupted, error-free, secure, or that it will detect or prevent any particular vulnerability, breach or attack.
5. Limitation of liability
To the maximum extent permitted by law, Sintropyc and its operators shall not be liable for any indirect, incidental, special, consequential or punitive damages, nor for any loss of profits, data, goodwill, revenue, or for any security breach, data loss, downtime, or damage to your systems, arising out of or related to your use of (or inability to use) the Service — even if advised of the possibility of such damages. You agree to use the Service at your own risk.
6. Acceptable use
You agree not to misuse the Service, reverse-engineer it for the purpose of building a competing product where prohibited by law, resell access without permission, or use it to violate the rights of others or any applicable law.
7. Early access
The Service is offered as an early-access program to a limited group. Features may change, break, or be withdrawn at any time without notice. Access may be granted or revoked at our discretion.
8. Changes to these Terms
We may update these Terms from time to time. The "Last updated" date above reflects the current version. Continued use of the Service after changes take effect constitutes acceptance of the revised Terms.
9. Contact
Questions about these Terms? Email founders@sintropyc.com.