Terms of Service

Effective August 10, 2026

These terms govern your use of Ryvx: the dashboard, CLI, and any related services (the "Service") operated by Ryvx Labs ("Ryvx", "we", "us"). By creating an account or using the Service you agree to them.

What Ryvx does

Ryvx is an autonomous AI security-testing tool. It can run active reconnaissance and exploitation against systems you configure it to target, and produces evidence-backed findings (a working proof of concept, not a guess).

Authorization: your responsibility

You may only point Ryvx at systems you own, or have explicit written authorization to test. Running active exploitation against a system you don't control or don't have permission to test is illegal in most jurisdictions and is a material breach of these terms. Passing --i-am-authorized or the local-dev skip flag is your assertion of that authorization, not proof of it, and we may require verification before running a scan against a live external target. You are solely responsible for confirming you have the necessary authorization before every scan.

Accounts

You're responsible for the security of your account credentials and for all activity under your account. Tell us right away if you suspect unauthorized access.

Subscriptions & billing

Paid plans are billed in advance on a recurring basis and metered by usage credits as described on our pricing page. Payments are processed by Stripe. Unused credits do not carry a cash value and, unless stated otherwise at signup, do not roll over between billing periods. You can cancel a subscription at any time; cancellation takes effect at the end of the current billing period.

If you are a consumer in the UK, you have a statutory right to cancel a new subscription within 14 days of purchase for a refund. Where you ask us to start the Service immediately within that period, you accept that the right to cancel is lost once the Service has been fully performed, and that we may charge for what you have already used. Nothing in these terms limits your statutory rights.

Acceptable use

  • No scanning or exploiting a target without authorization (see above).
  • No using the Service to build or distribute malware unrelated to a proof of concept for an authorized finding.
  • No reselling, sublicensing, or reverse-engineering the Service except as permitted by open-source components we distribute.
  • No attempting to circumvent the approval gates and evidence requirements the product enforces.

We may suspend or terminate accounts that violate this section, including a "production"-tagged target scanned without the required human approval.

Findings & your data

You own the scan data, findings, and reports Ryvx generates for you. We process that data to provide the Service, as described in our Privacy Policy.

Disclaimer of warranties

The Service is provided "as is." Ryvx aims for evidence-backed findings, but automated security testing can miss vulnerabilities or, rarely, misreport one; it is not a substitute for a full manual penetration test or compliance audit. We disclaim all warranties, express or implied, including fitness for a particular purpose.

Limitation of liability

To the maximum extent permitted by law, Ryvx Labs is not liable for indirect, incidental, or consequential damages arising from your use of the Service, including damage caused by scans you authorized us to run. Our total liability for any claim is limited to the amount you paid us in the 12 months before the claim arose.

Termination

You can stop using the Service and delete your account at any time. We can suspend or terminate accounts for breach of these terms, non-payment, or misuse of the Service against unauthorized targets.

Changes to these terms

We'll post updates here and, for material changes, notify account holders by email before they take effect.

Governing law

These terms are governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction over any dispute arising from them. If you are a consumer resident elsewhere in the UK, you may also bring proceedings in your local courts, and you keep the benefit of any mandatory protections of the law where you live.

If part of these terms doesn't hold

If any provision is found unenforceable, the rest stays in force. Our failure to enforce a provision isn't a waiver of it. You may not transfer your rights under these terms without our consent; we may transfer ours if the Service changes hands, and will tell account holders if that happens.

Contact

Questions about these terms: ryvx.pentesting@gmail.com