Terms of Service

These Terms of Service (these “Terms”) constitute a legally binding agreement between you, whether individually or on behalf of an entity (“you” or “your”), and Krait Labs, Inc. (“Krait,” “we,” “us,” or “our”), concerning your use of our website (krait.io) and our security scanning and analysis services (collectively, the “Service”).

By accessing or using Krait, you agree that you have read, understood, and accept all of these Terms. If you do not agree with these Terms, you may not use the Service and must discontinue use immediately.

These Terms apply to all users, including those using the free tier, free trials, and paid subscriptions.

Krait provides application security posture management (ASPM) services, including:

• Repository scanning (GitHub, GitLab)
• Container image analysis (Docker)
• API call graph mapping
• Vulnerability detection and reporting
• Secrets detection
• Dependency analysis
• AI-assisted security scanning
• Compliance reporting
• AI-assisted remediation suggestions
• Integrations with third-party tools

Results represent a snapshot in time. New vulnerabilities are discovered continuously, and scanning results may become outdated. You are responsible for staying informed of emerging threats.

Account Creation

When you create an account, you are responsible for:

• Maintaining the confidentiality of your login credentials
• All activities that occur under your account
• Notifying us immediately of any unauthorized access

You represent that:

• You are at least 18 years old
• You have the right to bind yourself (or your organization) to these Terms
• The information you provide is accurate and complete
• Your use complies with all applicable laws and regulations

Account Restrictions

You may not:

• Share your account with others
• Create multiple accounts to bypass service limits
• Attempt to access the Service through unauthorized means
• Use another person's account
• Permit access to your account by unauthorized third parties

We reserve the right to suspend or terminate accounts that violate these restrictions.

You agree not to use Krait for any of the following:

Prohibited Technical Activities

• Reverse engineering: You may not reverse engineer, decompile, disassemble, or attempt to derive the source code or algorithms of Krait
• Scanning unauthorized code: You may not scan code, repositories, or systems that you do not own or have explicit permission to scan
• Testing competing tools: You may not use Krait to test, evaluate, or compare other security products or services
• Data scraping: You may not extract, scrape, or exfiltrate data or findings from Krait without permission
• Malicious code submission: You may not intentionally submit malicious, corrupted, or test code designed to harm or compromise Krait
• Denial of service: You may not attempt to disrupt, overload, or disable the Krait infrastructure or Service
• Unauthorized access: You may not attempt to gain unauthorized access to Krait systems, databases, or customer data
• Security circumvention: You may not attempt to bypass, disable, or interfere with Krait's security features or access controls

Prohibited Uses

• Illegal activities or violation of laws and regulations
• Harassment, abuse, or threats directed at Krait employees, users, or other individuals
• Transmission of viruses, malware, or harmful code
• Spam, unsolicited communications, or social engineering
• Impersonation of Krait staff or other users
• Defamation or disparagement of Krait
• Activities that violate third-party intellectual property or privacy rights
• Automated access or use of scraping bots (except for standard search engine indexing)

Scanning Limitations

You agree that:

• You have permission to scan all code and infrastructure you submit to Krait
• You will not use Krait to scan code or environments belonging to third parties without their explicit consent
• You understand that scan results represent potential issues requiring your review and validation
• You are responsible for addressing findings in a timely manner

Violations and Consequences

We monitor the Service for violations of this Acceptable Use Policy. Violations may result in:

• Warning and cure notice
• Account suspension
• Permanent account termination
• Legal action if necessary

Krait's Intellectual Property

We own or license all intellectual property in the Service, including:

• Platform design and code
• Scanning algorithms and detection rules
• Reports and analyses
• Documentation and content
• Trademarks and branding

All rights not expressly granted to you are reserved.

Your Content

Code You Upload: You retain all intellectual property rights to code you upload to Krait. By uploading code, you grant Krait a limited license to scan, analyze, and store that code for the purpose of providing the Service.

Findings and Reports: You own the vulnerability findings and reports generated from your code. Krait retains ownership of its underlying detection methodologies, rules, and platform technology.

Suggested Fixes: When Krait provides AI-generated remediation suggestions or automated pull requests, you own the resulting code. Krait retains ownership of the suggestion methodology.

Anonymized Data

Krait may use anonymized and aggregated data derived from your scans for:

• Improving detection accuracy
• Analyzing security trends
• Enhancing platform reliability
• Conducting research

This data cannot reasonably identify your organization, repositories, or findings.

As-Is Service

THE SERVICE IS PROVIDED ON AN “AS-IS” AND “AS-AVAILABLE” BASIS WITHOUT WARRANTIES OF ANY KIND. WE DISCLAIM ALL EXPRESS AND IMPLIED WARRANTIES, INCLUDING:

• Warranties that the Service will find all vulnerabilities (it will not)
• Warranties regarding the accuracy or completeness of AI Deep Scan results
• Warranties of uninterrupted or error-free operation
• Warranties of fitness for a particular purpose
• Warranties of merchantability
• Warranties that the Service complies with any particular standard or regulation

Specific Disclaimers

You understand and accept that:

• Incomplete Coverage: Krait cannot detect all vulnerabilities. False negatives (missed vulnerabilities) are possible. Your scan results do not constitute a comprehensive security assessment.
• AI Accuracy: AI Deep Scan and AI-assisted features are not guaranteed to be accurate. They may produce false positives (incorrect findings) or false negatives (missed issues). All AI-generated suggestions should be reviewed by qualified security professionals.
• No Service Guarantee: We do not guarantee any specific uptime, availability, or performance level for the Service.
• Third-Party Services: Krait is not responsible for the availability, functionality, or security of third-party services you integrate (GitHub, Slack, Linear, etc.).

Your Data: You are solely responsible for:

• Maintaining backups of your data
• Verifying scan accuracy
• Implementing findings appropriately

Limitation of Liability

EXCEPT WHERE PROHIBITED BY LAW, OUR TOTAL LIABILITY TO YOU FOR ANY CLAIM SHALL NOT EXCEED:

• Free Tier Users: $0 (No liability)
• Paid Subscribers: The amount you paid to Krait in the 12 months preceding the claim, or $100, whichever is greater

THIS LIMITATION APPLIES REGARDLESS OF THE BASIS OF THE CLAIM (CONTRACT, TORT, OR OTHERWISE).

WE WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, OR PUNITIVE DAMAGES, INCLUDING:

• Lost profits or revenue
• Lost data or business
• Loss of reputation or goodwill
• Business interruption

Even if we have been advised of the possibility of such damages.

You agree to defend, indemnify, and hold harmless Krait and its officers, employees, and agents from any claims, damages, losses, liabilities, and expenses (including reasonable attorneys’ fees) arising from:

• Your violation of these Terms
• Your use of the Service in a manner not authorized by these Terms
• Your violation of any applicable law or regulation
• Your code or data submitted to Krait (including infringement of third-party intellectual property or privacy rights)
• Your violation of third-party rights
• Harm caused by your account to other users or third parties

This indemnification does not apply to claims arising solely from Krait’s gross negligence or willful misconduct.

Termination by Krait

We reserve the right to terminate or suspend your account, immediately and without notice, if you:

• Violate these Terms or the Acceptable Use Policy
• Violate any applicable law
• Engage in activity we reasonably believe is harmful to Krait or other users

Upon termination by us:

• Your account is deleted
• All data is deleted
• You may not create a new account using the same email or identity

Pricing

Krait offers a free tier and paid subscription plans. Current pricing is displayed on our pricing page. We reserve the right to modify pricing with 30 days’ notice.

Payment

• Billing occurs monthly or annually, as you select
• Payment is charged in advance on the day you subscribe and on each renewal date
• We process payments through Stripe
• You authorize automatic recurring charges
• All prices are in USD unless otherwise stated

Non-Payment and Account Suspension

If payment fails or is declined:

• We will attempt to charge your payment method again
• If payment fails for 10 days, we may suspend your account
• If payment remains failed after 30 days, we may terminate your account access
• Reactivation may require payment of all outstanding balances

We may modify these Terms at any time. We will notify you of material changes by:

• Posting the updated Terms on our website
• Updating the “Last Updated” date
• Sending you an email for significant changes

Your continued use of Krait after changes indicates your acceptance. If you do not agree with changes, you must discontinue use.

Governing Law

These Terms are governed by the laws of the State of Delaware and the United States, without regard to conflicts of law principles.

Jurisdiction

You irrevocably consent to the exclusive jurisdiction of the courts of Delaware for any disputes. You waive any objections to venue or inconvenient forum.

Dispute Resolution

Before litigation:

• You agree to attempt to resolve disputes through good faith negotiation
• If negotiation fails, either party may submit the dispute to non-binding mediation
• Mediation shall occur in San Francisco, California
• You pay your own legal fees and costs; we may seek recovery of our reasonable fees if we prevail

Entire Agreement

These Terms, together with our Privacy Policy, constitute the entire agreement between you and Krait regarding your use of the Service and supersede all prior agreements and understandings.

Severability

If any provision of these Terms is found invalid or unenforceable, that provision is severed, and the remaining provisions remain in full force.

Waiver

Failure to enforce any right does not constitute a waiver of that right.

Assignment

We may assign these Terms to any successor or affiliate. You may not assign these Terms without our consent.

Contact Us

For questions about these Terms, contact: