1. Agreement
These Terms are a binding agreement between you and [Legal Entity Name] governing your access to and use of Onyx. If you use Onyx on behalf of an organization, you represent that you are authorized to bind it.
2. Acceptable use — authorization is mandatory
Onyx is an offensive security-testing tool. You may use it only against APIs, domains, and systems that you own or are explicitly authorized in writing to test. To help enforce this, Onyx requires domain-ownership verification (a probe file or DNS record) before it will scan a target.
You must not, and must not attempt to:
- Scan, probe, or attack any system you do not own or lack explicit authorization to test.
- Use Onyx to conduct denial-of-service attacks or to degrade any third party’s service.
- Use Onyx for any unlawful purpose or to violate the rights of others.
- Circumvent the domain-verification, rate-limiting, quota, or SSRF controls.
- Resell, or provide access to, the service in violation of these Terms.
You are solely responsible for ensuring you have authorization for every target you test. Unauthorized testing may be illegal, and violations may result in immediate suspension or termination.
3. Accounts
You are responsible for your account credentials and API tokens and for all activity under your account. Keep them secure and notify us of any unauthorized use. You must provide accurate registration information and be at least 18 years old.
4. Plans, billing & cancellation
Paid plans are billed through Razorpay on a recurring basis at the prices shown on our Pricing page (priced in USD, billed in INR). Plan quotas (monthly runs, endpoints per run) apply as described there.
You can cancel anytime from the Billing page; your paid access continues until the end of the current billing period, after which your account reverts to the Free plan. [Refund policy, if any — do not assume one exists.] Taxes may apply depending on your location.
5. Service availability
We aim to keep Onyx available and reliable but do not guarantee uninterrupted service. We may modify, suspend, or discontinue features with reasonable notice where practicable.
6. Intellectual property
Onyx and its software, branding, and content are owned by [Legal Entity Name] and its licensors. You retain ownership of the specs and data you submit; you grant us the limited rights needed to operate the service for you.
7. Disclaimer of warranties
Onyx is provided “as is” and “as available”, without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. Security testing is inherently probabilistic; Onyx does not guarantee that it will find every vulnerability or that findings are exhaustive or free of false positives.
8. Limitation of liability
To the maximum extent permitted by law, [Legal Entity Name] will not be liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits or data. Our aggregate liability arising out of or relating to the service will not exceed the amount you paid us in the [12 months] preceding the claim.
9. Indemnification
You agree to indemnify and hold [Legal Entity Name] harmless from claims arising out of your use of Onyx in breach of these Terms, including any unauthorized testing of systems you did not have permission to test.
10. Termination
You may stop using Onyx at any time. We may suspend or terminate access for breach of these Terms — in particular the acceptable-use section — or as required by law.
11. Governing law
These Terms are governed by the laws of [Jurisdiction], without regard to conflict-of-laws rules. [Venue / dispute-resolution clause.]
12. Changes
We may update these Terms; continued use after changes take effect constitutes acceptance. Material changes will be reflected by an updated effective date.
13. Contact
Questions about these Terms: legal@[your-domain], [Legal Entity Name].