CHELYS SECURITY
GET DEMO

Terms of Service

Chelys Security, Inc. · Last updated: May 4, 2026 · Version 1.0

Authorization Requirement

Chelys Security is an offensive security tool. You must have explicit written authorization from the system owner before running any scan. Unauthorized testing is illegal under the Computer Fraud and Abuse Act (CFAA) and equivalent laws worldwide. Your account will be permanently terminated for unauthorized use.

1. Agreement to Terms

By creating an account or using the Chelys Security platform ("Service"), you agree to be bound by these Terms of Service ("Terms") and our Privacy Policy. If you do not agree, do not use the Service.

If you are using the Service on behalf of an organization, you represent that you have authority to bind that organization to these Terms, and "you" refers to that organization.

2. Definitions

  • Service — The Chelys Security platform, including the web application, API, agents, and all associated tools.
  • Organization — The entity associated with your account.
  • Scan / Job — An autonomous security assessment initiated by you against one or more targets.
  • Target — Any IP address, domain, hostname, network range, or system you designate for testing.
  • Findings — Security vulnerabilities or observations produced by the Service.
  • Authorized Target — A target you own or have received explicit written permission to test.

3. Acceptable Use Policy (AUP)

3.1 You MAY use the Service to:

  • Test systems you own or operate.
  • Test systems for which you have received explicit, documented written authorization from the system owner.
  • Conduct authorized bug bounty research within the scope defined by the bug bounty program.
  • Perform security assessments under a signed penetration testing agreement with your client.
  • Test lab environments, virtual machines, and intentionally vulnerable systems you control.

3.2 You MAY NOT use the Service to:

  • Test any system you do not own and for which you do not have explicit written authorization.
  • Launch denial-of-service attacks, even against authorized targets, unless explicitly permitted in writing.
  • Access, exfiltrate, modify, or destroy data on target systems beyond what is necessary to document a finding.
  • Test systems belonging to critical infrastructure (power grids, hospitals, water systems, financial systems) without extraordinary authorization and legal review.
  • Use the Service for any illegal purpose under applicable law.
  • Resell, sublicense, or provide access to the Service to third parties without our written consent.
  • Attempt to circumvent or disable safety controls, the Safety Oracle, scope enforcement, or hop limiters.
  • Use the Service to conduct espionage, competitive intelligence, or surveillance of individuals.

Violation of this AUP will result in immediate account suspension, termination without refund, and may be reported to law enforcement. You are solely responsible for ensuring you have proper authorization before initiating any scan.

4. Authorization Attestation

Each time you create a scan job, you will be required to confirm that you have written authorization to test the designated targets. This attestation is logged with your user identity, IP address, and timestamp in an immutable audit log. This log may be provided to law enforcement upon lawful request.

By confirming authorization at job creation, you accept sole legal responsibility for the accuracy of that attestation. Chelys Security, Inc. is not liable for damages caused by scans initiated without proper authorization.

5. Account Registration and Security

You must provide accurate information when registering. You are responsible for maintaining the confidentiality of your credentials and for all activity under your account.

You must notify us immediately at help@chelys.io if you suspect unauthorized access to your account.

We reserve the right to suspend or terminate accounts that we believe are being used in violation of these Terms, applicable law, or that pose a risk to other users or third parties.

6. Subscription, Billing, and Quotas

The Service is offered on a subscription basis. Your subscription tier determines your monthly scan quota, number of users, and access to features. Billing is processed by Stripe, Inc. Scan quotas reset at the beginning of each billing period and do not carry over.

You authorize us to charge your payment method on a recurring basis. Subscriptions automatically renew unless cancelled before the renewal date. Refunds are at our sole discretion and not guaranteed except where required by law.

We may change pricing with 30 days' notice. Continued use after the notice period constitutes acceptance of the new pricing.

7. AI-Generated Content Disclaimer

Findings, vulnerability summaries, attack narratives, and reports generated by the Service incorporate output from AI models (including Anthropic's Claude API). AI-generated content may contain errors, omissions, or inaccuracies. All findings should be verified by a qualified security professional before remediation decisions are made.

The Service is a tool to assist security professionals — it is not a substitute for human judgment. We do not warrant that findings are complete, accurate, or free from false positives or false negatives.

8. Data and Confidentiality

Vulnerability data and scan results generated for your organization are confidential. We will not share your findings, targets, or credentials with other customers or third parties except as required by law or as disclosed in our Privacy Policy (e.g., AI API calls to Anthropic).

You retain ownership of your data. By using the Service, you grant us a limited license to process and store your data solely to provide the Service. You may request deletion of your data at any time; see our Privacy Policy for retention details.

9. Intellectual Property

The Service, including all software, agents, algorithms, UI, and documentation, is owned by Chelys Security, Inc. and protected by intellectual property laws. You may not copy, decompile, reverse-engineer, or create derivative works from the Service.

Findings reports and outputs generated for your organization belong to you. We retain no ownership over your scan results or reports.

10. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, CHELYS SECURITY, INC. SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES ARISING FROM YOUR USE OF THE SERVICE, INCLUDING DAMAGES CAUSED BY SCANS ON UNAUTHORIZED TARGETS, DATA LOSS, SYSTEM DISRUPTION, OR SERVICE INTERRUPTIONS.

OUR TOTAL LIABILITY TO YOU FOR ANY CLAIM ARISING FROM THESE TERMS OR THE SERVICE SHALL NOT EXCEED THE AMOUNT PAID BY YOU TO US IN THE THREE (3) MONTHS PRECEDING THE CLAIM.

11. Indemnification

You agree to indemnify, defend, and hold harmless Chelys Security, Inc. and its officers, directors, employees, and agents from any claims, damages, losses, or expenses (including attorney's fees) arising from: (a) your use of the Service; (b) your violation of these Terms or the AUP; (c) your scanning of unauthorized targets; (d) your violation of any applicable law; or (e) your infringement of any third-party rights.

12. Termination

You may cancel your account at any time through the Billing settings. We may terminate or suspend your account immediately, without notice or liability, for violation of these Terms, non-payment, or if we determine your use poses legal or security risks.

Upon termination, your right to use the Service ceases. Your data will be retained per our Privacy Policy retention schedule and then deleted.

13. Governing Law and Dispute Resolution

These Terms are governed by the laws of the State of Utah, United States, without regard to conflict of law principles. Any dispute arising from these Terms shall be resolved exclusively in the state or federal courts located in Salt Lake County, Utah.

14. Changes to Terms

We may update these Terms at any time. We will notify you by email or in-app notice at least 14 days before material changes take effect. Continued use after the effective date constitutes acceptance. If you disagree with updated Terms, you must cancel your account before they take effect.

15. Contact

For questions about these Terms, contact us at:

Chelys Security, Inc.
help@chelys.io
Utah, United States

Privacy Policy · ← Back to Home © 2026 Chelys Security, Inc. All rights reserved.