Terms of Use

1. Acceptance of Terms

By accessing or using Krytho ("the Service"), operated by Orange-Robot LLC ("we," "us," or "our"), you agree to be bound by these Terms of Use. If you do not agree, do not use the Service.

2. Description of Service

Krytho is a security review service. A qualified reviewer examines source code you provide and, where you have authorized it in writing, tests the running application, then reports the security issues found. Reviews may include a proposed code change addressing those issues, delivered as a pull request against your repository for you to review and merge at your discretion. Where a review meets our published issuance criteria we may issue a seal recording that a review took place, covering a named commit on a named date.

3. No Guarantees of Results

A security review is an examination limited in time, scope, and method. We do not guarantee that your application is secure, or that we have identified every vulnerability in it. A review that reports no critical findings means that none were found within the agreed scope, not that none exist. Security is not a state a review can confer.

You remain responsible for the security of your systems, for testing and merging any code we propose, and for your own compliance obligations. Nothing in a review, report, or seal is a warranty, a certification against any standard, or a substitute for your own security programme. We are not a certifying body and a seal is not an accreditation, an audit opinion, or a compliance attestation.

4. Account Registration

To access paid features, you must create an account. You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account. You agree to provide accurate and complete information and to update it as needed.

5. Engagements, Billing, and Refunds

• A one-off review is a fixed-fee engagement covering the scope agreed in writing before work begins, at the price stated on our pricing page.
• An ongoing plan is billed monthly in advance and includes a re-review at the cadence stated on our pricing page. It renews until you cancel.
• You may cancel an ongoing plan at any time. Cancellation takes effect at the end of the current billing period. Any seal issued to you remains valid until its stated expiry and is not renewed after cancellation.
• Refund policy: Except where required by law, fees for completed review work are non-refundable, and fees for partial billing periods are not refunded. If we have not begun work on an engagement you may cancel it for a full refund. We may offer refunds at our discretion case by case.
• We reserve the right to change pricing with at least 30 days' notice to existing subscribers. Changes take effect at your next renewal.
• Scope is agreed per engagement. Work outside the agreed scope, including re-testing after substantial changes, is quoted separately.

6. Authorization to Test

We do not test any system without written authorization from someone entitled to grant it. Before any testing of a running application begins, you must sign an authorization that identifies the systems in scope, the permitted window, and the techniques excluded, and you must demonstrate control of each hostname in scope by a method we specify.

By signing that authorization you represent that you own the systems in scope or are authorized to permit testing of them, that doing so does not breach any agreement binding on you, including the terms of your hosting or infrastructure providers, and that you have obtained any consent required from those providers.

Where your hosting provider restricts or prohibits security testing, those restrictions govern, and your authorization cannot extend permission you do not have. We will decline to test where a provider's terms do not permit it.

Testing is confined to the agreed scope. We do not intentionally test systems outside it, and we exclude denial of service, social engineering, physical intrusion, and any technique targeting a third party's infrastructure rather than your application. You may revoke authorization at any time and testing will stop.

You are responsible for taking backups, for notifying anyone in your organization who needs to know, and for providing dedicated test accounts rather than accounts belonging to real users.

7. The Seal

A seal records a fact: that a review of a named commit took place on a named date, within a named scope. It expires. It does not state that your application is secure, does not cover code committed after the reviewed commit, and does not certify compliance with any standard.

You may display a seal only while it is valid and only in connection with the reviewed application. You may not alter it, imply a broader claim than it makes, or continue displaying it after it expires or is revoked. We may revoke a seal, and will say so on its verification page, if it is displayed misleadingly, if the review is found to have been materially incomplete, or if you ask us to.

Every seal links to a verification page we control, which states its current status. That page, not the badge, is the authoritative statement of what the seal covers.

8. Acceptable Use

You agree not to:

• Request testing of a system you do not own and are not authorized to permit testing of
• Use the Service, our findings, or any report for any unlawful purpose
• Submit code or data that you do not have the right to share with us
• Represent a seal as covering more than it states, or display an expired or revoked seal
• Resell or redistribute our reports or the Service without our written consent

9. Your Data

You retain ownership of the firm information you submit to the Service. By using the Service, you grant us a limited license to process that data solely for the purpose of providing the Service. We will not sell your firm data to third parties or use it to train AI models. AI-engine answers and firm mentions we research on your behalf are generated by us and retained as described in our Privacy Policy.

10. Intellectual Property

The Service, including its design, code, algorithms, and content (excluding your data), is the property of Orange-Robot LLC and is protected by copyright and other intellectual property laws. Reports and recommendations generated by the Service are licensed to you for your internal business use.

11. Third-Party Platforms and Services

The Service researches and analyzes answers from third-party AI platforms (including OpenAI, Perplexity, Google, and Microsoft), and relies on third-party providers (including our hosting and database providers). Your use of third-party platforms and services directly is subject to their respective terms. We are not responsible for the availability, accuracy, content, or practices of third-party platforms or services, including the accuracy of any AI-generated answer we research on your behalf.

12. Disclaimer of Warranties

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE.

13. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, ORANGE-ROBOT LLC SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUES, WHETHER INCURRED DIRECTLY OR INDIRECTLY, OR ANY LOSS OF DATA, USE, GOODWILL, OR OTHER INTANGIBLE LOSSES RESULTING FROM YOUR USE OF THE SERVICE. OUR TOTAL LIABILITY SHALL NOT EXCEED THE AMOUNT YOU PAID US IN THE 12 MONTHS PRECEDING THE CLAIM.

14. Indemnification

You agree to indemnify and hold harmless Orange-Robot LLC and its officers, directors, employees, and agents from any claims, damages, losses, or expenses (including reasonable attorneys' fees) arising from your use of the Service or violation of these Terms.

15. Termination

We may suspend or terminate your access to the Service at any time for violation of these Terms or for any other reason at our discretion. Upon termination, your right to use the Service ceases immediately. Provisions that by their nature should survive termination will survive (including Sections 7, 10, 11, 12, and 14).

16. Governing Law

These Terms shall be governed by and construed in accordance with the laws of the State of Florida, without regard to its conflict of law provisions. Any disputes arising under these Terms shall be resolved in the courts located in Florida.

17. Changes to Terms

We reserve the right to modify these Terms at any time. Material changes will be communicated via email or prominent notice on the Service. Continued use of the Service after changes constitutes acceptance of the updated Terms.

18. Contact Us

If you have questions about these Terms, contact us at:

Orange-Robot LLC
260 Williamson Blvd
Suite 731678
Ormond Beach, FL 32174
Email: support@krytho.com