Terms of Service

1.1. You must be authorized by Customer to use the Services and at least the minimum age required in your jurisdiction to enter a binding contract. 1.2. You are responsible for safeguarding your credentials and for all activity under your account. 1.3. Customer administrators control roles, invitations, and tenant configuration. Adversys may suspend accounts that violate these Terms or pose a security risk.

2.1. Maximus is intended solely for lawful, authorized security assessment activities — including threat modeling, penetration testing, vulnerability scanning, and related defensive security work — performed on systems and data you or Customer are permitted to test. 2.2. You represent and warrant that you have explicit, documented authorization before assessing any target (network, application, account, or data) you do not own or manage. 2.3. Prohibited uses include, without limitation: • Testing systems without authorization • Interfering with service availability beyond agreed scope • Accessing, exfiltrating, or misusing data without permission • Using the Services to develop or deploy malware for unlawful purposes • Circumventing tenant isolation or other security controls • Violating export control, privacy, or computer misuse laws Unauthorized use may result in immediate suspension, termination, and referral to law enforcement.

Customer is responsible for: • Licensing and deployment decisions, including on-premises or hosted configurations • User provisioning, role assignment, and offboarding • Maintaining authorization records for penetration testing and scanning activities • Configuring integrations and LLM providers, and reviewing third-party terms • Ensuring its users comply with these Terms and applicable law Adversys does not independently verify that Customer holds authorization for each engagement target.

4.1. AI features (including the Maximus assistant) generate outputs that may be incorrect, incomplete, or unsuitable for your environment. You must review outputs before acting on them or including them in deliverables. 4.2. Customer-provided LLM credentials are used only to deliver requested AI functionality, subject to the LLM provider's policies. 4.3. Adversys is not liable for decisions made solely on the basis of unreviewed AI output.

Product documentation at /docs/legal describes typical features for transparency and training. Documentation is not part of these Terms unless expressly incorporated into a signed agreement. Features may vary by version and configuration.

We may log and monitor use of the Services to secure the platform, prevent abuse, and comply with law. We may disclose information to authorities when we reasonably believe illegal activity has occurred or when required by valid legal process.

THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE." TO THE MAXIMUM EXTENT PERMITTED BY LAW, ADVERSYS DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND ANY WARRANTY ARISING FROM COURSE OF DEALING OR USAGE. We do not warrant that the Services will be uninterrupted, error-free, or that all security vulnerabilities in Customer targets will be identified.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, ADVERSYS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR LOSS OF PROFITS, DATA, GOODWILL, OR BUSINESS INTERRUPTION, ARISING FROM OR RELATED TO THE SERVICES OR THESE TERMS. OUR TOTAL LIABILITY FOR ANY CLAIM ARISING OUT OF OR RELATING TO THE SERVICES WILL NOT EXCEED THE GREATER OF (A) AMOUNTS PAID BY CUSTOMER TO US FOR THE SERVICES IN THE TWELVE (12) MONTHS BEFORE THE CLAIM, OR (B) ONE HUNDRED U.S. DOLLARS (USD $100), EXCEPT WHERE LIABILITY CANNOT BE LIMITED BY LAW. You acknowledge that Maximus is a tool; legal and technical consequences of testing activities remain your and Customer's responsibility.

You and Customer agree to defend, indemnify, and hold harmless Adversys and its officers, directors, employees, and agents from claims, damages, losses, and expenses (including reasonable attorneys' fees) arising from: (a) unauthorized or unlawful use of the Services; (b) violation of these Terms; or (c) violation of third-party rights or applicable law in connection with security testing activities performed using the Services.

We may suspend or terminate access immediately for violations of these Terms, security risks, or non-payment under applicable agreements. Customer may terminate user access according to its internal policies. Sections that by nature should survive (including authorized use acknowledgments, disclaimers, limitation of liability, and indemnification) survive termination.

These Terms are governed by the laws of the State of California, United States, without regard to conflict-of-law rules. Exclusive venue for disputes arising under these Terms lies in the state and federal courts located in San Diego County, California, unless mandatory law requires otherwise.

We may update these Terms. We will post the revised version at /docs/legal/terms with an updated date. Continued use after changes become effective constitutes acceptance. Questions or misuse reports: MarkC@adversys.ai These policies describe our standard practices and are published for transparency. If your organization has a signed agreement with us (for example, an MSA, order form, or data processing addendum), that contract controls where it conflicts with this summary. Please share these documents with your legal counsel before relying on them for compliance decisions.