Legal
Terms of Service
Effective Date: September 4, 2026 · Last Updated: September 4, 2026
These Terms of Service govern your access to and use of the GhostDrill red team intelligence platform, including its penetration testing engagement, vulnerability analysis, and security simulation features. By using GhostDrill, you agree to these Terms. Please read them carefully.
1. Acceptance of Terms
By accessing or using the GhostDrill application ("the Service"), you ("you" or "User") agree to be bound by these Terms of Service ("Terms") and our Privacy Policy. If you do not agree to these Terms, you must not access or use the Service. If you use the Service on behalf of an organization, you represent that you have the authority to bind that organization to these Terms, and "you" refers to that organization.
2. Description of the Service
GhostDrill is a red team intelligence platform that simulates real-world security findings, generates AI-driven attack scenarios and business impact assessments, tracks vulnerabilities, and supports penetration testing engagement management. The Service is provided for lawful security assessment, defensive security research, and compliance purposes only. It is not a tool for attacking systems you are not authorized to test.
3. Eligibility and Authorization
You may use the Service only if: • You are at least 18 years old and legally capable of entering into a binding contract • You are a U.S.-based user (the Service is geo-restricted to the United States) • Any security testing you plan, conduct, or simulate using the Service is performed on systems you own or are expressly and verifiably authorized to test By creating engagements, signing engagement contracts, or generating attack simulations, you affirm that you hold all authorizations required for the target scope described therein.
4. User Responsibilities and Acceptable Use
You agree NOT to: • Use the Service to plan, facilitate, or conduct any unauthorized access, attack, or intrusion against systems you do not own or are not authorized to test • Use the Service for any illegal purpose, or in violation of the Computer Fraud and Abuse Act, state computer crime statutes, or any other applicable law • Upload, enter, or process third-party personal data you have no right to process • Misrepresent your identity, authority, or organizational role — including during contract signing and identity verification • Reverse engineer, probe, scan, or load-test the Service itself without prior written authorization (the Service's infrastructure is monitored and unauthorized testing will be treated as an attack) • Share account credentials or circumvent authentication, multi-factor requirements, or access controls • Resell, sublicense, or provide the Service to third parties without a written agreement We may investigate and terminate any account that violates these rules, and we may report unlawful activity to law enforcement.
5. Engagements, Contracts, and Rules of Engagement
Certain features (engagement creation, penetration test sessions, contract signing) require execution of an engagement contract, which may include Rules of Engagement and a Non-Disclosure Agreement. Those contract terms are incorporated into these Terms by reference. Contract signing includes an AI-assisted identity and authority verification step. You attest that all information you provide during verification (name, company, title, LinkedIn profile, target scope) is accurate, and that your typed electronic signature is your valid legal signature.
6. Subscriptions, Payments, and Billing
Paid features are offered via subscription plans processed through Base44 Payments (powered by Wix). By purchasing a subscription you agree to: • Pay all applicable fees and taxes for the selected plan • Provide accurate billing and account information • Accept that subscriptions renew automatically until canceled, and that cancellations take effect at the end of the current billing period • Acknowledge that refunds, where offered, are limited to amounts required by applicable law We may change pricing upon reasonable advance notice; price changes will not apply retroactively to a paid billing period.
7. AI-Generated Content Disclaimer
The Service uses artificial intelligence to generate attack scenario narratives, business impact assessments, remediation guides, vulnerability analyses, and similar content. Such content is advisory in nature, may be incomplete or inaccurate, and does not constitute legal, financial, or professional security advice. You are solely responsible for validating AI-generated findings and for all security decisions, testing activities, and remediation actions you take based on them. Final security judgments must be made by qualified human professionals.
8. Intellectual Property
The Service, including its software, design, security patterns library, and infrastructure, is owned by GhostDrill and protected by intellectual property laws. You retain ownership of the data, findings, and content you create or upload ("User Content"). By using the Service, you grant GhostDrill a limited license to process your User Content solely to operate and improve the Service and to generate the outputs you request. You are responsible for ensuring your User Content does not infringe the rights of any third party.
9. Disclaimers and Limitation of Warranty
THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. GhostDrill does not warrant that the Service will be uninterrupted, error-free, or secure from all threats, that vulnerability data (including CVE records) will be complete or current, or that AI-generated assessments will be accurate.
10. Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW, GHOSTDRILL SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, DATA, GOODWILL, OR BUSINESS OPPORTUNITY, ARISING FROM OR RELATED TO YOUR USE OF THE SERVICE. Our aggregate liability for all claims arising out of or related to the Service shall not exceed the greater of (a) the fees you paid to us in the twelve months preceding the claim, or (b) one hundred U.S. dollars ($100). Nothing in these Terms limits liability that cannot be limited by law.
11. Indemnification
You agree to indemnify, defend, and hold harmless GhostDrill and its affiliates, officers, employees, and contractors from and against any claims, damages, losses, and expenses (including reasonable attorneys' fees) arising from: (a) your use of the Service in violation of these Terms or of law; (b) any unauthorized or unlawful testing activity connected to your use of the Service; or (c) User Content you provide.
12. Suspension and Termination
We may suspend or terminate your access to the Service immediately, without notice, if we reasonably believe you have violated these Terms, endangered other users or our infrastructure, or failed to make required payments. You may stop using the Service and delete your account at any time via the in-app Delete Account feature. Provisions that by their nature should survive termination (intellectual property, disclaimers, limitation of liability, indemnification) will survive.
13. Governing Law and Disputes
These Terms are governed by the laws of the United States and the state in which GhostDrill is organized, without regard to conflict-of-law rules. The parties will attempt in good faith to resolve any dispute informally before initiating legal proceedings. Any dispute arising from these Terms or the Service shall be brought exclusively in the courts located in that state.
14. Changes to These Terms
We may update these Terms from time to time. We will notify you of material changes by posting the updated Terms in the app and, where significant, by email. Continued use of the Service after the effective date of updated Terms constitutes acceptance.
15. Contact Us
If you have any questions about these Terms, please contact us: • Submit via the Contact page in the app • Application: GhostDrill — Red Team Intelligence Platform For privacy-related questions, see our Privacy Policy.