1. Agreement

By using Defen.so (available at https://defen.so and https://app.defen.so), you agree to these Terms of Service. If you disagree with any part of these terms, do not use the service.

2. Service description

Defen.so is a security-as-a-service platform providing web application firewall, DDoS mitigation, bot detection, active deception, file-upload scanning, uptime monitoring, and related developer security tooling. The service is delivered via SDK, DNS proxy, and web dashboard.

3. Account & eligibility

You must be at least 16 years old and provide accurate registration information. You are responsible for maintaining the confidentiality of your credentials and for all activity under your account. Notify info@defen.so immediately of any unauthorized access.

4. Acceptable use

You may not: (a) use the service to attack, probe, or interfere with systems you do not own or have written authorization to test; (b) attempt to circumvent plan limits, quotas, or rate limits; (c) resell, sublicense, or white-label the service without a written agreement; (d) use the service to store or transmit illegal, infringing, malicious, or harassing content; (e) reverse-engineer the SDK, dashboard, or edge infrastructure except as permitted by law.

5. Plans, billing & refunds

Paid plans are billed monthly or annually in advance via Stripe. All fees are non-refundable except where required by law. You may cancel at any time from the billing dashboard; access continues through the end of the paid period. Free tiers may be modified or discontinued with 30 days notice. Custom Agency plans are governed by a separate order form.

Pentest zero-finding guarantee. On-demand paid pentests (Rightsized or Enterprise, ordered as a separate deliverable, not the automatic pentests bundled with a monthly subscription) carry a "no High or Critical = full refund" clause. If the delivered report contains zero findings at severity High or Critical and zero exploitable business-logic flaws, the pentest fee is refunded to the original payment method within 30 days of report delivery upon written request to info@defen.so. Bundled subscription pentests are not eligible for this refund.

6. Fails-open & SLA

Defen.so is engineered to fail open: if our edge is unreachable, your application continues to serve traffic using a locally cached policy for up to 24 hours. Paid plans include a documented uptime SLA; free tiers are provided on a best-effort basis. Scheduled maintenance windows are excluded from SLA calculations.

7. Data & privacy

Our handling of your data is described in the Privacy Policy, which is incorporated into these Terms by reference.

8. Confidentiality

All customer data is protected and encrypted. In addition, when you subscribe to any paid plan, both parties are bound by mutual confidentiality by default, with no separate agreement to sign. This confidentiality applies for your entire subscription period and continues for one month after it ends. We never disclose your data, your scan results and findings, or the fact that you are a customer, to any third party.

We keep every customer's information separate and private. If a third party engages Defen.so on their own, that is a separate relationship: we do not use it to reveal anything about you, and we do not tell that party anything about you or your use of the service.

9. Intellectual property

Defen.so, the wordmark, logo, and all related trademarks belong to Defen.so. You retain full ownership of the content, traffic, and applications you route through the service. You grant us a limited license to process this data solely to deliver the service.

10. Termination

You may close your account at any time. We may suspend or terminate access for material breach of these Terms, non-payment, or use that endangers other customers or infrastructure. Upon termination, your data is retained for 30 days and then permanently deleted.

11. Warranties & liability

The service is provided "as is" without warranties of any kind. To the maximum extent permitted by law, Defen.so's aggregate liability under these Terms is limited to the fees paid by you in the 12 months preceding the claim. We are not liable for indirect, incidental, or consequential damages.

12. Governing law

These Terms are governed by the laws of the jurisdiction in which Defen.so is incorporated, without regard to conflict-of-law provisions. Any dispute will be resolved in the competent courts of that jurisdiction.

13. Changes

We may update these Terms from time to time. Material changes will be announced by email or in-app notice at least 14 days before taking effect.

14. Contact

Questions? Email info@defen.so.