Home / Legal
Legal
Terms of service
The rules for using Cyberlop. Above all, what you must be authorised to test before you point this at anything.
Last updated: 20 September 2026
Agreement
These terms govern your use of Cyberlop, which is operated by Cyberlop Labs of New Delhi, India. Using the platform means you accept them. Where you have signed an order form or a master agreement with us, that document wins wherever the two disagree.
Authorisation to test: the important one
Cyberlop does not just look at your application. It logs in, tries the doors and attempts real exploitation against whatever you point it at. You must own every application you register, or hold the owner's documented permission to test it. Testing without that permission is prohibited here and is very likely illegal where you are.
- You own the target, or you hold written authorisation from whoever does.
- If you are an agency, you hold that authorisation for each client application you register, and you can produce it if we ask.
- You comply with the acceptable-use rules of whoever hosts the target.
- You do not register a target you have no right to attack. Not to try the product, not as a demonstration, not once.
Where we reasonably believe testing is unauthorised, we will suspend the account immediately and ask questions afterwards. We would rather lose a customer than be the tool in someone else's intrusion.
Acceptable use
You may not use the platform to:
- Test anything you are not authorised to test
- Attack, degrade or overload a third party
- Work around the licence you hold or the limits set on your account
- Reach another customer's data, or try to
- Resell or white-label the platform without a partner agreement with us
- Reverse engineer the platform, except where the law says that right cannot be taken away
What you pay
Cyberlop is licensed per application, per year. A pilot costs $199 and covers one application for thirty days, with success criteria agreed in writing before it starts; if you convert to an annual licence, that $199 comes off the price. Beyond the pilot, subscriptions are billed annually in advance unless your order form says otherwise, and the applications covered are named in that order form.
- There is no free tier and no free trial period.
- There is no per-scan billing. Scan as often as you like within the fair limits on your account.
- You bring your own AI provider key at every tier, so the inference cost is yours and is billed to you by that provider, not by us.
- All prices exclude 18% GST, which applies to customers invoiced in India. International customers are invoiced without GST.
Invoices are due as stated on them. Fees already paid are not refundable except where the law requires it.
Your content
Your source code, your configuration and your findings stay yours. You give us only the permission we need to run the service for you, and nothing wider. We do not use your content to train models. How code is handled in the hosted and self-hosted options is set out in our privacy policy and our security page.
Availability
We are early and we say so. Today the platform carries no uptime commitment. Automated monitoring and a public status page arrive on 18 December 2026, and a service level agreement will follow rather than be promised in advance. Features change; where a change materially affects you, we will give reasonable notice.
Suspension and termination
We may suspend an account for non-payment, for unauthorised testing, or for a breach of acceptable use. You may end the agreement at the end of your term. When it ends, your data stays available for export for thirty days and is then deleted.
Warranties and liability
The platform is provided "as is" to the extent the law allows. Security testing does not make an application secure. No findings does not mean no vulnerabilities, it is not a certification of anything, and we do not warrant that Cyberlop will find every flaw in your software. To the maximum extent permitted by law, our total liability is limited to the fees you paid us in the twelve months before the claim, and neither of us is liable to the other for indirect or consequential loss.
Indemnity
If you test a system you were not authorised to test, and a claim comes to us because of it, you cover us for that claim.
Governing law
These terms are governed by the laws of India, and the courts at New Delhi have exclusive jurisdiction over any dispute arising from them.
Contact
Questions about these terms go to hello@cyberlop.com.
If a clause here needs explaining
Write to hello@cyberlop.com or send the question through the contact page, and a person will answer it before you sign anything.