Please read these terms carefully before using the Aegisnode platform.
Effective: March 21, 2026
Aegisnode provides external attack surface intelligence by analyzing publicly available information about specified domains and IP addresses. Aegisnode does NOT perform penetration testing, exploit vulnerabilities, access internal systems, or store customer credentials.
Reports represent a point-in-time snapshot of externally observable data. Aegisnode does not guarantee the completeness or accuracy of any assessment. External scanning can only observe approximately 15-20% of an organization's total security posture.
Aegisnode reports are informational only and are not a substitute for comprehensive security audits, penetration testing, compliance certifications, or professional security consulting. Reports should not be the sole basis for any vendor risk decision, procurement action, or business relationship change.
Customer acknowledges that Aegisnode reports are one input among many in a vendor risk management process. Customer shall not rely solely on Aegisnode data for decisions regarding vendor approval, contract termination, regulatory compliance, or security posture assessment. Aegisnode is a supplementary intelligence tool - not a decision-making authority.
Any action taken by Customer based on Aegisnode data is taken at Customer's sole discretion and risk. Aegisnode expressly disclaims any responsibility for decisions made using report data.
The Service and all reports are provided "AS IS" and "AS AVAILABLE" without warranty of any kind. Aegisnode makes no warranty, express or implied, including but not limited to implied warranties of merchantability, fitness for a particular purpose, accuracy, completeness, or non-infringement.
Aegisnode does not warrant that scan results will be error-free, that all vulnerabilities or risks will be detected, or that the absence of findings indicates the absence of risk. False positives and false negatives may occur.
Where automated analysis or artificial intelligence is used to process scan data, such analysis is constrained to interpreting data already captured by deterministic scan modules. AI does not generate, fabricate, or infer data that was not directly observed.
Despite rigorous validation protocols, automated analysis may produce inaccurate interpretations. All AI-assisted findings are subject to confidence scoring, contradiction detection, and - on applicable paid tiers - human review by a CISSP/CISA-certified professional. See our AI Methodology & Data Integrity page for details.
Aegisnode shall not be liable for any loss or damage arising from reliance on AI-assisted analysis, whether or not such analysis was reviewed by a human professional.
In no event shall Aegisnode's total aggregate liability for all claims arising out of or related to the Service exceed the lesser of (a) the total amount paid by Customer to Aegisnode in the twelve (12) months preceding the claim, or (b) one hundred US dollars ($100) for free-tier usage.
In no event shall Aegisnode be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, including but not limited to: loss of data, loss of revenue, loss of business, business interruption, reputational harm, cost of procurement of substitute services, or damages arising from reliance on report findings - regardless of the theory of liability (contract, tort, negligence, strict liability, or otherwise), even if Aegisnode has been advised of the possibility of such damages.
This limitation applies to all causes of action in the aggregate, including without limitation breach of contract, breach of warranty, tort, negligence, and any other legal or equitable theory.
Customer agrees to indemnify, defend, and hold harmless Aegisnode, its officers, directors, employees, contractors, and agents from and against any and all claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from or related to: (a) Customer's use of the Service; (b) Customer's decisions or actions taken based on Aegisnode data; (c) any breach of these Terms by Customer; or (d) Customer's violation of any applicable law or regulation.
Customer shall not use the Service to scan targets they do not own or have authorization to scan. Customer shall not use the Service for any unlawful purpose. See our full Acceptable Use Policy for detailed guidelines.
Scan data is retained per the Customer's tier agreement. Customers may request data deletion at any time by contacting support@aegisnode.io.
Monthly subscriptions renew automatically. Annual subscriptions are non-refundable after 30 days. One-time reports are non-refundable after delivery.
Either party may terminate with 30 days written notice. Upon termination, customer data is deleted within 30 days unless a longer retention period is required by law.
Reports designated as CISSP-validated represent the professional opinion of a CISSP-certified reviewer based on available external data. This validation does not constitute a guarantee of security or compliance.
These Terms shall be governed by and construed in accordance with the laws of the State of Texas, without regard to its conflict of law provisions.
Any dispute arising out of or relating to these Terms or the Service shall be resolved by binding arbitration administered in Dallas County, Texas, in accordance with the rules of the American Arbitration Association.
Aegisnode may modify these Terms with 30 days written notice to Customer. Continued use of the Service after the notice period constitutes acceptance of the modified Terms.
For questions about these Terms, contact legal@aegisnode.io.