By accessing or using the Noctara platform, you agree to be bound by these Terms of Service. If you do not agree with these terms, please do not use the Services.
These Terms of Service are entered into between you and Noctara Security Ltd (trading as Noctara), a company registered in England and Wales under company number 17122134, with its registered office at 212 Noel Street, Nottingham, NG7 6AT, United Kingdom ("Noctara", "we", "us", or "our").
The Services
These terms apply to all Noctara products and services (together, the "Services"), which comprise:
Noctara ARS (Agentic Runtime Security): a runtime security platform for AI agents. It traces, baselines, verifies and enforces controls at the point an agent takes an action, ingesting agent and LLM traffic and evaluating it against configured detection rules.
Noctara Red: a penetration testing delivery platform, and where separately agreed, penetration testing services delivered by or through Noctara. It manages engagements, findings, evidence, reporting and controlled disclosure of results.
The Noctara platform: the shared account, organisation, membership, entitlement and billing layer used by both products.
Some sections of these terms apply only to a particular product. Where that is the case, it is stated.
Acceptable Use
You agree to use the Services only for lawful purposes and in accordance with these terms. You must not:
Use the Services in violation of any applicable law, regulation, or third-party rights.
Scan, monitor, test, or assess systems, infrastructure, domains, endpoints, applications, or other assets without proper ownership or explicit authorization.
Attempt to gain unauthorized access to the Services or any connected system.
Use the Services to conduct malicious activity, exploit systems without authorization, distribute malware, abuse credentials, or bypass security controls.
Interfere with, disrupt, or attempt to compromise the Services or their underlying infrastructure.
Resell, sublicense, or redistribute access to the Services without our prior written consent.
Account Responsibility
You are responsible for maintaining the confidentiality of your account credentials and for all activity performed through your account.
Accounts are held within an organisation. Administrators of an organisation control who is invited, what role each member holds, and which products each member may access. You are responsible for managing those permissions appropriately.
You agree to provide accurate account information and to notify us promptly if you suspect unauthorized access or use of your account. For account or security-related questions, contact us at info@noctara.tech.
Authorized Security Testing
The Services are intended to support authorized security assessment, testing and monitoring.
You are solely responsible for ensuring that you have the legal right and appropriate authorization to scan, monitor, test, or assess any asset connected to the Services.
Nothing in these terms authorizes you to access or test systems belonging to third parties without their explicit permission.
Penetration Testing Engagements
This section applies to Noctara Red.
Testing is carried out only within a defined scope. Every engagement must record the assets that are in scope and the rules of engagement that apply to it, and testing activity is limited to what those permit.
You warrant that, for every asset you place in scope, you either own it or hold documented authorization from its owner to have it tested, and that you have obtained any further consent required from hosting providers, cloud platforms, or other third parties whose infrastructure may be affected.
You must not place an asset in scope that you are not authorized to have tested. You remain responsible for the accuracy of the scope you define.
Security testing carries inherent risk. Testing activity may cause service degradation, unexpected behaviour, alerts, or interruption, even when performed carefully and within scope. You are responsible for taking appropriate precautions, including backups, change windows, and notifying your own monitoring and support teams.
We may pause, limit, or decline to carry out testing where we consider that authorization is unclear, the scope is inadequate, or continuing would present an unacceptable risk.
Findings, Reports and Platform Outputs
The Services may generate findings, alerts, risk ratings, evidence records, dashboards, reports, and other security-related outputs.
These outputs are provided to help you identify, prioritize and evidence potential security risks. They are not a guarantee that all vulnerabilities, threats, misconfigurations, or security issues have been detected.
Penetration testing results describe what was observed within the agreed scope during the agreed period. They are point-in-time and do not describe the security of your environment before or after that period, or of anything outside the scope.
Where a feature uses automated analysis or machine learning to assist with drafting or enrichment, its output is a suggestion for review, not a finding in its own right. You remain responsible for reviewing outputs, validating their relevance, and deciding what action to take.
Client Portal and Controlled Disclosure
This section applies to Noctara Red.
Noctara Red allows you to share a published report with named recipients through a time-limited portal link. You decide who receives a link, what it contains, and how long it remains valid.
You are responsible for ensuring that each recipient is entitled to receive the material, and for withdrawing access when it is no longer appropriate. Reports commonly describe exploitable weaknesses, and sharing them carries risk that you control rather than we do.
Intellectual Property
All software, design, branding, content, technology, and other materials that make up the Services are owned by or licensed to Noctara and are protected by applicable intellectual property laws.
Except as expressly permitted by these terms, you may not copy, reproduce, modify, distribute, reverse engineer, or create derivative works from any part of the Services without our prior written permission.
Subject to applicable rights and third-party restrictions, you retain rights to the data and security information you submit to the Services, and to the findings and reports produced for you in the course of an engagement.
Subscriptions, Payments and Consumption
The Services may be offered on free, trial and paid plans. By subscribing to a paid plan, you agree to pay the applicable fees presented at the time of purchase.
Unless otherwise stated, subscription fees are billed in advance according to the selected billing period. Some features are metered and consume a balance associated with your organisation or seat. Where a feature is metered, the basis on which usage is counted is shown before you commit to it.
We may change plan features or pricing from time to time. Where required, reasonable notice will be provided before material changes take effect.
Any refund, credit, or cancellation terms applicable to your subscription will be presented at the time of purchase or in your applicable plan terms.
Cancellation
You may cancel your subscription in accordance with the cancellation options provided in the Services.
Unless otherwise stated, cancellation will take effect at the end of the current billing period, and you may continue to use paid features until that date.
Where an organisation is deleted, access is withdrawn promptly and its data is permanently deleted after a short grace period. Deletion is not reversible once that period has passed.
Data and Security
You are responsible for determining what information you provide to the Services and for ensuring that you have the necessary rights and permissions to provide it. You should not submit information that you are not authorized to use or disclose.
Additional information about how we collect, use, store, and protect personal information is described in our Privacy Policy.
Third-Party Services
The Services may integrate with third-party cloud, infrastructure, development, identity, monitoring, or security services.
Your use of third-party services is subject to the terms, policies, and privacy practices of those providers. We are not responsible for the availability, security, or performance of third-party services outside our control.
Availability and Service Changes
We may modify, suspend, or discontinue parts of the Services from time to time, including features, integrations, or functionality.
We do not guarantee that the Services will always be available, uninterrupted, error-free, or compatible with every system or environment.
Limitation of Liability
To the fullest extent permitted by applicable law, Noctara shall not be liable for indirect, incidental, special, consequential, or similar damages arising from or related to your use of the Services.
To the extent permitted by law, our total liability arising from your use of the Services shall not exceed the amount you paid to Noctara for the relevant service during the twelve months preceding the event giving rise to the claim.
Nothing in these terms excludes or limits liability that cannot be excluded or limited under applicable law.
Disclaimer of Warranties
The Services are provided on an "as is" and "as available" basis.
We do not guarantee that the Services will detect every vulnerability, threat, misconfiguration, or security issue, or that using the Services will prevent security incidents, unauthorized access, data loss, or other security events.
You remain responsible for maintaining appropriate security controls and for taking appropriate action based on your security environment and risk profile.
Changes to These Terms
We may update these Terms of Service from time to time.
Any updated version will be posted on this page with a revised effective date. Your continued use of the Services after the updated terms become effective constitutes acceptance of the revised terms, where permitted by applicable law.
Governing Law
These Terms of Service are governed by the laws of England and Wales, without regard to conflict-of-law principles.
Any disputes will be handled by the courts with appropriate jurisdiction over the matter, unless otherwise required by applicable law.
Contact
If you have questions about these Terms of Service, please contact us at:
info@noctara.tech