AEGISYST
AI Detection Engineering
Legal

Terms of Service

Last updated: September 3, 2026

1. Acceptance

By creating an account or using Aegisyst ("the Service") at aegisyst.com, you agree to these Terms of Service. If you do not agree, do not use the Service.

2. The Service

Aegisyst is an agentic detection engineering platform offered as an early-access beta by an individual operator. Features may change, be removed, or be added without notice.

2a. Plans & Billing

  • Free: 50 detection rules and 30 AI generations per month at zero cost. No card required. Quotas reset on the 1st of each month (UTC).
  • Team ($49 / user / month · USD via Stripe) or (₹4,000 / user / month · INR via Razorpay): raises rule and AI-generation quotas, unlocks live SIEM sync, multi-SIEM translation, AI alert tuning, threat-intel enrichment, and audit-log export.
  • Enterprise: custom-negotiated. Contact support@spectreai.in.
  • Payments are processed by Razorpay (INR) or Stripe (USD). Aegisyst never receives your card, UPI, or bank details.
  • You may downgrade to Free at any time; downgrades take effect immediately for the preview and at the end of the current billing period for production. No prorated refunds are offered during beta.
  • All prices exclude applicable taxes (GST for Indian customers, VAT for EU customers). Razorpay and Stripe collect taxes where required.

2b. SIEM Connectors

When you configure a Splunk HEC / Elastic / Microsoft Sentinel connector, you authorize Aegisyst to make outbound API calls to the endpoint you provided using the credentials you provided, solely to (a) verify connectivity via health checks, (b) send synthetic test events on your explicit request, and (c) push detection rules or events at your explicit request. You represent that you are authorized to connect the target SIEM. Aegisyst is not liable for any SIEM-side charges, rate-limit breaches, or storage costs incurred by connectors you configure. Connector credentials are stored server-side and are irreversibly redacted from every API response.

2c. Intelligence Library & community verification

The Aegisyst Intelligence Library (/feed) is a free, publicly readable feed of curated detection content. Curated rules authored by Aegisyst are provided under the MIT licence — you may copy, modify, and deploy them, with or without attribution. Rules pinned to the library by an administrator remain the property of their author. Detection content is provided “as is” for reference and must be validated in your own environment before production use; a rule appearing in the library is not a warranty of efficacy, completeness, or false-positive rate.

Clicking “Verify” records one verification per account per rule and is a community signal only — it is not an endorsement by Aegisyst and confers no guarantee. Manipulating verification counts (including via multiple accounts or automation) is a breach of section 4. Multi-SIEM translation, full rule logic, and GitHub sync for library rules require a paid Builder-tier (Team plan) subscription.

Each account receives one free full translation of a single library rule (the “Builder trial”), granted once per account for the lifetime of that account. The trial is non-transferable and carries no cash value; creating additional accounts to obtain further free translations is a breach of section 4 and may result in suspension.

2d. Deception Module (Enterprise)

The Deception Module generates decoy detection content — including honey-user rules for fake service accounts — and can re-emit your detection logic in randomized, functionally equivalent syntax. It is available only to accounts on the Enterprise tier.

You are solely responsible for how decoy artefacts are deployed in your environment. In particular you represent that (a) you are authorised to create the decoy accounts or objects referenced by generated rules, (b) decoy accounts will not be granted access to real data or systems, and (c) your use of deception techniques complies with applicable law and your internal policy. Aegisyst generates detection content only — it never creates, modifies or authenticates accounts in your directory. Randomized logic is intended to frustrate signature fingerprinting; it is not a security control on its own and must be validated in your environment before deployment, exactly like any other rule.

2e. Threat Feed & AI-drafted rules

Aegisyst polls public threat intelligence (CISA KEV, the SigmaHQ community repository, and optionally MalwareBazaar) and may automatically generate draft Sigma rules for threats your library does not yet cover. Such drafts are clearly labelled [HIGH PRIORITY] with status draft and are never deployed to any SIEM automatically — deployment always requires an explicit action by an authorised user of your account.

AI-drafted content is a starting point, not a validated detection. You are responsible for reviewing, testing and tuning any draft before deployment. Upstream content remains subject to its own licence — SigmaHQ rules are published under the Detection Rule Licence (DRL), and CISA catalog data is public-domain US Government information. Availability and accuracy of upstream feeds is outside our control, and a poll failure does not constitute a service outage.

3. Accounts

  • You are responsible for maintaining the confidentiality of your credentials.
  • You must be at least 18 years old and legally able to enter into contracts.
  • One account per person; account sharing is not permitted.
  • We may suspend or terminate accounts that violate these Terms.

3a. Sign-in methods

  • Email & password: You choose your own password. Aegisyst stores only a bcrypt hash — never the plaintext.
  • Google Sign-In: Delegated authentication via Google OAuth. By using this option you also agree to Google's Terms of Service. Google-authenticated accounts default to the Viewer role.
  • Guest mode ("Continue as Guest"): An ephemeral, read-only session on a shared demo dataset. No account is created. Any changes you attempt are limited to viewer-level operations and are not persisted to your identity. Anonymous access telemetry (see Privacy Policy §2) still applies.

3b. Admin access

Administrative privileges are restricted exclusively to the operator's designated email address. No other account — including Google Sign-In users — can obtain admin privileges through self-registration.

4. Acceptable use

You agree not to:

  • Use the Service to conduct or facilitate unauthorized security testing on systems you do not own or have explicit written permission to test.
  • Attempt to reverse-engineer, decompile, or extract source code from the Service.
  • Abuse the AI generation endpoints (excessive automated requests, prompt-injection attempts, or scraping).
  • Upload malicious content, malware, or copyrighted material you do not own.
  • Interfere with or disrupt Service integrity or performance.

5. Your content

You retain full ownership of the detection rules, notes, and configurations you create. You grant us a limited license to store, display, and process this content solely to operate the Service for you.

6. AI-generated content

Detection rules produced by Aegisyst's AI agents are provided "as-is". You are responsible for reviewing, testing, and approving any rule before deploying it to a production SIEM. AI output may contain errors, false positives, or false negatives.

7. Beta disclaimer

The Service is currently in beta. It is offered "AS IS" and "AS AVAILABLE" without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, or non-infringement. We do not warrant uninterrupted or error-free operation.

8. Limitation of liability

To the maximum extent permitted by law, in no event shall Aegisyst or its operator be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or goodwill, arising out of or in connection with your use of the Service. Aggregate liability for any claim shall not exceed the fees paid to us in the preceding 12 months (currently $0 during beta).

9. Indemnification

You agree to indemnify and hold harmless Aegisyst and its operator from any claims, damages, or costs arising from your violation of these Terms or your misuse of the Service.

10. Termination

You may delete your account at any time by emailing support@spectreai.in. We may suspend or terminate access for violations of these Terms.

11. Changes to the Terms

We may update these Terms from time to time. Material changes will be reflected by a new "Last updated" date. Continued use constitutes acceptance.

12. Governing law

These Terms are governed by the laws of India. Disputes shall be resolved in the courts of the operator's local jurisdiction.

13. Contact

Questions? Email support@spectreai.in.