Terms of Service

By creating an account, starting a trial, or subscribing to a paid plan, you agree to these Terms of Service on behalf of yourself and the organization you represent. If you don't agree, don't use the Service.

The Service is a threat intelligence platform: a ranked threat feed personalized to your organization's vendor stack, sector, and target region; MITRE ATT&CK mapping; 1-click deployment of detection/mitigation content to your own connected security vendors; and related reporting and integrations.

Feature availability differs by plan (Professional, Team, Enterprise) — see our pricing page for the current feature list per tier, including which features are marked Beta (real, but not yet verified against every third-party vendor) versus fully available.

Accounts today are provisioned directly by us, not via public self-serve signup — you request access, we set up your organization, and you sign in via a one-time email link (no password is ever stored). Your organization's owner controls who else on your team has access and at what role.

You're responsible for keeping your account's sign-in email secure and for all activity under your organization's account, including anything a teammate you've invited does with it.

Paid plans (Professional, Team) are billed in advance, monthly or annually, through Stripe. Enterprise is sold on a custom, negotiated contract, not self-serve.

• ◈
  Free trial: A new organization's first subscription includes a 7-day free trial. You are not charged until the trial ends, and you can cancel any time before then with no charge. This trial is one-time per organization — canceling and resubscribing later does not grant a second trial.
• ◈
  Seats: Professional includes 1 seat. Team includes 3 seats, as a flat bundle, not billed per seat. Organizations needing more seats should contact us about Enterprise rather than expecting a self-serve seat picker.
• ◈
  Price changes: We'll give you reasonable advance notice by email before any price increase takes effect on your next billing cycle.
• ◈
  Taxes: Prices are exclusive of applicable sales tax, which Stripe Tax calculates and adds at checkout based on your billing location.

You can cancel at any time from your account's Billing settings (Stripe's own secure billing portal). Cancellation takes effect at the end of your current billing period — you keep access until then, and we don't prorate a refund for the unused remainder of a period you've already paid for.

If you believe you were charged in error, contact us at info@decryptiondigest.com and we'll look into it — refunds outside of that are handled case by case, not guaranteed.

You agree not to:

• Use the Service to attack, scan, or test systems you don't have authorization to test.
• Share your organization's account access with anyone outside your organization, or resell access to the Service.
• Attempt to circumvent plan limits (seats, API rate limits, connector counts) other than by upgrading.
• Use the Service in a way that disrupts its operation for other customers.

Connecting a security vendor (EDR/SIEM/WAF/SOAR/ticketing) requires you to give us API credentials for that vendor. We encrypt these at rest (AES-256-GCM) and use them only to perform the actions you've configured — running a detection query, deploying a rule, or triggering a playbook — never for any other purpose. You can revoke a connection at any time from the Integrations tab.

Your organization's data (stack profile, assignments, mute rules, connected vendors) is isolated from every other organization's data at the database level (row-level security), not just in application logic.

Some Service features are marked Betaon our pricing page — real, deployed functionality that has not yet been independently verified against every real third-party vendor instance it's designed to integrate with. We build these honestly, following each vendor's own documented API, but we can't guarantee a beta feature will work correctly against your specific vendor configuration on day one. Report anything that doesn't work as described and we'll fix it.

The Service is provided "as is." Our threat rankings, severity scoring, and vendor-match recommendations are real signals (CISA KEV, EPSS, CVSS, and our own editorial analysis) intended to help you prioritize — they are not a guarantee that any specific threat does or doesn't affect your environment, and they are not a substitute for your own security judgment. We disclaim all warranties, express or implied, to the fullest extent the law allows.

To the fullest extent permitted by law, Decryption Digest will not be liable for any indirect, incidental, special, or consequential damages arising from your use of the Service, including damages from a security incident that a threat in our feed did or didn't warn you about, or from an action taken against your own connected vendor. Our total liability for any claim is limited to the amount you paid us in the 12 months before the claim arose.

You can stop using the Service and cancel your subscription at any time. We may suspend or terminate an account that violates the Acceptable Use section above, or that has a payment that fails and stays unresolved for an extended period after we've tried to reach you about it.

We may update these terms as the Service changes. We'll update the date at the top of this page, and for material changes, email the account owner at each organization on a paid plan.

[Placeholder — to be filled in with counsel:] these terms are governed by the laws of [jurisdiction], without regard to its conflict-of-laws principles.

Questions about these terms? Reach us at info@decryptiondigest.com.