Terms of Service

These Terms govern your use of Mayhem Monkies (the "Service"), an automated QA and security bug-hunting service operated by the operator of Mayhem Monkies ("we", "us"). By creating an account, redeeming a code, or submitting a hunt, you agree to these Terms, our Acceptable Use Policy, and our Privacy Policy. If you do not agree, do not use the Service.

Mayhem Monkies runs AI agents that probe a target you provide (a web app, a code repository, and/or read-only cloud credentials) and report findings. Findings are informational and best-effort. They are not exhaustive, may include false positives and false negatives, and are not a certification, warranty, or guarantee that a system is secure or compliant. You are responsible for validating and acting on any finding.

You must be at least 18 and provide accurate information. You are responsible for activity under your account and for keeping your sign-in methods (magic link, authenticator, passkeys, recovery codes) secure. Notify us promptly of any unauthorized use.

You may only submit a target you own or are explicitly authorized to test. Before each hunt you affirm this. For authenticated probing you must use a dedicated test account, not a production or personal one. For active/destructive ("exploit-grade") testing you must separately authorize it, hold current backups, and accept the risk of service disruption. You are solely responsible for having the necessary authorization and for any consequences of testing. See the Acceptable Use Policy.

When you connect a repository token, read-only cloud credentials, or supply session cookies/headers for authed testing, you grant us a limited authorization to use them solely to perform the hunt you requested. Credentials are stored encrypted, used inside a sandbox, and can be revoked by you at any time; hunt-supplied credentials are purged when the hunt completes. You represent that you are entitled to provide them.

As between you and us, you retain all rights to your code, targets, and data. We do not claim ownership of them and do not use your private code to train models. Findings we generate for you are provided for your use. We retain rights to the Service itself and to aggregated, de-identified operational data.

Paid plans (Hunter, Hunter Pro), Priority Passes, and add-ons are billed through our payment processor. Subscriptions renew automatically each period until cancelled; you can cancel anytime and retain access through the paid period. Prices, taxes, and included allotments are shown at checkout. Except where required by law or expressly stated, fees are non-refundable once the corresponding service has been rendered. Promotional codes are subject to their stated terms.

THE SERVICE AND ALL FINDINGS ARE PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. Automated security testing is inherently incomplete and can, especially in active-testing mode, disrupt a target. We do not warrant that findings are complete or accurate or that the Service will be uninterrupted or error-free.

To the maximum extent permitted by law, we will not be liable for any indirect, incidental, special, consequential, or punitive damages, or for lost profits, data, or goodwill. Our total liability arising out of or relating to the Service will not exceed the amount you paid us in the three (3) months before the event giving rise to the claim.

You will indemnify and hold us harmless from any claim, loss, or expense arising from your use of the Service, your submitted targets or credentials, your violation of these Terms or the Acceptable Use Policy, or testing you were not authorized to perform.

You may stop using the Service at any time. We may suspend or terminate access if you violate these Terms or the Acceptable Use Policy, or where necessary to protect the Service, other users, or third parties.

We may update these Terms. Material changes will be reflected by the "last updated" date, and continued use after changes take effect constitutes acceptance.

These Terms are governed by the laws applicable where the operator is established, without regard to conflict-of-laws rules. Questions: [email protected].