Terms of Service

1. Who may use LyraShield

You must be at least 18 years old and able to enter a binding agreement. If you use LyraShield for an organization you confirm that you have authority to bind it and “you” includes that organization. LyraShield is a tool for professional and business use.

2. The service

LyraShield AI helps you check software you own or are authorized to test and keeps a record of what was tested and what evidence supports each result. The Cloud service includes a hosted dashboard and scans and findings and retests and reports and shareable scorecards and integrations (MCP and CLI and GitHub). Local mode is licensed separately. LyraShield is in open beta. Features can change and availability is not guaranteed.

3. Authorization to test

You may submit only targets you own or have explicit permission to test. You are responsible for that permission and for any scope limits you set. For targets that need it we may ask you to verify control of the domain before scanning. We run only the checks and scope you configure. Do not use LyraShield to disrupt or harass anyone or to evade access controls or to probe private systems or to collect another person’s data.

4. What the free tools do

The public Lite Check makes bounded GET requests for a public page and a small number of same-origin assets already linked by that page. It does not log in or exploit or fuzz or brute-force or enumerate a database or actively test row-level security. The browser-local tools run in your browser.

5. Acceptable use

You will not misuse the service or attempt to interfere with it or reverse engineer it or use it to build a competing product or resell access without our written agreement or share credentials or API keys or exceed rate limits. You will keep API keys and OAuth grants secure and you are responsible for activity under them.

6. Coding agents and MCP access

Hosted actions that change anything run only inside a grant that you confirm in your browser. You are responsible for what a connected agent is allowed to do inside that grant. You can revoke a grant or an API key at any time in the dashboard. We fail closed: if a grant or approval cannot be checked the action does not run.

7. Results and limits

Results are limited to the scope you authorized and the checks that ran. A finding is a detected candidate until retest evidence shows otherwise and a clean result does not prove that nothing is wrong. LyraShield is not a penetration test and not a certification and not a warranty or guarantee that your software has no vulnerabilities. You decide what to fix and when to ship.

8. Fix proposals

Fix proposals are suggestions. A fix pull request opens only after a human approves it and it carries a server-generated patch. You review and approve changes and you are responsible for any change you approve or merge.

9. Fees and trial

New Cloud accounts start a 7-day limited trial with the allowance shown at sign-up. No card is required. Paid plans and minute packs are described on the pricing page and governed by the Terms of Sale which covers billing and renewal and cancellation and refunds.

10. Your data

You keep ownership of your content and targets and findings. You give us the right to process them to provide the service. How we process personal data is described on the Privacy page. Shared scorecards are privacy-bounded and omit repository coordinates and raw secrets. You can request deletion of your account or workspace through the dashboard or at support@lyrashieldai.com.

11. Intellectual property and feedback

We own the service and its software and content apart from what you submit. We grant you a limited non-exclusive non-transferable right to use the service under these terms. Open-source components are licensed under their own licenses. If you send feedback we may use it without obligation to you.

12. Third-party services

The service relies on providers such as cloud hosting and payment processors (Polar and Razorpay) and bot verification (Cloudflare Turnstile) and analytics (PostHog) and model providers (including Microsoft Azure OpenAI for the support assistant) and GitHub when you connect it. Their own terms apply to their services and we are not responsible for them.

13. Disclaimers and limitation of liability

The service is provided as is and as available during open beta. To the extent the law allows we disclaim all implied warranties including merchantability and fitness for a particular purpose and non-infringement. To the extent the law allows we are not liable for indirect or incidental or special or consequential damages or for lost profits or data or goodwill. Our total liability for any claim relating to the service is limited to the greater of the amount you paid us in the 12 months before the claim and USD 100. Nothing in these terms limits liability that cannot be limited by law including for fraud or willful misconduct.

14. Indemnity

You will defend and indemnify us against claims and losses arising from your use of the service in breach of these terms including a claim by a third party that you scanned or tested a target you were not authorized to test.

15. Governing law and disputes

These terms are governed by the laws of India. Courts at Bhubaneswar, Odisha, India have exclusive jurisdiction except where mandatory consumer law gives you rights in your home country. Before filing a claim please contact us at support@lyrashieldai.com so we can try to resolve it.

16. Suspension and termination

You may stop using LyraShield and close your account at any time. We may suspend or end access if you breach these terms or abuse the service against third parties or fail to pay or if the law requires it. Clauses that by their nature should survive will survive termination.

17. Changes

We may update these terms. We will change the last-reviewed date and for material changes make a reasonable effort to notify account holders before the change applies. Continued use after the effective date is acceptance.

18. Reporting abuse and security issues

If you believe LyraShield was used against your service without permission keep the target URL and approximate time and relevant request logs and email the abuse contact on the security reporting page. Report suspected vulnerabilities through the security reporting channel. Do not include credentials or customer data.

19. General

These terms and the Terms of Sale and the Privacy page are the whole agreement. If a clause is unenforceable the rest stays in force. You may not transfer your rights without our consent. Our failure to enforce a clause is not a waiver. Contact: support@lyrashieldai.com.

Report suspected abuse

If you believe this tool was used against your service without permission, preserve the target URL, approximate time and relevant request logs. Email the monitored abuse contact