› Terms of Service

Terms of Service

The terms for using the free skill suite, the free URL scanner, and the paid Patrol monitoring plans. Plain English, same as everything else we write.

Effective 2026-07-08 Governing law: Israel

Acceptance of these terms

By installing the Lictor skill suite, using the free scanner at /scan/, or creating a Guardian account for the paid Patrol plans, you agree to these terms. These terms are an agreement between you and Lictor AI, the business that operates Lictor, based in Israel and contactable at support@lictor-ai.com. If you're using Lictor on behalf of a company, you're confirming you have the authority to bind that company to them.


What Lictor is

Lictor is a security tool for apps built with AI assistance, made up of three parts:

  • The skill suite: a free, Apache-2.0-licensed Claude Code plugin (/lictor-security-check, /lictor-explain, /lictor-fix-it, /lictor-rotate) that audits your code locally.
  • The free URL scanner: a passive, read-only check of a public URL you paste at /scan/.
  • Patrol, the paid Business plans: continuous, permission-based monitoring of the domains and GitHub organizations you authorize, delivered through the Guardian dashboard at app.lictor-ai.com.

Who can use it

You must be at least 18, or the age of majority where you live, to create a Guardian account. There's no age requirement to run the free skill suite or scanner, though the same rule about only scanning what you own (below) still applies.


The free skill suite and scanner

The skill suite is licensed under Apache 2.0; the license terms in the repository govern your use of that code, not this document. It's provided as-is, with no uptime or support commitment, though we do read every issue filed on GitHub.

The free URL scanner is rate-limited to 8 scans per hour per IP address to keep it usable for everyone. It's provided free, with no signup, and we can change or discontinue it at any time.



How you're billed

Our order process is conducted by our online reseller Paddle.com, and by PayPal. Paddle.com is the Merchant of Record for orders placed through it — Paddle handles the payment, invoicing, any applicable sales tax or VAT, billing-related customer service, and returns for those orders, and “Paddle.com” may appear on your card or bank statement. Where an order is placed through PayPal, PayPal processes that payment. In both cases we never see or store your full card details; the payment provider handles that directly.


You must own what you scan

You may only register a domain or GitHub organization for Patrol monitoring if you own it or are otherwise authorized to have it tested. This is the same standard we hold ourselves to for our own research scanning. See our scanning policy for what that looks like from the other side. Registering an asset you don't control is a violation of these terms and may violate the law in your jurisdiction; we may suspend an account we reasonably believe is doing this.


Acceptable use

Don't use Lictor to attack, exploit, or gain unauthorized access to any system; to violate any law; to interfere with the service for other users; or to resell or white-label the paid product without a separate agreement with us. In particular, you may only monitor, scan, or test a domain, system, or account you own or have explicit authorization to assess — using Lictor against third-party systems without authorization is prohibited. We may suspend or terminate an account that violates this section, with notice where practical.


Disclaimers

Lictor is not a complete security audit or a guarantee of security. It's a set of checks tuned to the mistakes AI-generated code makes most often. A clean scan or report means we didn't find anything in the categories we check for, not that your app has no vulnerabilities. Security is a moving target; treat Lictor as one control among several, not your only one.

The service is provided "as is" and "as available," without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement, to the maximum extent the law allows.


Limitation of liability

To the maximum extent permitted by law, Lictor AI won't be liable for any indirect, incidental, consequential, or punitive damages, or for lost profits or data, arising from your use of the service. Our total liability for any claim relating to Lictor is limited to the amount you paid us in the 12 months before the claim arose, or $100 if you're on the free tier.


Intellectual property

The skill suite is open source under Apache 2.0; you may use, modify, and redistribute it under that license, including the patent grant it carries. The Lictor name, logo, the Guardian dashboard, and the Patrol scanning infrastructure are proprietary to Lictor AI and not covered by that license. Findings and reports generated about your own assets belong to you; the underlying detection rules remain ours (or, for the open-source checks, Apache-2.0-licensed).


Termination

You can stop using Lictor and cancel your Guardian account at any time. We may suspend or terminate an account for violating these terms, for non-payment, or if required by law. On termination, your monitored-asset data and findings are deleted from Patrol within a reasonable period, subject to the retention windows described in our Privacy Policy.


Governing law

These terms are governed by the laws of Israel, without regard to its conflict-of-laws principles. Any dispute arising from these terms or your use of Lictor will be resolved in the courts of Israel.


Changes to these terms

We may update these terms as the product changes. We'll update the effective date above and, for a material change, notify Guardian customers by email. Continued use after a change means you accept the updated terms.


Contact

Buyer and account support is provided by email — we aim to respond within one business day. For billing questions on an order placed through Paddle, you can also contact Paddle, the Merchant of Record, whose details appear on your receipt.