The short version:
- InfraStack tells you which new threats affect your stack. It reads and reports; it never changes your systems.
- It is an AI assistant: useful, not infallible. Check important findings before you act.
- Your content stays yours. We use it only to run InfraStack for you.
- Don’t use it against systems you aren’t allowed to test.
- You can delete your account and everything with it at any time.
1. Agreement
These terms are an agreement between InfraStack AI, Inc. (“InfraStack”, “we”, “us”) and the organization that installs or uses InfraStack (“you”). By adding InfraStack to Slack, signing in, or using the service, you accept these terms. If you accept them for an organization, you confirm that you are allowed to bind it. Our Privacy Policy explains how we handle information and is part of these terms.
2. Early access
InfraStack is new. We may admit workspaces gradually through a waitlist, change or remove features, and set usage limits while we grow. We will tell you in Slack or by email before a change that takes away something you rely on.
3. What InfraStack does
InfraStack tracks public security information (vulnerabilities, exploits, vendor incidents, attacks on AI coding agents) and checks it against the stack you describe or share, then reports in Slack which threats affect you, with evidence and a suggested next step.
InfraStack reads and reports. It does not log in to, scan, probe or change your systems, and it does not run anything on your servers. Access to code you connect, such as GitHub, is read-only.
4. AI and the limits of what it tells you
InfraStack uses AI models and public sources that can be incomplete, late or wrong. A finding that something affects you, or does not, is an assessment based on what you shared and what was public at the time. It is not a guarantee that your systems are secure, a penetration test, an audit, or legal or compliance advice.
Check important findings before acting on them, especially before changing production systems. You remain responsible for the security of your systems and for the decisions you make.
5. Your workspace and account
The person who installs InfraStack must be allowed to add apps to the workspace. Anyone who can mention InfraStack in a channel it is in can ask it questions and see its answers there, so add it only to channels where that is fine. Keep your Slack and sign-in access secure and tell us at [email protected] if you think your account is misused.
6. Your content
You keep all rights to what you share with InfraStack: messages, files, stack descriptions and the findings it produces for you. You give us permission to store and process that content only to provide and secure the service for you, as described in the Privacy Policy.
Share only content you are allowed to share. Do not upload secrets such as passwords, API keys or private keys; InfraStack does not need them, rejects common secret files such as .env and .tfvars, and is not a place to store them.
7. Acceptable use
Do not use InfraStack to:
- attack, scan or test systems you do not own or are not authorized to test;
- develop or distribute malware, or exploit vulnerabilities against others;
- break the law or anyone’s rights, including by sharing personal data you have no right to share;
- probe, overload or work around the limits and isolation of the service, or try to reach another customer’s data;
- copy, resell or build a competing product from the service or its output in bulk.
We may suspend a workspace that breaks these rules, and we will tell you why unless the law or safety prevents it.
8. Third-party services
InfraStack works inside Slack and can connect to services such as GitHub. Your use of those services is governed by their own terms, and we are not responsible for them.
9. Plans and payments
The Free plan is free and has the limits shown on our pricing page. Paid plans are billed in advance for each billing period at the price shown when you subscribe, plus applicable taxes, and renew until you cancel. Cancelling stops the next renewal; you keep paid features until the end of the period. Fees are not refundable except where the law requires. We give at least 30 days’ notice before a price change applies to your plan.
10. Our service and content
InfraStack, its software, and its public threat pages are ours and are protected by law. You may read, link to and quote our public threat pages with attribution. These terms do not give you any other right to our software or brand.
If you send us feedback or ideas, we may use them without obligation to you.
11. Ending your use
You can stop at any time: Delete account on the dashboard removes InfraStack from your workspace and deletes your data as described in the Privacy Policy. We may end or suspend the service for a workspace that breaks these terms, or end the service as a whole with reasonable notice. Sections that by their nature should continue (your content, disclaimers, limitation of liability, disputes) continue after these terms end.
12. Disclaimers
InfraStack is provided as is and as available, without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, accuracy and non-infringement. We do not promise that it will find every threat that affects you, that its findings are correct, or that it will be uninterrupted or free of errors.
13. Limitation of liability
To the fullest extent the law allows, we are not liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue or data, or for a security incident, arising from your use of InfraStack or from relying on its findings. Our total liability for any claim is limited to the greater of the amount you paid us in the twelve months before the claim and one hundred US dollars. Some jurisdictions do not allow these limits, so they may not fully apply to you.
14. Indemnity
You will defend and indemnify InfraStack against claims arising from content you share without the right to share it, or from your use of InfraStack in breach of these terms or the law.
15. Disputes
If you have a problem, write to [email protected] first and we will try to resolve it with you. These terms are governed by the laws of the State of California, and any dispute that cannot be resolved informally will be brought in the state or federal courts located in San Francisco, California.
16. Changes to these terms
When we change these terms we post the new version here with a new effective date. For material changes we tell the workspaces that use InfraStack before they take effect. Continuing to use InfraStack after that date means you accept the new terms.
17. Contact
Questions about these terms: [email protected]. InfraStack AI, Inc.