legal

Terms of Service

Last updated: 2026-07-17. Governing law: Israel.

Terms of Service / End-User License Agreement (EULA) & Subscription Terms

These Terms of Service ("Terms") govern your access to and use of the EyalSec / es2 software-as-a-service platform, the web dashboard, the agent API, and the es-python interpreter (collectively, the "Service"). They form a binding agreement between you ("Customer", "you") and EyalSec, of Yehoshua Stampfer 39, Petah Tikva, Israel ("EyalSec", "we", "us").

By creating an account, clicking "I agree", installing es-python, or otherwise using the Service, you accept these Terms. If you are entering into these Terms on behalf of an organization, you represent that you have authority to bind that organization.

1. Definitions

2. License grant

Subject to your compliance with these Terms and payment of applicable fees, EyalSec grants you a non-exclusive, non-transferable, non-sublicensable, revocable license, for the term of your Subscription, to:

(a) access and use the hosted Service; and (b) download, install, and run the es-python binary on machines you own or are authorized to monitor (Section 7), solely for your internal security-monitoring purposes.

This is a license to use, not a sale. EyalSec and its licensors retain all right, title, and interest in and to the Service and es-python, including all intellectual property rights. Open-source components within es-python are licensed under their own terms; see /legal/licenses. Nothing here restricts your rights under those open-source licenses. You may not (except as permitted by applicable mandatory law or an applicable open-source license): reverse engineer, decompile, or disassemble the Service; remove proprietary notices; resell or provide the Service to third parties as a service bureau; or use the Service to build a competing product.

3. Accounts and security

You must provide accurate registration information and keep your credentials confidential. You are responsible for activity under your account, including activity of users you authorize. Notify us promptly of any unauthorized use. We may offer two-factor authentication and API keys; you are responsible for safeguarding them.

4. Acceptable use

Your use of the Service is subject to the AUP (/legal/aup), which is part of these Terms. In summary, you must only run es-python on systems you own or are authorized to monitor, must not use the Service to surveil third parties or attack third-party systems without authorization, and must comply with export-control and sanctions laws. We may suspend or terminate access for AUP violations.

5. Warranty disclaimer

THE SERVICE AND es-python ARE PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, including any implied warranties of merchantability, fitness for a particular purpose, title, and non-infringement, to the maximum extent permitted by applicable law.

Without limiting the foregoing, we do NOT warrant that es-python or the Service will detect all vulnerabilities, all malicious inputs, or all instances of untrusted data reaching dangerous sinks; that they will identify, prevent, or remediate any security incident; or that they will secure any system. es-python is a monitoring and reporting aid; it is not a guarantee of security, a substitute for a secure development lifecycle, or a compliance certification. You remain solely responsible for the security of your systems and data. We do not warrant that the Service will be uninterrupted, timely, or error-free, or that defects will be corrected.

Some jurisdictions do not allow the exclusion of certain warranties; in those jurisdictions some of the above exclusions may not apply to you, and your statutory rights (Section 11) are unaffected.

6. Limitation of liability

To the maximum extent permitted by applicable law, EyalSec's total aggregate liability arising out of or related to these Terms or the Service, whether in contract, tort (including negligence), strict liability, or otherwise, shall not exceed the total fees you actually paid to EyalSec for the Service in the twelve (12) months immediately preceding the event giving rise to the claim.

To the maximum extent permitted by applicable law, EyalSec shall not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for loss of profits, revenue, goodwill, data, or business, even if advised of the possibility of such damages.

Carve-outs. The limitation and exclusion in this Section do not apply to, and nothing in these Terms excludes or limits liability for: (a) gross negligence; (b) willful misconduct; (c) fraud or fraudulent misrepresentation; (d) death or personal injury caused by negligence; or (e) any other liability that cannot be excluded or limited under applicable law (including non-waivable consumer rights; see Section 11).

7. Customer responsibilities

You acknowledge and agree that:

(a) Authorization. You must own, or be lawfully authorized to monitor, every machine on which you install or run es-python. You are responsible for obtaining all necessary consents and authorizations (including from device owners, employees, and other affected persons) before installing es-python.

(b) es-python captures process data. To do its job, es-python inspects runtime values in the monitored process. Event Payloads (where, repr, trace, location, origin) can therefore contain personal data and secrets (e.g., passwords, tokens, keys, or other sensitive values) drawn from your process memory. You are responsible for what you choose to monitor and for the lawful basis on which you do so. Where Event Payloads contain personal data, EyalSec acts as your data processor and the DPA applies; you are the controller.

(c) Configuration. You are responsible for configuring monitoring (including any taint, fuzzing, or foreign-code-detection flags), filters, and retention to your needs and to minimize the capture of unnecessary sensitive data.

(d) Lawful use. Your use of the Service must comply with all applicable laws, including data-protection, employment-monitoring, wiretap/interception, and export-control laws.

8. Customer Data and privacy

As between the parties, you own your Customer Data. You grant us a limited license to host, process, and transmit Customer Data solely to provide and support the Service. Our handling of personal data is described in the Privacy Policy (/legal/privacy) and, for data we process on your behalf, the DPA (/legal/dpa). Sub-processors are listed at /legal/subprocessors.

9. Fees, subscription, renewal, cancellation, and refunds

(a) Plans and pricing. The Service includes a trial (limited to 24 hours) and paid access. Paid access is priced on a metered basis (for example, by the number of monitored machines and reported events) as quoted to you; there are no fixed plan tiers. Current pricing is shown at /pricing.

(b) Fees. You agree to pay the fees for your plan as displayed at purchase. Unless stated otherwise, fees are exclusive of taxes (including Israeli VAT and any applicable foreign taxes), which you are responsible for.

(c) Renewal. Paid subscriptions renew automatically for successive periods equal to the then-current term unless cancelled before the end of the current period. We will give notice of material price changes before they take effect.

(d) Cancellation. You may cancel at any time through your account; cancellation takes effect at the end of the current billing period. You may also delete your account and all associated data via Settings (Section 12).

(e) Refunds. Except where required by mandatory law (including consumer rights; see Section 11), fees are non-refundable and we do not provide credits for partial periods. EU/UK/Israeli consumers' statutory withdrawal/cancellation rights are unaffected; see Section 11.

10. Term and termination

These Terms apply while you use the Service. Either party may terminate for material breach not cured within thirty (30) days of notice. We may suspend or terminate immediately for AUP or export/sanctions violations, non-payment, or to comply with law. On termination, your license ends and you must stop using the Service and es-python; we will delete or return Customer Data in accordance with the Privacy Policy and DPA. Sections that by their nature should survive (e.g., 5, 6, 8, 9(b), 11, 13, 14) survive termination.

11. Consumer rights

If you use the Service as a consumer (for purposes outside your trade, business, craft, or profession), you have statutory rights that these Terms do not exclude, restrict, or override, including:

Where any provision of these Terms (including the warranty disclaimer in Section 5 or the liability cap in Section 6) conflicts with a non-waivable consumer right, that statutory right prevails to the extent of the conflict, and the rest of these Terms remain in effect. Nothing in these Terms affects your right to a remedy for goods or digital content that do not conform to contract.

12. Self-serve data deletion

You may delete your account and all associated data from Settings. Deletion cascade-deletes your machines, Events, and filters. Deletion is irreversible; export any data you wish to keep first.

13. Changes to the Terms

We may modify these Terms. We will post the updated Terms and, for material changes, give reasonable advance notice (e.g., by email or in-product). Changes take effect on the stated effective date; continued use after that date constitutes acceptance. If you do not agree, you may cancel before the change takes effect. We will not apply material changes retroactively to your detriment without your consent where the law requires it.

14. Governing law, venue, and disputes

These Terms are governed by the laws of the State of Israel, without regard to conflict- of-laws rules, and excluding the UN Convention on Contracts for the International Sale of Goods (CISG). The competent courts of Tel Aviv-Jaffa, Israel have exclusive jurisdiction over disputes arising out of or relating to these Terms.

Consumer note. If you are a consumer, mandatory law in your country of residence may give you the right to bring proceedings in, and to the protection of the laws of, your local courts; this Section does not deprive you of that right.

15. General

These Terms (with the AUP, Privacy Policy, DPA, and any order) are the entire agreement between the parties regarding the Service. If any provision is unenforceable, the rest remains in effect. Our failure to enforce a provision is not a waiver. You may not assign these Terms without our consent; we may assign them to an affiliate or successor. Notices to us go to eyal@eyalsec.com.

EyalSec Pricing Docs Security Login Start free
TermsPrivacyDPAAcceptable UseLicensesRefund Python is a trademark of the Python Software Foundation. EyalSec is not affiliated with or endorsed by the PSF.