Terms of Service

Last updated: July 6, 2026

The following Terms of Service ("Terms") govern your access to and use of the products, services, and applications provided by Zevlat Intelligence and all its brands, including middleBrick ("we", "our" or "Zevlat Intelligence"). By using our services, you accept these Terms.

1. Acceptance of Terms

By accessing or using any of our services, you confirm that:

• You have read and understood these Terms
• You agree to comply with these Terms and all applicable laws
• You have the legal capacity to enter into this agreement
• If acting on behalf of an organization, you have authority to bind that organization

2. Description of Services

middleBrick provides API security scanning and risk scoring services. Specific services, features, and functionalities may vary depending on your subscription plan and are subject to change to improve your experience.

2.1 Service Modifications

We reserve the right to:

• Modify, suspend, or discontinue any aspect of the service
• Update functionalities to improve user experience
• Perform scheduled or emergency maintenance

We will make reasonable efforts to notify you of significant changes that materially affect your use of the service.

3. Scanning Services

3.1 How Scanning Works

middleBrick offers two scanning surfaces, which behave differently:

• Hosted scanner. Our cloud scanner sends lightweight, read-only HTTP requests (GET and HEAD) to the endpoint you provide and analyzes the responses. For endpoints detected as AI or LLM services, it may additionally send adversarial text prompts as described in §3.3. It does not sit inline with your API traffic and does not intercept or modify your requests.
• middleBrick Agent. On paid plans, you may install the middleBrick Agent inside your own environment. The Agent is a dual-use security-testing tool: in addition to read-only scanning, and only when you deliberately enable it under layered authorization gates, it can perform active and offensive testing — including state-changing requests (POST/PUT/DELETE/PATCH), multi-step attack chains, race-condition probes, and reactive follow-up payloads. These modes can be treated by a target as an attack and can affect target systems. Use of the Agent is governed by the separate Agent Terms, which you must accept before enabling any offensive testing.

3.2 Your Responsibility

You represent, warrant, and covenant that, for every endpoint, host, domain, or IP address you direct any middleBrick scanning at, and before any scan, probe, or test:

• You own the target or have explicit written authorization from its owner and operator to test it, together with any authorization required from affected third parties (including cloud or hosting providers whose policies may require separate consent)
• You will not use middleBrick to scan or test any system you are not authorized to test
• You understand that scanning sends HTTP requests to the target, and that Agent offensive modes send state-changing requests that can affect the target
• You are solely responsible for the lawfulness of your use in every applicable jurisdiction. Unauthorized testing may violate criminal and civil law, including the U.S. Computer Fraud and Abuse Act (18 U.S.C. §1030), the UK Computer Misuse Act 1990, EU Directive 2013/40/EU and national implementations (including Germany's §§202a–202c StGB), and México's Código Penal Federal arts. 211 bis 1–7

3.3 AI/LLM Endpoint Probing

For endpoints detected as AI or LLM services, middleBrick may send adversarial text prompts (POST requests) to test for prompt injection, jailbreak, and data leakage vulnerabilities. These probes contain text only — no malware, exploit code, or destructive payloads. If you prefer to exclude AI probing, scan your staging environment instead of production.

3.4 Scan Data Ownership

All data generated from scanning your APIs — including endpoint URLs, scan results, findings, and risk scores — is your data. You retain full ownership. We process this data solely to provide the scanning service and do not use it for any other purpose.

3.5 Data Deletion

You may delete individual scan results at any time through the dashboard or API. Upon account cancellation, all your scan data (results, findings, audit logs) will be permanently deleted within 30 days.

4. User Accounts

4.1 Registration and Security

If you create an account with us, you are responsible for:

• Providing accurate and complete information
• Maintaining the security of your account and password
• Notifying us immediately of any unauthorized use
• All activities that occur under your account

4.2 Eligibility — Business Use Only

Our services are offered exclusively to businesses and professionals acting in a commercial or professional capacity. By using our services you represent that:

• You are not a consumer and are not using our services for personal, family, or household purposes
• You are acting on behalf of a business or in a professional capacity, and you have authority to bind that business to these Terms
• You are of legal age to enter into a binding contract in your jurisdiction

Our services are not offered to consumers. Any consumer-protection rights that apply notwithstanding this representation are addressed in §12.4.

5. Acceptable Use

When using our services, you agree NOT to:

• Violate any laws, regulations, or third-party rights
• Use the service for illegal or unauthorized activities
• Attempt to gain unauthorized access to our systems or other users' data
• Distribute malware, viruses, or malicious code
• Reverse engineer, decompile, or decrypt our software
• Interfere with the normal operation of the service
• Use the service for spam, phishing, or fraud
• Impersonate other persons or organizations
• Collect user information without their consent

6. Intellectual Property

6.1 Zevlat Intelligence Rights

All rights, titles, and interests in our services, including software, design, content, trademarks, and technology, are owned by Zevlat Intelligence. These Terms do not grant you any ownership rights over our services, only a limited right to use them according to these Terms.

6.2 Your Content

You retain all rights to content you create, upload, or provide through our services. You grant us a limited license to operate, improve, and provide our services.

7. Privacy and Data Protection

Your privacy is fundamental to us. The use of our services is also governed by our Privacy Policy, which describes how we collect, use, and protect your information.

Key points of our privacy commitment:

• We collect only the minimum necessary data
• We never sell or monetize your personal information
• We implement security measures to protect your data
• You own your content and data

8. Payment and Billing

8.1 Pricing and Charges

Some of our services may require payment. By subscribing to a paid service:

• You agree to pay all fees and charges according to current prices
• You provide accurate and complete payment information
• You authorize recurring charges according to your subscription plan
• Prices may change with prior notice

8.2 Refunds

We currently do not offer refunds for our products and services. All sales are final.

9. Warranties and Limitation of Liability

9.1 "As Is" Services

Our services are provided "as is" and "as available". While we strive to offer high-quality services, we do not guarantee that:

• The service will be error-free or uninterrupted
• Results will meet your specific expectations
• All errors will be corrected

9.2 Limitation of Liability

To the maximum extent permitted by law:

• We will not be liable for indirect, incidental, special, consequential, exemplary, or punitive damages
• We will not be liable for loss of data, profits, revenue, goodwill, or business opportunities, or for damage to any third-party system
• Our total aggregate liability arising out of or relating to these Terms and the services will not exceed the greater of (a) the fees you paid in the 12 months preceding the event giving rise to the claim, or (b) US $100

9.3 Mandatory-Liability Carve-Out

Nothing in these Terms excludes or limits liability for fraud or fraudulent misrepresentation, willful misconduct, gross negligence, death or personal injury caused by negligence, or any other liability that cannot be excluded or limited under applicable law. This §9.3, and the indemnification obligations in §10, control over §§9.1–9.2 to the extent required by law.

10. Indemnification

You will defend, indemnify, and hold harmless Zevlat Intelligence and its affiliates, members, officers, employees, and contractors from and against any and all third-party or governmental claims, and all resulting damages, settlements, fines, penalties, and reasonable attorneys' fees and costs, arising out of or relating to:

• Your use, misuse, or configuration of our services
• Any target you direct our services or the Agent against, including any claim by the owner or operator of that target
• Your scanning or testing of any system you were not authorized to test, or your breach of the authorization warranty in §3.2
• Your violation of these Terms, of third-party rights, or of any applicable law
• Any content you provide or publish, and any personal data you cause our services or the Agent to process

On any such claim, we will give you prompt notice and may tender the claim to you, whereupon you must assume and control the defense and settlement at your expense. You may not settle in a way that admits fault by, or imposes any non-monetary obligation on, us without our prior written consent. This §10 is not subject to the limitation of liability in §9.2.

11. Termination

11.1 Termination by You

You may stop using our services at any time. For paid services, please review specific cancellation terms.

11.2 Termination by Us

We may suspend or terminate your access if:

• You violate these Terms or our Acceptable Use Policy
• Your use puts our systems or other users at risk
• We are legally required to do so
• We discontinue the service (with reasonable prior notice)

11.3 Effects of Termination

Upon terminating your account:

• Your right to use the service ceases immediately
• We may delete your content according to our data retention policy
• Sections of these Terms that by their nature should survive will continue in effect

12. Dispute Resolution

12.1 Direct Contact

If you have a problem with our services, we encourage you to contact us first to resolve the matter informally.

12.2 Governing Law

These Terms are governed by and construed in accordance with the laws of the United Mexican States (México), without giving effect to any conflict-of-laws principles, and excluding the United Nations Convention on Contracts for the International Sale of Goods.

12.3 Venue and Arbitration

Except where §12.4 applies, you and Zevlat Intelligence submit to the exclusive jurisdiction of the competent courts of Nuevo León, México, for any dispute arising out of or relating to these Terms. Where permitted by applicable law, either party may elect to resolve a dispute by binding arbitration on an individual basis; class, collective, and representative actions are waived to the extent permitted by law.

12.4 Consumer Carve-Out

If, notwithstanding §4.2, you are found to be using our services as a consumer resident in the European Union, the United Kingdom, or another jurisdiction that grants non-waivable consumer protections, nothing in these Terms deprives you of the mandatory consumer protections of your country of habitual residence, and you may bring proceedings in the courts of that country. To the extent any provision of these Terms conflicts with such mandatory law, that law prevails and the remainder of these Terms remains in effect.

13. General Provisions

13.1 Severability

If any provision of these Terms is deemed invalid or unenforceable, the remaining provisions will continue in full force and effect.

13.2 Entire Agreement

These Terms, together with our Privacy Policy and any service-specific agreements, constitute the entire agreement between you and Zevlat Intelligence.

13.3 Waiver

No waiver of any provision of these Terms will be deemed a further or continuing waiver of such provision or any other provision.

13.4 Assignment

You may not assign these Terms without our prior written consent. We may assign these Terms at any time, including in the event of a merger or acquisition.

13.5 No Agency Relationship

These Terms do not create any partnership, joint venture, employment, or agency relationship between you and Zevlat Intelligence.

14. Changes to These Terms

We may update these Terms periodically to reflect:

• Changes to our services
• Legal or regulatory requirements
• Industry best practices

Significant changes will be communicated through:

• Notification on our website
• Email to your registered address (when applicable)
• In-service message

Your continued use of our services after changes take effect constitutes your acceptance of the new Terms.