Terms of Service

"Services" means the Lyrie AI cybersecurity platform and all related products operated by OTT Cybersecurity LLC ("Company", "Lyrie", "we", "us"), including but not limited to: the web dashboard, Lyrie WAF, LyrieHEX vulnerability scanner, LyrieAI OMEGA AI penetration tester, Lyrie Remedy auto-fix agent, Lyrie AI Security & Privacy (desktop and mobile endpoint protection), Captcha service, Data Breach Monitoring, APIs, SDKs, browser extension, WordPress plugin, and documentation.

"Account" means your registered Lyrie AI account, including all associated credentials, configuration, data, and subscriptions.

"Content" means any data, files, configurations, scan results, reports, or other materials you create, upload, or generate through the Services.

"Endpoint Agent" means the Lyrie AI Security & Privacy application for desktop (Windows, macOS, Linux) and mobile (Android, iOS) devices.

"Plan" means the subscription tier you have selected: Free, Shield ($59/mo), Guardian ($149/mo), Sentinel ($399/mo), or Fortress ($1,499/mo), each with defined feature limits and capabilities.

By accessing or using the Services, you agree to be bound by these Terms of Service, our Privacy Policy, Acceptable Use Policy, and all other policies referenced herein. If you do not agree, do not use the Services.

If you are accepting these Terms on behalf of an organization, you represent that you have the authority to bind that organization. The term "you" refers to both the individual and the organization.

You must provide accurate, complete information when creating an Account. You are responsible for maintaining the confidentiality of your credentials and for all activities under your Account.

You must be at least 18 years old or have legal authority to enter into this agreement on behalf of your organization. One person or entity may not maintain multiple free accounts.

You must promptly notify us at [email protected] if you believe your Account has been compromised.

Paid plans (Shield, Guardian, Sentinel, Fortress) are billed monthly or annually in advance. WAF and Lyrie AI Security & Privacy protection are expiry-based — your protection period starts on payment and runs for the duration specified by your plan.

Prices are in USD. We reserve the right to change pricing with 30 days' notice. Existing subscriptions are honored at their current rate through the end of the billing period.

14-day free trials are available on paid plans. No payment method is required to start. You will not be charged until the trial ends and you explicitly subscribe. Cancel anytime during the trial at no cost.

All payments are processed by Stripe, Inc. By subscribing, you also agree to Stripe's terms of service. We do not store full credit card numbers on our servers.

For detailed refund and cancellation terms, see our Refund & Cancellation Policy.

Your use of the Services is subject to our Acceptable Use Policy, which is incorporated by reference into these Terms.

In summary, you agree not to: use the Services to attack, scan, or probe systems you do not own or have authorization to test; reverse-engineer the Services; share credentials or resell access without authorization; use the Services for illegal purposes; or attempt to circumvent rate limits, billing, or security controls.

Violation of the Acceptable Use Policy may result in immediate account suspension or termination.

The Endpoint Agent is licensed, not sold. Your license is tied to your Account and subject to device limits and expiry periods defined by your Plan.

The application requires system-level permissions to provide endpoint protection. By installing it, you authorize it to monitor processes, file system activity, network connections, and USB devices on the installed machine.

Tamper protection features are designed to prevent malware from disabling the agent. Legitimate uninstallation requires account verification via email OTP.

The Endpoint Agent communicates with Lyrie servers for license validation, threat intelligence updates, and (if enabled) telemetry. Cloud sync of scan results is opt-in.

LyrieHEX and LyrieAI OMEGA scanners must only be used against domains and systems you own or have explicit written authorization to scan. Unauthorized scanning of third-party systems is a violation of these Terms and may violate applicable laws.

Domains must be verified within the Lyrie platform (DNS TXT record or CNAME) before scanning is permitted.

Lyrie Remedy (Auto-Fix) agents execute code changes on your systems. You are responsible for reviewing and approving fixes. We are not liable for any issues arising from automated remediation. Rollback capabilities are provided for all Remedy actions.

Lyrie APIs and SDKs (PHP SDK, JavaScript client, WordPress plugin, browser extension) are licensed under these Terms. You may use them solely to integrate with the Services.

API access is subject to rate limits defined by your Plan tier. Exceeding rate limits results in HTTP 429 responses. Persistent abuse may result in API key revocation.

API keys are confidential. You must not expose them in client-side code, public repositories, or logs. You are responsible for all activity associated with your API keys.

We may deprecate API versions with at least 6 months' notice. Deprecated endpoints will continue to function during the notice period.

The Lyrie Captcha service is provided free and unlimited for verified domains. By integrating Captcha, you agree that:

• The Captcha service may collect IP addresses and behavioral signals from your end users for bot detection purposes.
• This data is processed ephemerally and not stored beyond the verification session.
• You must include a link to our Privacy Policy on pages where Captcha is deployed, informing end users about data processing.

We may offer features labeled as "Beta", "Preview", or "Experimental". These features:

• Are provided "as is" without any warranty or SLA coverage.
• May be modified, suspended, or discontinued at any time without notice.
• May not have the same security, reliability, or performance standards as generally available features.
• Should not be used for production workloads unless explicitly stated otherwise.

Feedback provided about beta features may be used by Lyrie to improve the Services without obligation to you.

All Lyrie AI software, documentation, branding, and content are the intellectual property of OTT Cybersecurity LLC. Your subscription grants a limited, non-exclusive, non-transferable license to use the Services during your subscription period.

You retain ownership of your data, configurations, scan results, and any Content you create through the platform.

We do not claim ownership of your Content. We do not use your Content to train AI or machine learning models unless you explicitly opt in to such a program.

The Services integrate with third-party services including but not limited to:

• Stripe for payment processing
• Google, GitHub, Apple for OAuth authentication
• National Vulnerability Database (NVD) for CVE data

Your use of third-party services is subject to their respective terms and privacy policies. We are not responsible for third-party service outages, changes, or data practices.

You agree to indemnify, defend, and hold harmless OTT Cybersecurity LLC, its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable attorneys' fees) arising from:

• Your use of the Services in violation of these Terms or the Acceptable Use Policy.
• Unauthorized scanning of third-party systems using Lyrie tools.
• Your Content or data processed through the Services.
• Your violation of any applicable law or third-party rights.

The Services are provided "as is" without warranty of any kind, express or implied, including but not limited to implied warranties of merchantability, fitness for a particular purpose, and non-infringement.

We do not guarantee that the WAF will block all attacks, that scans will find all vulnerabilities, or that Lyrie AI Security & Privacy will detect all threats.

To the maximum extent permitted by law, OTT Cybersecurity LLC shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of the Services.

Our total aggregate liability shall not exceed the greater of (a) the amount you paid for the Services in the 12 months preceding the claim, or (b) $100 USD.

You may cancel your subscription at any time from your dashboard. Cancellation takes effect at the end of your current billing period.

We may suspend or terminate your Account for violation of these Terms, the Acceptable Use Policy, non-payment, or if required by law. We will make reasonable efforts to provide notice before termination, except in cases of egregious violations.

Upon termination, your access to the Services ceases. Your data will be retained for 30 days (so you can export it), then permanently deleted per our Privacy Policy.

Paid plans are covered by our Service Level Agreement, which defines uptime commitments, credit schedules, and incident communication. The SLA is incorporated by reference into these Terms.

The Services are subject to United States export control laws and regulations. You may not use, export, or re-export the Services except in compliance with U.S. export laws, including the Export Administration Regulations (EAR) and sanctions programs administered by the Office of Foreign Assets Control (OFAC).

You represent that you are not located in, or a national or resident of, any country subject to U.S. trade sanctions, and that you are not on any U.S. government restricted party list.

Neither party shall be liable for failure or delay in performing obligations under these Terms due to circumstances beyond its reasonable control, including but not limited to: natural disasters, war, terrorism, riots, government actions, pandemic, epidemics, power failures, internet outages, or cyber-attacks on third-party infrastructure.

The affected party must promptly notify the other party and use commercially reasonable efforts to resume performance.

These Terms are governed by the laws of the State of Delaware, United States, without regard to conflict of law principles.

Binding arbitration: Any disputes arising from these Terms shall be resolved through binding arbitration administered under the rules of the American Arbitration Association (AAA), except where prohibited by applicable law. The arbitration shall be conducted in English and take place in Delaware or via video conference.

Class action waiver: You agree that any dispute resolution proceedings will be conducted only on an individual basis and not in a class, consolidated, or representative action. If this waiver is found unenforceable, the entirety of this arbitration provision shall be null and void.

Exceptions: Either party may seek injunctive relief in any court of competent jurisdiction for claims involving intellectual property infringement or unauthorized access to the Services.

These Terms, together with the Privacy Policy, Acceptable Use Policy, SLA, DPA, and any applicable order form, constitute the entire agreement between you and OTT Cybersecurity LLC regarding the Services.

If any provision of these Terms is found unenforceable, the remaining provisions continue in full force and effect. The unenforceable provision will be modified to the minimum extent necessary to make it enforceable.

Our failure to enforce any right or provision of these Terms shall not constitute a waiver of that right or provision.

We may update these Terms from time to time. Material changes will be communicated via email to registered users and posted on this page with an updated effective date.

Continued use of the Services after changes constitutes acceptance of the updated Terms. If you do not agree to updated Terms, you must stop using the Services and cancel your subscription.

For enterprise customers with custom agreements, changes to these general Terms do not override the terms of your custom agreement.

For questions about these Terms:

OTT Cybersecurity LLC
Email: [email protected]
Website: lyrie.ai