← Back to OriSignalTerms of Service
Last updated: September 30, 2026
These Terms of Service ("Terms") govern your access to and use of the OriSignal threat intelligence and attack surface platform, including our website, dashboard, and API (together, the "Service"). OriSignal is a product of, and operated by, ORI Technology ("ORI Technology," "we," "us"). By creating an account or otherwise using the Service, you agree to these Terms. If you are using the Service on behalf of an organization, you are agreeing on that organization's behalf and confirming you have authority to do so.
1. What OriSignal does
OriSignal provides threat intelligence lookups, external attack surface scanning, and AI-generated plain-English risk summaries for domains, IP addresses, and other indicators you submit. Passive checks (DNS, TLS, HTTP headers, email security records, subdomain discovery) run against publicly available information. Active checks (limited port scanning and service fingerprinting) only run against domains you have verified ownership of through the Service.
The Service is operated from, and intended for use in, the United States. We do not direct the Service toward, or knowingly offer it to, individuals located in the European Union, the United Kingdom, or other jurisdictions with data protection laws requiring a local representative or specific regulatory registration.
2. Accounts
You need an account to use the Service. You're responsible for keeping your credentials and any API keys you generate confidential, and for all activity that happens under your account or API keys. Tell us right away if you suspect unauthorized access. You must provide accurate information when creating an account and keep it up to date.
3. Authorized use only — this is the important one
The Service can be used to scan and probe network-facing systems. You may only run a scan, port check, or active probe against a domain or system that you own, or that you have the express authorization of the owner to test. This applies even to "verified" domains in OriSignal — domain verification proves control of a domain for the purposes of this Service, it does not itself grant permission to scan any infrastructure attached to it that a third party operates.
You agree not to use the Service to scan, probe, or attempt to access any system without authorization; to violate the Computer Fraud and Abuse Act or equivalent laws in your jurisdiction; to submit indicators belonging to another person for the purpose of harassment, doxxing, or stalking; to resell or provide the Service to third parties without our written consent; to attempt to reverse-engineer, overload, or circumvent rate limits on the Service; or to use the Service to build a directly competing product. We may suspend or terminate accounts that violate this section immediately and without refund.
4. Plans, billing, and cancellation
Free, Pro, and Team plans and their features are described on our pricing page. Paid plans are billed in advance on a recurring basis through our payment processor, Stripe, and renew automatically until canceled. You can cancel anytime from your billing settings; cancellation takes effect at the end of the current billing period, and you keep access until then. We don't store your card details — Stripe handles payment data directly. Prices may change with notice; continued use after a price change takes effect constitutes acceptance of the new price.
5. API keys and rate limits
API keys grant programmatic access with the same permissions as a member of your organization. Keep them secret — anyone with a key can act as your organization through the API. Usage is subject to rate limits based on your plan. You can revoke a key at any time from your dashboard; revocation takes effect immediately.
6. Your data and content
You retain ownership of the indicators, domains, and other data you submit to the Service ("Customer Data"). You grant us a license to use Customer Data solely to operate, maintain, and improve the Service for you — including sending indicators you submit to third-party threat intelligence sources as described in our
Privacy Policy. We don't sell Customer Data, and we don't use it to train third-party AI models beyond what's needed to generate your own risk summaries.
7. Our intellectual property
The Service itself — its software, design, risk-scoring methodology, and branding — is owned by ORI Technology and protected by intellectual property law. These Terms don't grant you any rights to our intellectual property beyond the limited right to use the Service as intended.
8. Third-party data and accuracy
Threat intelligence results, CVE matches, and AI-generated summaries draw on third-party sources and automated analysis. We work to keep this accurate and current, but we don't guarantee completeness or accuracy, and a clean scan result is not a guarantee that a system is free of vulnerabilities. OriSignal is one input into your security decisions, not a substitute for professional judgment or a full security assessment.
9. Disclaimer of warranties
The Service is provided "as is" and "as available." To the extent permitted by law, we disclaim all warranties, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We don't warrant that the Service will be uninterrupted, error-free, or that it will detect every security issue affecting your systems.
10. Limitation of liability
To the extent permitted by law, ORI Technology won't be liable for any indirect, incidental, special, consequential, or punitive damages, or for lost profits or data, arising from your use of the Service. Our total liability for any claim arising from these Terms or the Service is limited to the amount you paid us in the twelve months before the claim arose.
11. Indemnification
You agree to indemnify and hold ORI Technology harmless from any claims, damages, or expenses (including reasonable legal fees) arising from your violation of these Terms, including unauthorized use of the Service against systems you don't own or have permission to test.
12. Termination
You can stop using the Service and close your account at any time. We may suspend or terminate your access if you violate these Terms, if required by law, or with reasonable notice for any other reason. Sections that by their nature should survive termination (ownership, disclaimers, limitation of liability, indemnification) will survive.
13. Changes to these Terms
We may update these Terms from time to time. If we make material changes, we'll notify you by email or through the Service before they take effect. Continued use of the Service after changes take effect means you accept the updated Terms.
14. Governing law
These Terms are governed by the laws of the State of New York, USA, without regard to conflict-of-law principles. Any disputes will be resolved in the state or federal courts located in New York.