Terms of Service

Last updated: 10 November 2026

1. Service

AI Security Monitor provides security audits and monitoring of AI agents running on your servers. The specific scope, deliverables, and pricing for each engagement are defined in a signed Statement of Work (SOW) or the pricing tier selected at the time of payment.

2. Free scan

The free automated scan (aiscan.sh) is provided as-is with no warranty. It performs read-only checks and writes nothing to your server. Scan results are illustrative — a PASS on any check does not guarantee the absence of vulnerabilities. The free scan does not create a client relationship.

3. Paid audits

Fees are due before work begins, payable via Stripe payment link.
The audit is performed on the server(s) and agent(s) named in the SOW.
We require read-only SSH access or scan output. You are responsible for granting and revoking access.
The audit reports on the system as it was on the audit date. It is not a guarantee against future compromise or failure.
A re-test (included in the Full Audit tier) must be requested within 30 days of report delivery.

4. Monitoring retainer

Billed monthly in advance. Minimum term: 3 months.
You authorize us to stop the agent (kill switch, service stop, key revocation) when we reasonably believe it is deleting data, exposing secrets, running out of control, or has been compromised.
We will notify you immediately after acting and will not delete anything.
Either party may end the retainer with 30 days' written notice.

5. Your responsibilities

Maintain backups of your server and data.
Apply the fixes you choose to apply. We provide fix commands and acceptance tests; you decide whether to apply them.
Tell us about any change to the server or agent that affects scope.
Ensure you have the legal right to authorize access to the server.

6. What we will and won't do

Will: read configuration, process lists, listening ports, file permissions, and log metadata.

Won't: change any setting, install software, read application data or customer data, read the contents of secret files, run exploits, or test from outside the server — unless a separate written change order is signed.

If we see secrets or personal data by accident, we will not copy or keep them and will tell you.

7. Confidentiality

We keep your information confidential and use it only for this work. We may describe the work as an anonymous case study only with your written permission.

8. Limitation of liability

Our total liability under any engagement is limited to the fees paid for that engagement. We are not liable for indirect, incidental, or consequential damages. You remain responsible for decisions about applying fixes and managing your server.

9. Governing law

These terms are governed by the laws of New Zealand. Any disputes will be resolved in the courts of New Zealand.

10. Changes

We may update these terms. Changes take effect when posted to this page. Continued use of the service after changes constitutes acceptance.

11. Contact

Corey McIVOR
[email protected]
AI Security Monitor