Terms of Service
Effective 17 August 2026 Last updated 17 August 2026
1. About DefenceCore and these Terms
DefenceCore Ltd. ("DefenceCore," "we," "us," or "our") provides a cloud-based security-monitoring service for supported applications and infrastructure, including tools that connect to Supabase projects, collect and analyze supported log sources, and present security events, detections, and incidents (the "Service").
These Terms of Service (the "Terms") govern access to and use of the Service, related websites, application programming interfaces, dashboards, emails, and support. An order form, checkout page, plan description, data processing addendum, or other written agreement accepted by DefenceCore may supplement these Terms. If there is a conflict, the document with the higher order of precedence stated in the applicable order form or written agreement controls.
2. Eligibility and organizational use
You must be at least 18 years old and legally capable of entering into a binding agreement. The Service is intended primarily for business and professional use. If you use the Service on behalf of a company or other entity, "you" and "Customer" refer to that entity, and you confirm that you are authorized to accept these Terms for it.
You may not use the Service if applicable law prohibits you from receiving it, or if DefenceCore previously suspended or terminated your access for a material breach unless DefenceCore agrees otherwise in writing.
3. Accounts and security
You must provide accurate account information and keep it current. Authentication may be provided through Firebase Authentication and supported identity providers, such as Google. You are responsible for safeguarding your account, devices, sessions, administrator access, and any credentials used to connect third-party services.
You must promptly notify [email protected] if you suspect unauthorized access, credential compromise, or misuse. You are responsible for activity under your account to the extent permitted by law, including activity by your personnel and contractors. DefenceCore may require reasonable identity or authority verification before acting on sensitive account requests.
4. Subscriptions, plans, trials, billing, and taxes
The current DefenceCore paid subscription is priced at US$29 per month, plus any applicable taxes, duties, or similar governmental charges. The subscription includes the usage limits, log-retention period, integrations, and features stated in the applicable plan description.
DefenceCore may introduce additional free or paid plans, tiers, billing periods, packages, and add-ons in the future. It may also rename, combine, replace, modify, restrict, or discontinue plans or plan components, including features, integrations, limits, allowances, log retention, support, trials, eligibility, and availability. A new plan does not entitle an existing subscriber to that plan or its features unless DefenceCore expressly states otherwise.
Checkout, payment processing, tax handling, recurring charges, and subscription administration are handled through Lemon Squeezy. Lemon Squeezy’s checkout, payment, and applicable buyer terms may also apply. DefenceCore does not receive full payment-card numbers. By subscribing, you authorize Lemon Squeezy to charge the payment method associated with your subscription US$29, plus applicable taxes, for each monthly renewal until the subscription is cancelled.
Subscriptions renew automatically for successive monthly periods until cancelled. You may cancel using the Lemon Squeezy customer billing portal or another cancellation method DefenceCore makes available. Cancellation stops future renewal and ordinarily takes effect at the end of the monthly period already paid for; it does not retroactively cancel that period.
NO VOLUNTARY REFUNDSAll subscription charges are final. DefenceCore does not provide full, partial, or prorated refunds, credits, or reimbursement for unused time, mid-period cancellation, downgrades, inactivity, dissatisfaction with results, or suspension or termination for breach. This policy does not restrict any cancellation, refund, or consumer right that cannot lawfully be waived. Any refund required by mandatory law will be limited to the legally required amount and processed through the applicable Lemon Squeezy procedure.
Seven-day free trial. Eligible new subscribers receive a one-time seven (7)-day free trial beginning when the trial is activated at checkout. No subscription fee is charged during the trial. Unless cancelled through the Lemon Squeezy billing portal before the expiration displayed there, the trial automatically converts to the US$29 monthly subscription and Lemon Squeezy charges the payment method provided at checkout, where disclosed and permitted by law. DefenceCore may refuse or revoke duplicate, fraudulent, or abusive trials, and applicable plan limits continue to apply.
FUTURE PRICING AND PLAN CHANGESDefenceCore may change the US$29 monthly price or other fees and may materially change or retire an existing paid plan. Before a price increase or material adverse change applies, DefenceCore will give reasonable advance notice through the account email, the Service, Lemon Squeezy, or another lawful method, including any longer notice required by law. Unless mandatory law requires otherwise, a change applies no earlier than the first renewal on or after its stated effective date and will not affect a period already paid for. A subscriber may cancel before that renewal; continued subscription and renewal after the effective date constitutes acceptance.
5. License and permitted use
Subject to these Terms and payment of applicable fees, DefenceCore grants Customer a limited, non-exclusive, non-transferable, non-sublicensable, revocable right during the subscription term to access and use the Service for Customer’s internal business security-monitoring purposes within the applicable plan limits.
You may permit your authorized personnel and contractors to use the Service for your benefit, provided they comply with these Terms and you remain responsible for them. No rights are granted except as expressly stated.
6. Acceptable use
You must not, and must not help another person to:
- use the Service unlawfully, to violate another person’s rights, or to process data without the authority, notices, and lawful basis required for that processing;
- probe, scan, attack, overload, disrupt, or circumvent the security, authentication, rate limits, or access controls of the Service or any connected system, except through a DefenceCore-authorized testing program;
- reverse engineer, decompile, copy, modify, translate, or create derivative works of the Service except to the limited extent a restriction is prohibited by law;
- resell, sublicense, rent, time-share, or provide the Service as a service bureau without DefenceCore’s written approval;
- upload malicious code; use the Service to develop or improve a competing product through systematic extraction; scrape or harvest data; or use automated means outside documented interfaces;
- submit credentials, projects, logs, or other data that you do not have the right to provide, or connect a third-party account without authorization; or
- remove proprietary notices or misrepresent the source, ownership, findings, or capabilities of the Service.
7. Connected services and credentials
The Service may connect to Supabase and other third-party platforms using OAuth or other credentials. You authorize DefenceCore to access the connected account and retrieve permitted project metadata, analytics, and log data solely to provide, secure, support, and improve the Service as described in these Terms and the Privacy Policy. The scopes presented during authorization are part of this instruction.
You are responsible for your relationship with each third-party provider and for configuring the connection appropriately. You may revoke a connection through the provider where supported. Revocation may stop new collection but does not necessarily delete information already processed or records that DefenceCore must retain. Third-party services are governed by their own terms and may change, suspend, or discontinue their APIs without DefenceCore’s control.
7A. Free Supabase Scanner additional terms
ACCEPTANCE AND AUTHORITYThese additional terms apply whenever you create or run a scan with DefenceCore’s free Supabase scanner (the “Free Scanner”). To use the Free Scanner, you must separately accept these Terms and the Privacy Policy. You represent and warrant that you own the selected project or are authorized by its owner to grant the access described below and perform the scan.
READ-ONLY DATABASE ACCESSThe Free Scanner uses Supabase OAuth scopes projects:read and database:read. You instruct DefenceCore to retrieve project metadata and execute DefenceCore-controlled queries through Supabase’s read-only database-query interface to inspect database structure, configuration, roles, grants, policies, and other technical information needed to produce findings. Read-only access does not permit DefenceCore to intentionally modify your database, but it can expose schema information, query results, and other data visible through the authorized interface.
NO SENSITIVE DATA OR PIIYOU MUST NOT CONNECT OR SCAN A SUPABASE PROJECT THAT HANDLES, STORES, OR PROCESSES PERSONAL DATA OR PERSONALLY IDENTIFIABLE INFORMATION (PII), SENSITIVE OR SPECIAL-CATEGORY PERSONAL DATA, HEALTH OR MEDICAL DATA, PAYMENT-CARD OR FINANCIAL-ACCOUNT DATA, GOVERNMENT IDENTIFIERS, AUTHENTICATION SECRETS, CHILDREN’S DATA, OR OTHER REGULATED OR CONFIDENTIAL INFORMATION (COLLECTIVELY, “SENSITIVE DATA”). This prohibition applies even if you expect the scanner to read only metadata. You are responsible for confirming that the selected project contains no Sensitive Data before authorizing access. If you discover otherwise, stop the scan, revoke the OAuth authorization, and contact DefenceCore promptly.
SECURITY EFFORTS; NO GUARANTEEDefenceCore will use commercially reasonable efforts and reasonable skill and care to operate the Free Scanner securely, limit it to its documented read-only purpose, and protect the information it processes. These are obligations of means, not guarantees. No internet, cloud, OAuth, or security service can be guaranteed completely secure, uninterrupted, or error-free.
NO RELIANCE; YOUR RESPONSIBILITYThe Free Scanner and its findings are provided for general informational purposes and may be incomplete, inaccurate, delayed, or include false positives or false negatives. They are not a penetration test, audit, certification, compliance determination, warranty, or substitute for qualified security professionals and appropriate controls. You use the Free Scanner and rely on its output solely at your own risk and remain responsible for verifying findings, protecting and backing up your systems, and deciding what action to take.
SUPABASE AND REVOCATIONSupabase is an independent third party. DefenceCore does not control its authorization screen, APIs, availability, or security. You may revoke the Free Scanner’s access through Supabase. DefenceCore will delete or disable scanner OAuth credentials after completion or expiry according to its retention practices, but revocation or deletion does not erase information already processed or records DefenceCore is required or permitted to retain.
8. Customer Data and privacy responsibilities
"Customer Data" means data, logs, content, configuration information, and other material submitted to, collected by, or processed through the Service for Customer. As between the parties, Customer retains its rights in Customer Data. Customer grants DefenceCore and its subprocessors a worldwide, non-exclusive right to host, copy, transmit, analyze, display, and otherwise process Customer Data as necessary to provide, secure, maintain, support, and improve the Service; comply with law; and enforce these Terms.
Customer represents and warrants that it has all rights, permissions, notices, and lawful bases needed for DefenceCore to process Customer Data as contemplated here. Because security logs can contain personal, confidential, regulated, or sensitive information, Customer must configure its systems to avoid unnecessary collection and must not use the Service for data whose processing is prohibited or requires safeguards DefenceCore has not agreed to provide.
When DefenceCore processes personal data in Customer Data solely on Customer’s documented instructions, Customer is the controller and DefenceCore acts as a processor or service provider, as those terms are defined by applicable law. Customers that require a separate data processing addendum should contact [email protected] before submitting regulated data.
9. Confidentiality
Each party may receive non-public information that is identified as confidential or that reasonably should be understood as confidential, including Customer Data, security information, product roadmaps, and business information ("Confidential Information"). The receiving party will use Confidential Information only to perform or receive the Service and will protect it with at least reasonable care. It may disclose Confidential Information only to personnel, professional advisers, and service providers who need it and are bound by confidentiality duties, or as required by law after giving notice when legally permitted.
Confidential Information does not include information the receiving party can document was lawfully known without restriction, becomes public without breach, is received lawfully from another source without a confidentiality duty, or is independently developed without use of the disclosing party’s Confidential Information.
10. Intellectual property and feedback
DefenceCore and its licensors own the Service, software, interfaces, documentation, designs, models, detections, rules, aggregated statistics, and all related intellectual-property rights, excluding Customer Data. If you provide suggestions or feedback, you grant DefenceCore a perpetual, irrevocable, worldwide, royalty-free right to use it without restriction or obligation, provided DefenceCore does not identify you publicly as the source without permission.
DefenceCore may create and use aggregated or de-identified information that cannot reasonably identify Customer or an individual, including to operate, secure, analyze, benchmark, and improve the Service, subject to applicable law and contractual confidentiality duties.
11. Service operation, changes, and support
DefenceCore may maintain, update, modify, or discontinue features to improve security, performance, legal compliance, or product operation. DefenceCore will use reasonable efforts to avoid materially reducing the core functionality of a paid plan during its current subscription period, but third-party changes, urgent security issues, and legal requirements may require immediate action.
DefenceCore will use commercially reasonable efforts, together with reasonable skill and care, to maintain and operate the Service’s supported monitoring and detection functions in accordance with their then-current design and intended use. This is an obligation of means only and is not a promise or guarantee that any particular threat, attack, vulnerability, misconfiguration, malicious activity, loss, or security incident will be detected, prevented, contained, or remediated.
The Service may be unavailable because of maintenance, incidents, internet or cloud-provider failures, force majeure, or circumstances outside DefenceCore’s reasonable control. Unless a separate service-level agreement expressly applies, no guaranteed uptime, response time, support level, or recovery objective is provided.
12. Security
DefenceCore uses administrative, technical, and organizational measures designed to protect information, which may include access controls, separation of customer records, secret management, encryption of supported OAuth tokens, monitoring, backups, and retention controls. No security measure or online service is completely secure. You remain responsible for your own security program, connected systems, backup strategy, incident response, and verification of findings.
13. Suspension and termination
DefenceCore may suspend or restrict access if fees are overdue; a subscription is inactive; use violates these Terms or applicable law; use creates a security, legal, or operational risk; a third-party integration is revoked or unavailable; or suspension is reasonably necessary to protect the Service, DefenceCore, customers, or others. Where practicable, DefenceCore will give notice and an opportunity to cure.
Either party may terminate as stated in an applicable order. You may stop using the Service and cancel renewal at any time. DefenceCore may terminate these Terms or a free account on reasonable notice, or immediately for material breach, unlawful conduct, security risk, insolvency, or where continued performance is prohibited.
After termination, access ends and DefenceCore may delete Customer Data according to its retention practices, subject to legal, security, backup, and dispute-preservation requirements. You are responsible for exporting data you need before termination. Sections that by nature should survive will survive, including payment obligations, confidentiality, intellectual property, disclaimers, liability limits, indemnity, dispute provisions, and general terms.
14. Disclaimers
TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE." DEFENCECORE DISCLAIMS ALL EXPRESS, IMPLIED, STATUTORY, AND OTHER WARRANTIES, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, ACCURACY, AVAILABILITY, AND RESULTS.
THREAT-DETECTION DISCLOSUREDefenceCore applies commercially reasonable efforts and reasonable skill and care in operating the supported monitoring and detection functions. Nevertheless, cybersecurity threats and customer environments are continuously changing, and no monitoring or detection service can identify or prevent every threat. DefenceCore does not warrant or represent that the Service will detect, prevent, contain, or remediate every vulnerability, attack, misconfiguration, malicious act, data loss, or security incident, or that any detection will be complete, timely, accurate, or error-free.
OUTPUTS MAY INCLUDE FALSE POSITIVES OR FALSE NEGATIVES AND REQUIRE PROFESSIONAL REVIEW. THE SERVICE IS A SUPPORTING SECURITY TOOL, NOT A SUBSTITUTE FOR APPROPRIATE SECURITY CONTROLS, QUALIFIED PERSONNEL, LEGAL ADVICE, INCIDENT RESPONSE, BACKUPS, OR CUSTOMER’S OWN JUDGMENT. CUSTOMER REMAINS RESPONSIBLE FOR MONITORING ITS SYSTEMS, EVALUATING ALERTS, AND TAKING APPROPRIATE PROTECTIVE AND REMEDIAL ACTION.
15. Limitation of liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW, DEFENCECORE AND ITS AFFILIATES, LICENSORS, SUPPLIERS, OFFICERS, DIRECTORS, EMPLOYEES, AND AGENTS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, PUNITIVE, OR CONSEQUENTIAL DAMAGES; LOSS OF PROFITS, REVENUE, BUSINESS, GOODWILL, OR ANTICIPATED SAVINGS; LOSS, CORRUPTION, OR UNAVAILABILITY OF DATA; BUSINESS INTERRUPTION; COST OF SUBSTITUTE SERVICES; OR SECURITY INCIDENTS OR THIRD-PARTY CLAIMS, EVEN IF ADVISED THAT SUCH DAMAGE IS POSSIBLE.
AGGREGATE LIABILITY CAPTo the maximum extent permitted by law, the total aggregate liability of DefenceCore and the DefenceCore parties arising out of or relating to the Service, these Terms, and all related claims will not exceed the subscription fees paid or payable for the Service for the three (3) monthly subscription periods immediately preceding the event giving rise to the first claim. The cap is cumulative, not per incident or per claim.
FREE SCANNER LIABILITYTo the maximum extent permitted by law, DefenceCore will have no liability arising from or relating solely to the Free Scanner beyond the amount you paid for the Free Scanner, which is currently zero. This limitation does not exclude or limit liability that cannot lawfully be excluded or limited.
The exclusions and cap apply regardless of the theory of liability, including contract, tort (including negligence), strict liability, statute, or otherwise, and even if a remedy fails of its essential purpose. They do not limit liability that cannot lawfully be excluded or limited, and do not reduce Customer’s obligation to pay fees or liabilities arising from Customer’s infringement, misuse, unlawful processing, or indemnification obligations. Some jurisdictions do not permit certain exclusions, so these provisions apply only to the extent permitted.
16. Indemnification
To the extent permitted by law, Customer will defend, indemnify, and hold harmless DefenceCore and its affiliates, officers, directors, employees, and agents from third-party claims, damages, judgments, penalties, costs, and reasonable legal fees arising from Customer Data; Customer’s or its users’ violation of these Terms or law; unauthorized connection to or use of a third-party system; or allegations that Customer Data infringes or violates third-party rights. DefenceCore will provide reasonably prompt notice, allow Customer to control the defense and settlement, and provide reasonable cooperation at Customer’s expense. Customer may not settle a claim in a manner that admits fault by or imposes obligations on DefenceCore without DefenceCore’s written consent.
17. Governing law and exclusive jurisdiction
These Terms and any dispute, claim, or controversy arising out of or relating to them or the Service are governed by the laws of the State of Israel, without regard to conflict-of-law rules. The competent courts located in Tel Aviv–Jaffa, Israel, will have exclusive jurisdiction, and each party irrevocably submits to their personal jurisdiction and venue.
Nothing in this section prevents DefenceCore from seeking urgent injunctive or protective relief in any court of competent jurisdiction to protect security, confidential information, or intellectual-property rights. Mandatory consumer-protection or other laws that cannot be waived remain applicable.
18. Changes to these Terms
DefenceCore may update these Terms. The updated version will state its effective date and will be made available through the Service or website. If a change materially reduces your rights or increases your obligations, DefenceCore will provide reasonable advance notice when required and practicable. Continued use after the effective date constitutes acceptance, but material changes will not apply retroactively to a dispute that arose before the change. If you do not agree, you must stop using the Service and cancel before the change takes effect.
19. Notices
DefenceCore may send operational and legal notices to the email address associated with your account, through the Service, or by another reasonable electronic method. Notices to DefenceCore must be sent to [email protected] and, where formal service is required, to DefenceCore Ltd., Judeide-Maker, Israel. Email notice is effective when sent unless the sender receives a delivery-failure message; formal legal service must also comply with applicable procedural law.
20. General
These Terms and incorporated documents are the entire agreement about the Service and supersede prior understandings on that subject. Customer may not assign them without DefenceCore’s written consent; DefenceCore may assign them in connection with a corporate transaction, financing, or by operation of law. No third party is a beneficiary. A waiver must be written. If a provision is unenforceable, it will be modified only as necessary and the rest remains effective. Headings are for convenience, and "including" is not limiting. The parties are independent contractors; no partnership, agency, employment, fiduciary, or franchise relationship is created.