Terms of Service

1. The provider

The services are provided by VAULT APPS SRL, tax ID 37880060, Trade Register J29/1679/2017, registered office Str. Cireșoaia nr. 15, Ploiești, Prahova County, Romania. Contact: office@vaultapps.ro.

2. The services

• The Defneo account — sign-in by e-mailed code, management of Site Shield sites and access to Defneo Cloud;
• Defneo Community — software released under AGPL-3.0-or-later; the software licence is the AGPL text, these terms cover only the online services (token, feed);
• Site Shield and the WordPress plugin — released under the licences stated in the package (WordPress plugin: GPL-2.0-or-later);
• the threat feed — cryptographically signed lists of malicious IP addresses;
• Defneo Cloud — a hosted workspace for compliance (NIS2, DORA, ISO 27001, GDPR, AI Act), agents, passive OSINT and SEO audit.

3. The account

You are responsible for access to the account's e-mail address: whoever controls it can enter the account. The information you give must be accurate. The services are intended for professionals; the Community edition requires a company e-mail address.

4. Acceptable use

• active security scans in Defneo Cloud run only on domains whose ownership you have proven; do not try to bypass that check;
• do not use the services to attack, scan or monitor systems you are not entitled to test;
• do not report IP addresses to the feed that you know are not malicious, and do not try to manipulate the feed;
• do not try to access other customers' data, circumvent plan limits or overload the service;
• do not upload data to the Cloud that you are not entitled to process.

5. Feed contribution

Free access to the feed (Community and Site Shield) depends on contribution: the installation must report the attacks it observes. An installation that stops reporting for 7 days loses feed access until it resumes. The data sent is described in the Privacy Policy.

6. Defneo Cloud

The free plan includes up to 3 agents. The account holder is the workspace administrator and may invite members with roles; they are responsible for the actions of those members and of the API tokens they create. Processing of workspace data is governed by the Data Processing Agreement (DPA), which forms part of these terms.

Defneo Cloud is not in your sites' traffic path and does not block attacks; Defneo on-premise and Site Shield exist for that.

7. Not legal advice

Compliance assessments, scores and generated documents are working tools. They are not legal advice; final classification and interpretation of the law belong to the competent authorities (for example DNSC for NIS2).

8. Warranties and liability

Free services are provided “as is”, without any warranty of availability or of detecting every threat. No security tool stops every attack.

To the extent permitted by law, we are not liable for indirect losses (lost profit, data or business), and total liability for a service is limited to the amounts paid for it in the previous 12 months. These limits do not apply to damage caused intentionally or by gross negligence.

9. Suspension and closure

We may suspend an account that breaches these terms or endangers the service or other customers. You may close your account at any time by writing to office@vaultapps.ro; Defneo Cloud data is handled under the DPA.

10. Changes

We may change these terms; material changes are announced to account holders by e-mail at least 30 days in advance. Continued use after they take effect means you accept them.

11. Governing law

These terms are governed by Romanian law. Disputes are settled amicably or, failing agreement, by the competent courts at the registered office of VAULT APPS SRL.