Terms of Service

1. Who we are

Cyber Pulse ("we") is operated by a limited liability company organized in North Carolina, USA. The legal name of the company you contract with is shown on your checkout page, invoices and receipts, and we provide it on request. Contact: contact@cyberzenpulse.com.

2. The service

Cyber Pulse compiles public information about cyber incidents, ransomware claims and exploited vulnerabilities from the sources listed on the site, and alerts subscribers when an organization on their vendor list appears. Ransomware listings are claims by criminal groups and may be false; our information may be incomplete, delayed or wrong; and no alert does not mean a vendor is safe. The service supports your own vendor-risk decisions; it is not legal, insurance or security advice, and it does not replace your own due diligence.

Pro vendor posture findings report what public records showed when they were checked (published incidents, public vulnerability catalogs, and public DNS and domain-registration records), each with its source. Cyber Pulse does not rate, grade or score vendors. The suggested next actions (Act now, Contact the vendor, Next review, No action) are triage suggestions based on published external definitions, not judgments about any vendor. Findings are not an audit or a certification, records can change after they are checked, and we never test or connect to vendors' systems to produce them. Incident briefs and technology alerts are general guidance; decide your actions with your own advisers.

Automated opinions, not findings. All alerts, statuses, findings, suggested actions and indicators are automated technical observations and estimates based on publicly observable information. They are not verified findings, audits or statements of fact about any organization. An "unverified ransomware claim" is only what a criminal group has posted: such groups often bluff, exaggerate or reuse old data. You must verify independently, for example by asking the vendor, before taking any adverse action such as pausing, terminating or renegotiating a contract.

AI-written text. In Pro, the executive memo and the vendor inquiry letter are drafted by an AI model (currently Anthropic's Claude) from the public facts about the incident, then checked automatically against those facts. AI-written text can still be wrong or incomplete: review and edit it before you rely on it or send it. The control references (for example SOC 2, ISO/IEC 27001 and NIST CSF) are a starting point for your own mapping, not compliance or audit advice.

Not insurance, not complete. The service is not an insurance policy and not an all-inclusive breach-detection system. Many incidents are never made public, and some are reported late or wrongly; the absence of an alert does not mean a vendor is safe.

3. Accounts

The person who subscribes is the account admin for their organization and may add colleagues at their organization's email domain. You are responsible for who you give access to and for keeping your sign-in methods secure. Tell us at once if you think your account was misused.

4. Subscription, billing and cancellation

Pro is billed annually in advance: Pro 25 vendors costs $3,588 per year and Pro 50 vendors $5,988 per year, in U.S. dollars, plus any applicable taxes, by invoice or through our payment provider, Stripe. Enterprise is priced by written agreement. Subscriptions renew automatically for another year until cancelled before the renewal date. Organizations that subscribed to the earlier Starter plan keep its terms until their subscription ends. You can cancel any time (in the portal under Organization → Manage billing, or by email); access continues until the end of the paid year and nothing further is charged. Payments are non-refundable except where required by law or where we decide otherwise in a particular case. We will give at least 30 days' notice by email of any price change, which applies from your next renewal. Pro, which includes vendor monitoring, is not yet available; its price and terms will be published on the plans page before it opens.

5. Acceptable use

Use the service only for your organization's own security and vendor-risk purposes. Don't resell, republish or bulk-export the data, try to access other customers' data, probe or disrupt the service, or use it to harass, defame or target any person or organization. We may suspend accounts that break these terms.

You may not, and may not help others to: (a) scrape, crawl or copy the site or its data by automated means, or access it other than through the pages and features we provide; (b) copy, frame or mirror the site, or use its data, alerts, findings or analysis to build or improve a competing product or dataset; (c) decompile, reverse engineer or otherwise try to obtain the site's source code, data-collection methods or scoring models, except where the law expressly allows it despite this restriction; (d) remove or alter copyright, attribution or source notices; or (e) share sign-in access outside your organization. These limits apply to the free dashboard as well as to subscriptions.

5a. Our intellectual property

Cyber Pulse, its software, design, compilation and selection of data, analysis, alerts, findings and briefs are owned by the operator of Cyber Pulse and protected by copyright and other laws. Information we compile from public sources remains subject to those sources' own terms, credited on the Legal & sources page. Your subscription gives your organization a limited, non-exclusive, non-transferable right to use the service for its internal purposes while the subscription is active; no other rights are granted.

6. Your data

Your vendor list and account details are yours. We use them only to provide the service, keep them encrypted and separate from other customers, and handle them as described in the Privacy notice. When a subscription ends, your data is kept so you can resubscribe; ask us and we delete it.

7. Availability and changes

We aim to keep the service available and the data current but don't guarantee uninterrupted operation or any particular source. We may change or discontinue features; if we discontinue the paid service, we refund the unused part of a prepaid period.

7a. Corrections and disputes

If you believe a listing, status or grade about your organization or any other is wrong, email contact@cyberzenpulse.com with the entry and the evidence (for example a statement that an incident did not happen, or that a domain or address belongs to someone else). We review every request, usually within 5 business days, correct or remove entries that are wrong, and note disputed entries while we review. Unverified ransomware claims are always labelled as such and are never described as confirmed breaches. A "public report" means news coverage, or leaked data verified by Have I Been Pwned; it is not confirmed by the organization and does not show how the data was obtained.

8. Disclaimer and liability

The service is provided "as is", without warranties of accuracy, completeness or fitness for a particular purpose, to the extent the law allows. To the extent the law allows, we are not liable for indirect or consequential losses, lost profits or business, or for decisions or actions taken using the service (including actions taken against a vendor), and our total liability for all claims is limited to the fees you paid in the 12 months before the claim.

9. Law

These terms are governed by the laws of the State of North Carolina, USA, without regard to conflict-of-law rules. Consumer protections that apply to you under the law of your country are not affected.