Terms of Service

---

1. Acceptance of Terms

These Terms of Service ("Terms") constitute a legally binding agreement between you ("User," "you," or "your") and RedLab LLC ("RedLab," "we," "our," or "us"), a Texas limited liability company located in Austin, Texas. These Terms govern your access to and use of the RedLab platform, website, APIs, tools, documentation, and all related services (collectively, the "Services").

By accessing or using any part of the Services, you acknowledge that you have read, understood, and agree to be bound by these Terms and our Privacy Policy, which is incorporated herein by reference. If you do not agree to these Terms, you are not authorized to access or use the Services.

If you are accessing the Services on behalf of an organization, company, or other legal entity, you represent and warrant that you have the authority to bind that entity to these Terms, in which case "you" and "your" shall refer to both you individually and that entity.

---

2. Services Description

RedLab provides a professional adversarial security testing platform designed exclusively for authorized security professionals. Our Services include, but are not limited to:

• Penetration testing tools and frameworks accessible via web interface and API;
• Threat simulation infrastructure for red team and purple team engagements;
• Security orchestration tools for authorized testing campaigns;
• Documentation, research resources, and technical guidance;
• API access for programmatic integration into authorized security workflows; and
• Reporting and evidence-gathering tools for documenting authorized testing activities.

The Services are intended exclusively for professional security practitioners, penetration testers, red team operators, security researchers, and other qualified individuals operating within the scope of documented written authorization from the lawful owner or administrator of the systems being tested.

RedLab reserves the right to modify, suspend, or discontinue any aspect of the Services at any time with reasonable notice where practicable.

---

3. Account Registration

Access to the Services requires an approved account. To apply for access, you must:

• Submit a complete and accurate access application, including verifiable information about your professional credentials, organization, and intended use cases;
• Provide truthful information about yourself and your organization — any material misrepresentation is grounds for immediate account termination and may result in legal action;
• Be at least 18 years of age;
• Agree to and comply with these Terms, our Privacy Policy, and our Acceptable Use Policy; and
• Receive express written approval from RedLab prior to accessing any Services.

RedLab reserves the right to deny access to any applicant at its sole discretion and without explanation.

You are responsible for maintaining the confidentiality of your account credentials. You agree to immediately notify RedLab at security@redlab.io if you discover or suspect any unauthorized access to your account. You are responsible for all activities that occur under your account credentials.

You may not share your account credentials or allow any other person to access the Services using your account. Each user must have their own individually approved account.

---

4. Authorized Use Only

4.1 Written Authorization Requirement

You may only use RedLab's Services to conduct security testing, vulnerability assessments, penetration tests, red team exercises, or any other adversarial activities against systems, networks, applications, devices, or accounts for which you have obtained, in advance of any testing activity, documented written authorization from the lawful owner, operator, or authorized administrator of those systems. This requirement is absolute. There are no exceptions.

Written authorization must:

• Be obtained prior to commencement of any testing activity — retroactive authorization is not sufficient;
• Clearly identify the scope of authorized testing, including specific systems, networks, IP ranges, or applications within scope;
• Be signed by an individual with actual legal authority to grant such authorization on behalf of the system owner;
• Specify the timeframe during which testing is authorized; and
• Be retained by you and made available to RedLab upon request.

RedLab may, at its discretion, require you to submit copies of authorization documentation before granting access to specific tools or features of the platform.

4.2 Prohibition on Unauthorized Use

Unauthorized use of RedLab's Services — meaning any use of our tools against systems, networks, applications, or accounts for which you do not possess valid written authorization as described above — is absolutely and unconditionally prohibited. Such use:

• Constitutes a material breach of these Terms, resulting in immediate termination of your access;
• May constitute criminal activity under the Computer Fraud and Abuse Act, 18 U.S.C. § 1030, which provides for criminal penalties including imprisonment of up to ten (10) years for a first offense and up to twenty (20) years for subsequent offenses;
• May violate the Electronic Communications Privacy Act (18 U.S.C. §§ 2510–2523), the Stored Communications Act (18 U.S.C. §§ 2701–2713), and equivalent state and international laws;
• Will be reported to appropriate law enforcement authorities, including the Federal Bureau of Investigation and other federal, state, and international agencies as appropriate; and
• May give rise to civil liability, including claims for damages, injunctive relief, and attorneys' fees.

RedLab maintains comprehensive logs of all platform activity and will cooperate fully with law enforcement investigations of unauthorized use. Our audit logs are routinely preserved and may be produced in civil or criminal proceedings.

4.3 Scope Limitations

Your use of the Services must at all times remain within the documented scope of your written authorization. You shall not expand testing beyond the explicitly authorized scope, even if you discover vulnerabilities or attack vectors that appear to permit access to out-of-scope systems. Discovery of a technical capability to access unauthorized systems does not constitute authorization to do so.

---

5. Prohibited Activities

In addition to the authorization requirements above, the following activities are expressly prohibited:

• Using the Services to conduct any unauthorized access to any computer, network, system, or account;
• Sharing, sublicensing, reselling, or otherwise providing access to the Services to any third party without RedLab's prior written consent;
• Sharing your account credentials, API keys, or access tokens with any other individual or entity;
• Reverse engineering, decompiling, or disassembling any portion of the Services;
• Attempting to circumvent any security controls, rate limits, access restrictions, or monitoring systems implemented by RedLab;
• Using the Services to develop competing products or services;
• Using the Services to target critical infrastructure including power grids, water systems, financial systems, or emergency services unless you possess explicit government authorization for such testing;
• Submitting false or misleading authorization documentation;
• Using the Services for any purpose that violates applicable law or regulation;
• Engaging in any activity that disrupts, damages, or interferes with the Services or other users' access to the Services;
• Using automated tools to scrape, crawl, or harvest data from the Services beyond normal API usage; and
• Introducing malware, ransomware, or other malicious code into the Services or using the Services to facilitate the deployment of malware against unauthorized systems.

---

6. Intellectual Property

The Services, including all software, tools, code, algorithms, documentation, interfaces, research materials, reports, and other content made available through the Services, are owned by RedLab or its licensors and are protected by applicable intellectual property laws, including copyright, trade secret, and patent laws.

Subject to your compliance with these Terms and the payment of applicable fees, RedLab grants you a limited, non-exclusive, non-transferable, revocable license to access and use the Services solely for your internal professional security testing activities within the scope of authorized engagements.

You may not copy, modify, distribute, sell, or create derivative works of any part of the Services without RedLab's prior written consent. You retain ownership of any data, reports, or results you generate through your authorized use of the Services ("User Content"), but you grant RedLab a license to use aggregated, de-identified User Content for product improvement and research purposes.

"RedLab," the RedLab logo, and other RedLab product and service names are trademarks of RedLab LLC. You may not use these marks without our prior written permission.

---

7. Confidentiality

You acknowledge that in the course of using the Services, you may have access to confidential information belonging to RedLab, including platform architecture, unpublished research, tool capabilities, infrastructure details, and other non-public information ("Confidential Information"). You agree to:

• Hold all Confidential Information in strict confidence;
• Not disclose Confidential Information to any third party without RedLab's prior written consent;
• Use Confidential Information solely in connection with your authorized use of the Services; and
• Take all reasonable precautions to prevent unauthorized disclosure or use of Confidential Information.

Similarly, RedLab will keep confidential any non-public information you provide about your clients, engagements, and authorization documentation, subject to our legal obligations and the terms of our Privacy Policy.

Confidentiality obligations survive the termination of these Terms for a period of five (5) years, or indefinitely with respect to trade secrets.

---

8. Disclaimer of Warranties

THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTY OF ANY KIND. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, REDLAB EXPRESSLY DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. REDLAB DOES NOT WARRANT THAT THE SERVICES WILL BE UNINTERRUPTED, ERROR-FREE, OR FREE FROM HARMFUL COMPONENTS.

Security tools involve inherent risks. RedLab does not guarantee that any tool, technique, or result obtained through the Services will detect all vulnerabilities in a tested system, or that use of the Services will result in any particular security outcome. You bear full responsibility for your testing methodology, conclusions, and remediation recommendations.

---

9. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL REDLAB, ITS OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, LICENSORS, OR SERVICE PROVIDERS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR EXEMPLARY DAMAGES, INCLUDING WITHOUT LIMITATION LOSS OF PROFITS, LOSS OF DATA, LOSS OF BUSINESS, OR COSTS OF PROCUREMENT OF SUBSTITUTE SERVICES, ARISING OUT OF OR IN CONNECTION WITH THESE TERMS OR YOUR USE OF OR INABILITY TO USE THE SERVICES, EVEN IF REDLAB HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

IN NO EVENT SHALL REDLAB'S TOTAL CUMULATIVE LIABILITY ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICES EXCEED THE GREATER OF (A) THE AMOUNT YOU PAID TO REDLAB IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM, OR (B) ONE HUNDRED DOLLARS ($100.00).

Some jurisdictions do not allow the exclusion or limitation of incidental or consequential damages, so the above limitations may not apply to you in full.

---

10. Indemnification

You agree to defend, indemnify, and hold harmless RedLab LLC and its officers, directors, employees, agents, licensors, and service providers from and against any and all claims, liabilities, damages, judgments, awards, losses, costs, expenses, and fees (including reasonable attorneys' fees) arising out of or relating to:

• Your use of or inability to use the Services;
• Your violation of these Terms;
• Any unauthorized use of the Services using your account or credentials;
• Any testing activities you conduct without valid written authorization;
• Your violation of any applicable law, regulation, or third-party right; and
• Any User Content you submit, generate, or transmit through the Services.

RedLab reserves the right, at your expense, to assume the exclusive defense and control of any matter for which you are required to indemnify us, and you agree to cooperate with our defense of such claims.

---

11. Governing Law

These Terms and any dispute or claim arising out of or related to these Terms, their subject matter, or their formation shall be governed by and construed in accordance with the laws of the State of Texas, without giving effect to any conflict of law principles that would require the application of the law of another jurisdiction.

Subject to the dispute resolution provisions below, you agree to submit to the personal and exclusive jurisdiction of the state and federal courts located in Travis County, Texas for resolution of any dispute arising out of or related to these Terms.

---

12. Dispute Resolution

12.1 Informal Resolution

Before initiating formal legal proceedings, you agree to first attempt to resolve any dispute informally by contacting RedLab at legal@redlab.io and providing a written description of the dispute. RedLab will attempt to resolve the dispute informally within thirty (30) days.

12.2 Binding Arbitration

If informal resolution is unsuccessful, any dispute, controversy, or claim arising out of or relating to these Terms, or the breach, termination, or validity thereof, shall be settled by binding arbitration administered by the American Arbitration Association (AAA) under its Commercial Arbitration Rules. The arbitration shall take place in Austin, Texas. The arbitrator's award shall be final and binding and may be entered as a judgment in any court of competent jurisdiction.

12.3 Class Action Waiver

YOU AGREE THAT EACH OF US MAY BRING CLAIMS AGAINST THE OTHER ONLY IN YOUR OR ITS INDIVIDUAL CAPACITY AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS OR REPRESENTATIVE ACTION. Unless both you and RedLab agree, no arbitrator may consolidate more than one person's claims.

12.4 Exceptions

Either party may seek emergency injunctive or equitable relief in a court of competent jurisdiction to prevent irreparable harm pending arbitration. RedLab may also seek injunctive relief and other remedies in any court for violations of its intellectual property rights, confidentiality obligations, or the authorized use requirements of these Terms.

---

13. Termination

These Terms remain in effect until terminated by either party.

You may terminate your account at any time by contacting support@redlab.io. Termination does not entitle you to a refund of any prepaid fees except as required by applicable law.

RedLab may suspend or terminate your access to the Services immediately, without prior notice or liability, if:

• You breach any provision of these Terms or our Acceptable Use Policy;
• RedLab has reasonable grounds to believe you are engaged in unauthorized testing activities;
• You fail to pay any amounts due;
• Your continued access poses a security or legal risk to RedLab or third parties; or
• RedLab is required to do so by law.

Upon termination, your license to use the Services terminates immediately. Sections 4 (Authorized Use Only), 6 (Intellectual Property), 7 (Confidentiality), 8 (Disclaimer of Warranties), 9 (Limitation of Liability), 10 (Indemnification), 11 (Governing Law), 12 (Dispute Resolution), and this Section 13 survive termination.

---

14. General Provisions

14.1 Entire Agreement

These Terms, together with our Privacy Policy and Acceptable Use Policy, constitute the entire agreement between you and RedLab with respect to the Services and supersede all prior or contemporaneous understandings, representations, warranties, and agreements.

14.2 Amendments

RedLab reserves the right to modify these Terms at any time. We will provide notice of material changes by posting the updated Terms on our website and, for registered users, sending email notice at least thirty (30) days before the changes take effect. Your continued use of the Services after the effective date of the revised Terms constitutes your acceptance of those changes.

14.3 Severability

If any provision of these Terms is found to be unenforceable or invalid under applicable law, that provision will be modified to the minimum extent necessary to make it enforceable, or if modification is not possible, it will be severed. The remaining provisions of these Terms will continue in full force and effect.

14.4 Waiver

No failure or delay by RedLab in exercising any right or remedy under these Terms will operate as a waiver of that right or remedy. No waiver of any provision of these Terms will be effective unless in writing and signed by RedLab.

14.5 Assignment

You may not assign or transfer any of your rights or obligations under these Terms without RedLab's prior written consent. RedLab may freely assign its rights and obligations under these Terms, including in connection with a merger, acquisition, or sale of assets.

14.6 Force Majeure

Neither party shall be liable for any failure or delay in performance due to causes beyond its reasonable control, including natural disasters, acts of war, terrorism, labor disputes, power outages, or government actions.

14.7 Contact

For questions about these Terms, contact: