Terms | TrapLayer

Agreement Overview

By creating an account, starting a trial, purchasing a subscription, accessing a customer or partner portal, or using TrapLayer APIs or reports, you agree to these Terms and the TrapLayer Privacy Policy.

Production terms

Legal operator: Kryptx Technologies LLC operates the TrapLayer product under d.b.a. TrapLayer.
Authorized users: You may use TrapLayer only if you are at least 18 years old and are authorized to bind the company, organization, or account you represent.
Business use: TrapLayer is a business-to-business defensive security intelligence service. It is not intended for personal, household, child-directed, consumer credit, employment-screening, insurance-underwriting, tenant-screening, or law-enforcement use.
Additional agreements: Order forms, reseller agreements, data-processing terms, enterprise security addenda, or written statements of work may add terms for a customer or partner. If a signed written agreement conflicts with these online Terms, the signed agreement controls for that account.

Permitted Use

You may use TrapLayer public data, authenticated feeds, reports, dashboards, and APIs for defensive security, threat research, incident awareness, risk analysis, security operations, and internal protective controls.

Public observatory	Public dashboards, public reports, and unauthenticated APIs may include sanitized, delayed, sampled, or approximate aggregate telemetry.
Customer feeds	Authenticated feeds are licensed only to the subscribing tenant and its authorized users for internal defensive use.
Internal caching	You may cache feed results internally to reduce repeated pulls, subject to indicator TTLs, API limits, subscription limits, and your written agreement.
Security workflows	You may use indicators to block, challenge, alert, enrich SIEM/SOAR tooling, support investigations, and prioritize customer telemetry, provided you use reasonable validation before high-impact enforcement.

Restricted Use

Do not use TrapLayer, its lures, telemetry, APIs, reports, or indicators for offensive, abusive, unlawful, or unauthorized activity.

No exploitation	Do not attack, overload, disrupt, scan back, hack back, or attempt to compromise TrapLayer, its customers, third parties, or systems observed by TrapLayer.
No feed abuse	Do not share API keys, bypass rate limits, scrape beyond entitlements, remove attribution, misrepresent data provenance, or use automation designed to defeat service limits.
No sensitive submissions	Do not intentionally submit real credentials, production secrets, regulated personal data, confidential customer data, or illegal content into TrapLayer lures, forms, portals, or support channels.
No unauthorized resale	Do not resell, republish, redistribute, syndicate, white-label, or provide external access to paid feed data unless a signed reseller, MSSP, OEM, or enterprise agreement expressly allows it.

Accounts, Trials, and Access Controls

You are responsible for account activity, user access, API keys, credentials, integrations, and systems that connect to TrapLayer. Keep credentials and API keys confidential and notify TrapLayer promptly if you believe access has been compromised.

Trials: Trial accounts may be limited in duration, seats, API keys, data tiers, reports, feed volume, and support. TrapLayer may approve, deny, suspend, or end a trial to protect the service or comply with policy gates.
Critical infrastructure: Critical Infrastructure or Yellow 4 access requires operator approval. A Critical Infrastructure trial may begin at a lower data tier until the account, use case, and legal/compliance posture are approved.
Entitlements: Seats, API keys, data tiers, feed formats, monthly API-call allowances, per-request limits, reports, retention, and add-ons are separate entitlements. The platform may enforce those entitlements automatically.
Suspension: TrapLayer may suspend or restrict access for nonpayment, abuse, excessive usage, security risk, suspected compromise, legal obligation, or violation of these Terms.

Threat Intelligence and Data Limits

TrapLayer intelligence is based on observed interaction with deception assets and related enrichment. It is not a guarantee of attacker identity, malicious intent, geolocation accuracy, exclusive infrastructure control, or complete coverage of a threat environment.

Indicator context: Source IPs, ASNs, countries, client-family labels, payload hashes, behavior summaries, MITRE mappings, CVE context, confidence scores, and risk scores are best-effort signals and should be evaluated with your own telemetry.
False positives: Indicators may represent VPNs, proxies, cloud hosts, shared networks, compromised systems, scanners, researchers, NAT gateways, or transient infrastructure.
Public-safe data: Public pages and public reports use aggregate and sanitized information. They do not provide raw headers, raw payload bodies, usable credentials, session identifiers, canary token values, customer data, or red evidence.
Restricted evidence: Deeper raw evidence, if ever made available, requires written authorization, legal review, and specific operating procedures. It is not included in ordinary automated commercial feeds.

Fees, Billing, and Subscriptions

Paid subscriptions, add-ons, invoices, payment methods, taxes, renewals, failed-payment handling, upgrades, downgrades, and cancellations are governed by the account settings, checkout flow, Stripe provider records where applicable, and any signed written agreement.

Recurring billing	Unless otherwise stated in a written agreement, subscriptions and add-ons renew automatically until canceled or terminated.
Usage limits	API-call blocks, seats, API keys, and data entitlements may be measured monthly and enforced by the platform.
Changes	Plan changes and add-ons may be prorated when supported by the billing provider and account configuration.
Taxes	Prices may exclude taxes, duties, or similar government assessments unless stated otherwise.

Availability and Changes

TrapLayer may update, improve, limit, suspend, or discontinue parts of the service as needed for security, reliability, compliance, product development, or operational requirements.

Maintenance	Service interruptions may occur for maintenance, incident response, infrastructure updates, data backfills, or emergency security work.
Beta features	Pre-release or experimental features may change or be withdrawn without notice.
Public content	Public posts, summaries, and reports may be corrected, updated, removed, or replaced when new information becomes available.

Intellectual Property

TrapLayer and its licensors retain all rights in the platform, software, dashboards, reports, lures, detection logic, designs, trademarks, enrichment methods, and service materials. You retain rights to your own submitted business account information and customer materials. No rights are granted except as expressly stated in these Terms or a written agreement.

Feedback, suggestions, or ideas you provide may be used by TrapLayer without restriction or obligation, provided TrapLayer does not disclose your confidential information in doing so.

Confidentiality

Non-public product information, customer portal content, partner terms, pricing exceptions, operational procedures, private telemetry, API keys, and restricted reports must be treated as confidential unless they are already public or your written agreement says otherwise.

Third-Party Services

TrapLayer may rely on third-party providers for hosting, email delivery, payment processing, security tooling, analytics, and support operations. Third-party services may have their own terms and privacy notices.

Disclaimers and Liability Limits

TrapLayer is provided on an "as is" and "as available" basis to the maximum extent permitted by law. TrapLayer disclaims warranties of merchantability, fitness for a particular purpose, non-infringement, uninterrupted operation, and error-free or complete intelligence.

To the maximum extent permitted by law, TrapLayer will not be liable for indirect, incidental, special, consequential, exemplary, or punitive damages; lost profits; lost revenue; business interruption; loss of goodwill; or loss of data. For paid accounts, TrapLayer's aggregate liability for claims relating to the service will not exceed the amounts paid to TrapLayer for the affected service during the 30 days before the event giving rise to the claim, or one monthly billing cycle if shorter, unless a signed agreement states a different limit.

Indemnity

You will defend and indemnify TrapLayer from claims, losses, liabilities, damages, costs, and expenses arising from your misuse of the service, violation of these Terms, violation of law, unauthorized redistribution of intelligence, or actions taken through your account or API keys.

Governing Law and Disputes

Unless a written agreement states otherwise, these Terms are governed by the laws of the State of California, without regard to conflict-of-law rules. The parties will first attempt in good faith to resolve disputes through business escalation before filing litigation, except for urgent matters involving misuse, security threats, confidentiality, intellectual property, or unpaid amounts.

Changes to These Terms

TrapLayer may update these Terms from time to time. Material changes will be posted publicly and may require renewed acceptance for trials, purchases, or continued customer portal access. Continued use after the effective date means you accept the updated Terms.

Questions about these Terms can be sent through the TrapLayer contact, customer, partner, or operator support channels configured for your account.

Terms of Service