See also: Privacy Policy
These Terms of Service (“Terms”) are a legal agreement between you (“you,” “your,” or “Customer”) and Crawdad Security, Inc., a Delaware corporation (“Crawdad,” “we,” “us,” or “our”). They govern your access to and use of the Crawdad software, applications, APIs, websites, and related services (collectively, the “Service”).
By clicking “I agree,” creating an account, or otherwise accessing or using the Service, you agree to be bound by these Terms. If you do not agree, do not access or use the Service. If you are entering into these Terms on behalf of a company or other legal entity, you represent that you have the authority to bind that entity, and “you” refers to that entity.
Crawdad is a runtime security proxy for AI agents. In its typical configuration, Crawdad runs locally on your machine or infrastructure and sits between AI agents and the large language model (“LLM”) providers those agents call. Crawdad inspects agent traffic for threats such as prompt injection and data exfiltration, attributes activity to the originating process, and enforces security policies you configure.
Crawdad is offered in multiple forms, which may include a free individual tier, paid subscription tiers, a fleet/management console for administering multiple deployments, and enterprise and partner arrangements. The specific features available to you depend on the tier or plan you select.
We may update, improve, or change the Service over time. We may add, modify, or remove features. We will not make changes that materially reduce the core security functionality of a paid tier during a paid term without notice.
This section describes how the Service processes data. It is important. Please read it carefully.
In its default configuration, Crawdad performs its security analysis locally, on your own machine or infrastructure. In this default configuration, the raw content of the traffic Crawdad inspects — the prompts, responses, and payloads passing between your agents and your LLM providers — is not transmitted to Crawdad Security, Inc. and does not leave your environment as part of Crawdad’s analysis. This is what we mean when we describe Crawdad as “zero-knowledge” by default: in the default local configuration, we do not receive, store, or have access to the content of your inspected traffic.
The zero-knowledge property applies to the default local configuration. Its limits are important to understand:
To provide the Service, we collect and process certain data directly, including account information (the email address you provide and your selected plan), authentication data (API keys and credentials, stored hashed where applicable), usage and operational data (such as API call counts, plan limits, timestamps, version and platform information, and IP address at signup, used for rate-limiting and to record your acceptance of these Terms), and payment data (processed by our third-party payment processor; we do not store full payment card numbers). Our handling of this data is described in our Privacy Policy, which is incorporated into these Terms by reference.
You are responsible for how you configure and deploy Crawdad, including which LLM providers you route to, which (if any) external analysis backends you enable, how you deploy any fleet console, and what data your agents process. You are responsible for ensuring your use of the Service complies with all laws and third-party terms applicable to you and to the data your agents handle.
You must provide accurate information when you create an account and keep it current. You are responsible for safeguarding your account credentials and API keys, and for all activity that occurs under your account. Notify us promptly of any unauthorized use. You must be at least the age of majority in your jurisdiction and not barred from using the Service under applicable law.
Crawdad’s software is made available under the Business Source License 1.1 (BSL 1.1) or such other license as we specify for a given component. Your rights to use, copy, modify, and distribute the software are governed by the applicable software license. Except for the rights expressly granted under that license, we and our licensors retain all right, title, and interest in and to the Service and the software, including all intellectual property rights.
If you give us feedback or suggestions, you grant us a non-exclusive, perpetual, irrevocable, royalty-free license to use it without restriction or obligation to you.
You retain all rights to the data and content that your agents process and that you route through your own deployment of Crawdad. As described in Section 2, in the default configuration we do not receive that content. These Terms do not grant us any ownership of it.
The Service offers a free tier and one or more paid tiers. Fees for paid tiers are as described at the point of purchase or in an applicable order or agreement.
Paid subscriptions are billed in advance on a recurring basis and renew automatically at the end of each billing period unless you cancel before renewal. By subscribing, you authorize us and our payment processor to charge your payment method on a recurring basis.
You may cancel a paid subscription at any time; cancellation takes effect at the end of the current billing period. Fees are non-refundable except as required by applicable law.
Fees are exclusive of taxes. You are responsible for all applicable taxes other than taxes on our net income.
We may change our fees. For paid subscriptions, we will provide notice of fee changes, and changes will take effect on your next renewal.
Each plan includes a monthly request-inspection limit. If your usage exceeds this limit during a billing cycle:
Upgrading your plan restores full service immediately. Security protection is never reduced due to billing state — requests that are allowed through are always fully inspected. Enforcement applies only to the volume of new requests, not to the quality of inspection.
You agree not to, and not to permit others to:
We may suspend or terminate access for violations of this Section.
The Service interoperates with third-party services you choose, including LLM providers, and may rely on third-party providers for functions such as payment processing and email delivery. Your use of those third-party services is governed by their terms, not ours. We are not responsible for third-party services, and their availability or behavior is outside our control.
Please read this Section carefully. It limits what we promise.
Security is probabilistic, not absolute. Crawdad is a security tool designed to reduce risk; it does not and cannot guarantee that it will detect or prevent every threat, attack, prompt injection, exfiltration attempt, or other malicious or harmful activity. No security product can. You remain responsible for your own security posture, and Crawdad is one layer of defense, not a complete substitute for sound security practices.
THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE,” WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. We do not warrant that the Service will be uninterrupted, error-free, secure, or that it will detect or prevent any particular threat. To the extent any warranty cannot be disclaimed as a matter of law, it is limited to the minimum extent permitted.
Please read this Section carefully. It limits our liability to you.
TO THE MAXIMUM EXTENT PERMITTED BY LAW:
(a) No indirect damages. Neither party will be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of profits, revenue, data, goodwill, or business, arising out of or relating to these Terms or the Service, even if advised of the possibility of such damages.
(b) Liability cap. Our total aggregate liability arising out of or relating to these Terms or the Service will not exceed the greater of (i) the total fees you paid to us for the Service in the twelve (12) months immediately preceding the event giving rise to the liability, or (ii) one hundred U.S. dollars ($100).
(c) Free tier. If you use the Service without charge, our liability to you is limited to the amount described in (b)(ii).
(d) Basis of the bargain. The disclaimers and limitations in these Terms reflect the allocation of risk between the parties and are a fundamental basis of the bargain. They apply even if a limited remedy fails of its essential purpose.
You agree to indemnify and hold harmless Crawdad Security, Inc. and its officers, members, employees, and agents from any claims, damages, liabilities, and expenses (including reasonable legal fees) arising out of (a) your use of the Service, (b) your violation of these Terms, (c) your violation of any law or third-party right, or (d) the data or content your agents process.
These Terms apply while you use the Service. You may stop using the Service and close your account at any time. We may suspend or terminate your access if you violate these Terms, if required by law, or if necessary to protect the Service or other users. We may also discontinue the Service or a tier with reasonable notice.
Upon termination, your right to use the Service ends. Sections that by their nature should survive termination (including Sections 2, 4, 8, 9, 10, 12, and 13) will survive.
These Terms are governed by the laws of the State of New York, without regard to its conflict-of-laws rules. Any dispute arising out of or relating to these Terms or the Service that cannot be resolved informally will be brought exclusively in the state or federal courts located in New York, and you and we consent to the personal jurisdiction of those courts.
We may modify these Terms from time to time. When we make material changes, we will update the “Version” and “Last updated” date above and take reasonable steps to notify you (for example, by requiring re-acceptance at your next login, by email, or by notice in the Service). Your continued use of the Service after changes take effect, or your acceptance of the updated Terms, constitutes acceptance of the changes. If you do not agree to the updated Terms, you must stop using the Service.