End User License Agreement

01Grant of License

The Software is licensed, not sold, and is made available under one of four license types that you activate inside the Software. Subject to your compliance with this Agreement, Licensor (ThreatStrike LLC) grants you a limited, non-exclusive, non-transferable, non-sublicensable, revocable license to install and use the Software solely for your own internal use on devices you personally own and control, as follows:

• Free Trial. When you activate a trial, Licensor grants you the license described above to use the full Software for an evaluation period of three (3) days from activation. One trial is available per device, and no payment information is required to begin. When the trial period ends, the Software stops functioning until you purchase and activate a paid license.
• Personal License ($99.99/year). An annual license for non-commercial use only. Permitted uses include personal labs, Capture-the-Flag competitions, self-directed learning, and personal security research. A Personal license key may be active on up to three (3) devices you personally own and control. This license is valid for one (1) year from the date of purchase and must be renewed annually to continue use. Non-commercial restriction: a Personal license may not be used for paid client engagements, consulting or contract security work, bug bounty programs where compensation is received, Managed Security Service Provider (MSSP/MSP) services, internal corporate assessments conducted on behalf of an employer or client, or the generation of client-deliverable reports for compensation. Any of those uses requires a Consultant or Team license.
• Consultant License ($499.99/year). An annual license for individual commercial practitioners. Permitted uses include all Personal-license uses plus paid client engagements, solo consulting and contract security work, bug bounty programs, and client-ready reporting. A Consultant license key may be active on up to three (3) devices you personally own and control. This license is valid for one (1) year from the date of purchase and must be renewed annually to continue use.
• Team License ($1,999/year). An annual license for teams and organizations. Permitted uses include all Consultant-license uses plus multi-seat deployment, MSSP/MSP engagements, and internal corporate security assessments. A Team license key may be active on up to ten (10) devices within your organization. This license is valid for one (1) year from the date of purchase and must be renewed annually to continue use.

You may release ("deactivate") a device from within the Software to free that activation for use on a different device. Licensor may issue updated seat counts or license terms in future versions; the terms in effect at the time of your purchase govern your license.

Activation and validation. The Software requires a valid license key, and it activates and periodically re-validates your license with Licensor's licensing service. For licensing purposes only, the Software transmits your license key and a device identifier ("machine ID"); it does not transmit your engagement data, credentials, targets, scans, or findings for licensing. You will not circumvent, disable, tamper with, or attempt to defeat the Software's licensing, activation, device-limit, or validation mechanisms, and you will not use a license key you are not authorized to use. Licensor may suspend or revoke any license that is shared beyond its permitted device count, obtained fraudulently, charged back, or otherwise used in breach of this Agreement.

Payments. Paid licenses are sold through Licensor's third-party payment processors (Stripe for card payments and NOWPayments for cryptocurrency), whose checkout, billing, and refund terms apply to your purchase in addition to this Agreement.

02Restrictions

You will not, and will not permit any third party to:

• copy, distribute, sublicense, sell, rent, lease, or otherwise transfer the Software or any access to it;
• modify, translate, adapt, or create derivative works of the Software;
• reverse engineer, decompile, disassemble, or attempt to derive the source code of the Software, except (and only to the extent) such restriction is expressly prohibited by applicable law;
• remove, obscure, or alter any proprietary or attribution notices in the Software;
• use the Software, in whole or in part, to build or improve a competing product or service;
• use the Software to perform any activity that violates any applicable law, regulation, or third-party right, including without limitation unauthorized access to any computer system, network, account, or device.

03Authorized Use; Your Representations

The Software is a dual-use computer security testing tool. You represent and warrant, on each occasion you use the Software, that:

• you will only use the Software to assess computer systems and networks that you own or for which you have obtained explicit prior written authorization to test;
• you are solely responsible for ensuring your use complies with all applicable laws, including without limitation the U.S. Computer Fraud and Abuse Act (18 U.S.C. § 1030), the Wiretap Act, the Stored Communications Act, the U.K. Computer Misuse Act 1990, the EU NIS2 Directive, and any other laws of any jurisdiction in which you or your target operates;
• you are at least 18 years old (or the age of majority where you live) and have the legal capacity to enter into this Agreement.

You assume all risk. Misuse of the Software may violate computer-fraud, anti-hacking, wiretap, and export laws and may carry civil and criminal penalties. Licensor has no ability to verify what you do with the Software and disclaims all liability for any unauthorized, illegal, or unethical use.

Some categories of tooling bundled with or invoked by the Software carry additional category-specific legal risk that you acknowledge and accept by using them:

• Wireless capture tools (for example, aircrack-ng, airodump-ng, hcxdumptool, wifite, bettercap, bluetoothctl) can intercept wireless transmissions you are not a party to. In many jurisdictions this engages wiretap or interception statutes (in the United States, 18 U.S.C. § 2511) regardless of whether the captured traffic is encrypted. Use these tools only on networks you own or are explicitly authorized to test.
• Digital-forensics tools (for example, volatility3, sleuthkit, plaso, chainsaw, hayabusa) may operate on data that, if later introduced in legal proceedings, must satisfy chain-of-custody, integrity, and admissibility requirements. Licensor makes no representation that the Software's handling of artifacts satisfies any such requirements; you are responsible for your forensic process and documentation.
• Exploitation frameworks and offensive payloads (for example, metasploit, impacket, evil-winrm, sqlmap) may be subject to export controls under U.S. or other regulations. See § 11 Export Controls.

04Ownership

The Software is licensed, not sold. Licensor and its licensors retain all right, title, and interest in and to the Software, including all intellectual property rights. Nothing in this Agreement grants you any ownership rights in the Software.

05Third-Party Components

The Software may include or depend on third-party open-source software ("Third-Party Components"), and may invoke third-party command-line tools that you install separately, including but not limited to:

• network scanners (for example nmap, masscan, rustscan);
• web reconnaissance and fuzzers (for example ffuf, gobuster, nuclei, wpscan, sqlmap);
• authentication and password tools (for example hydra, hashcat, john, crackmapexec, evil-winrm, impacket, smbmap, smbclient);
• wireless capture tools (for example aircrack-ng, airodump-ng, hcxdumptool, wifite, bettercap, bluetoothctl);
• digital-forensics and incident-response tools (for example volatility3, sleuthkit, plaso, chainsaw, hayabusa);
• network defense and analysis tools (for example suricata, zeek, tshark);
• malware-analysis tools (for example clamscan, yara, capa, floss, ssdeep, exiftool);
• and many others installed at your direction.

Use of Third-Party Components is governed by the terms of their respective licenses, which are available with each tool or upon request. You are solely responsible for installing, configuring, and using each tool in compliance with its license and with all applicable laws. Licensor is not responsible for the operation, output, or terms of any third-party tool invoked by the Software, including any tool installed via the Software's in-app installer.

06AI Services and Data Egress

The Software supports four AI engine modes, selected by you in Settings. The choice you make determines what data leaves your device:

• Claude (via the Claude Code CLI or an Anthropic API key), governed by Anthropic's Usage Policy and Consumer / Commercial Terms.
• OpenAI / ChatGPT (via an OpenAI API key), governed by OpenAI's Terms of Use and Usage Policies.
• Google Gemini (via a Google AI Studio API key, using Google's OpenAI-compatible endpoint), governed by Google's Generative AI Terms and the Gemini API Additional Terms.
• Local LLM (via any OpenAI-compatible endpoint you point the Software at, including Ollama, LM Studio, vLLM, or llama.cpp), governed by the terms of whichever software and model you have installed locally (for example, Ollama Terms). When using a local model, no data leaves your device through the Software.

WHEN YOU SELECT A CLOUD AI ENGINE (Claude API, Claude CLI, OpenAI, or Gemini), the Software transmits your engagement context to that provider on each request. This may include: target hostnames, IP addresses, service banners, command output, tool findings, and the text of any prompt you send. Credentials stored in the OS keychain are not sent to AI providers automatically, but their plaintext may appear in command output that is sent. If your engagement scope or contract prohibits sending engagement data to a third-party processor, choose the Local LLM engine.

AI output is non-deterministic and may be incomplete, incorrect, or fabricated ("hallucinated"). The Software's AI agent may misclassify findings, miss vulnerabilities, suggest commands that fail or have unintended effects, or generate report text that is factually wrong. You must independently verify any AI-generated finding, command, or report section before relying on it for any compliance, remediation, notification, legal, or contractual purpose. Licensor disclaims all responsibility for AI output content and for any third-party AI service's availability, accuracy, latency, cost, billing, terms, or data-handling practices. You are responsible for any fees a third-party AI provider charges.

07Warranty Disclaimer

THE SOFTWARE IS PROVIDED "AS IS" AND "AS AVAILABLE," WITH ALL FAULTS, AND WITHOUT WARRANTY OF ANY KIND. LICENSOR DISCLAIMS ALL WARRANTIES, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WITHOUT LIMITATION ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, ACCURACY, OR QUIET ENJOYMENT, AND ANY WARRANTIES ARISING FROM COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

NO ADVICE OR INFORMATION OBTAINED FROM LICENSOR OR THROUGH THE SOFTWARE WILL CREATE ANY WARRANTY NOT EXPRESSLY STATED IN THIS AGREEMENT.

08Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT WILL LICENSOR BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, INCLUDING WITHOUT LIMITATION LOST PROFITS, LOST REVENUE, LOST DATA, BUSINESS INTERRUPTION, OR LOSS OF GOODWILL, ARISING OUT OF OR RELATED TO THIS AGREEMENT OR YOUR USE OF (OR INABILITY TO USE) THE SOFTWARE, WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), OR ANY OTHER LEGAL THEORY, AND EVEN IF LICENSOR HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

LICENSOR'S TOTAL CUMULATIVE LIABILITY UNDER THIS AGREEMENT WILL NOT EXCEED THE GREATER OF (A) THE TOTAL AMOUNT YOU PAID FOR THE SOFTWARE IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO LIABILITY, OR (B) FIFTY U.S. DOLLARS (US $50).

Some jurisdictions do not allow the exclusion or limitation of certain damages, so portions of this section may not apply to you.

09Indemnification

You will defend, indemnify, and hold harmless Licensor and its affiliates, officers, employees, and agents from and against any third-party claim, demand, suit, or proceeding, and all related damages, settlements, costs, and reasonable attorneys' fees, arising out of or related to: (a) your use or misuse of the Software; (b) your violation of this Agreement; or (c) your violation of any law or any right of any third party in connection with your use of the Software.

10Term and Termination

This Agreement is effective on the date you first install or use the Software and continues until terminated. License durations are as follows:

• A Free Trial license terminates automatically when its three-day evaluation period ends.
• A Personal, Consultant, or Team license expires one (1) year from the date of purchase. Upon expiration, the Software will stop functioning until a renewed license key is activated. Expiry is not termination for breach; you may renew at any time to restore access.

Your rights under this Agreement will also terminate automatically and without notice if you materially breach any of its terms, including using a Personal license for commercial purposes. Upon termination, you must immediately cease all use of the Software and destroy or delete all copies in your possession or control. Sections 2, 4, 7, 8, 9, 11, and 12-14 survive termination.

11Export Controls and Sanctions

The Software may be subject to United States export controls and trade sanctions. You will comply with all applicable export and re-export restrictions, including those of the U.S. Export Administration Regulations (EAR) and the U.S. Office of Foreign Assets Control (OFAC). You may not use, export, or re-export the Software to (or for use by) any person, entity, or country that is subject to a U.S. or U.N. embargo, sanctions list, or denied-party designation.

12Governing Law and Venue

This Agreement is governed by the laws of the United States and the state of the Licensor's primary residence, without regard to its conflict-of-laws principles. The exclusive venue for any dispute arising out of or relating to this Agreement will be the state or federal courts located in that jurisdiction, and you consent to the personal jurisdiction of those courts. The U.N. Convention on Contracts for the International Sale of Goods does not apply.

13Entire Agreement; Updates

This Agreement, together with any order form or invoice referencing it, constitutes the entire agreement between you and Licensor regarding the Software and supersedes all prior or contemporaneous agreements, proposals, or representations, whether oral or written. Licensor may update this Agreement from time to time by posting a revised version at https://threatstrike.ai/eula.html; the revised Agreement will apply to any new version of the Software you install or use after the update.

14Severability; Assignment

If any provision of this Agreement is held to be unenforceable, that provision will be modified only to the extent necessary to make it enforceable, and the remaining provisions will continue in full force and effect. You may not assign or transfer this Agreement or any rights under it without Licensor's prior written consent. Licensor may freely assign this Agreement.

15ThreatStrike Shield Browser Extension (Free)

ThreatStrike Shield is a separate, free, no-cost browser extension for Chromium-based browsers (Chrome, Brave, Edge) and Firefox-based browsers (Firefox, LibreWolf), distributed through the Chrome Web Store, Firefox Add-ons, and as a direct download (the "Extension"). The Extension is not part of the licensed Legion Software and does not require a license key, activation, payment, or device registration.

License grant. Subject to this Agreement, Licensor grants you a free, worldwide, non-exclusive, revocable license to install and use the Extension for personal or commercial purposes. Open-source components included in the Extension are additionally governed by their respective open-source licenses, which control over this Agreement as to those components.

Local operation; no data collection. The Extension runs entirely within your browser. It does not transmit your browsing history, the URLs you visit, page contents, or any personal data to Licensor or any Licensor-operated service. Its only automatic network activity is downloading public threat-intelligence blocklists from their publishers. Any other outbound request is user-initiated. In particular: the optional VirusTotal "Scan link" feature submits a link to VirusTotal solely when you invoke it and only if you have supplied your own VirusTotal API key ("bring your own key"), and that request goes to VirusTotal, a third-party service governed by its own terms, never to Licensor; and the optional one-click "Report" feature, when you invoke it and community reporting is enabled, submits only the single reported URL (plus an optional contact email, transmitted solely if you choose to provide one) to third-party anti-phishing takedown services and, if you configure one, your own webhook endpoint — never to a Licensor-operated service. Both features are off-switchable in the Extension's settings. Data handling is described in our Privacy Policy.

No guarantee of safety. The Extension is provided "AS IS." It relies on heuristics and third-party blocklists that are necessarily incomplete and that produce both false positives and false negatives. It may fail to detect a malicious or phishing site, and may warn about or block a legitimate one. The Extension is one layer of defense, not a guarantee of safety, and is not a substitute for safe browsing practices or your own judgment. You remain solely responsible for your browsing decisions.

Application of these terms. Sections 2, 4, 7, 8, 9, 11, 12, 13, and 14 apply to the Extension to the same extent they apply to the Software, except that provisions specific to paid licensing, activation, device limits, and trial expiration do not apply to the Extension.

16Contact

Questions about this Agreement may be sent to: security@threatstrike.ai

For the related Privacy Policy and Site Terms of Service, see the separate document.