Terms of Service

Access to the Services may require a paid subscription. Subscription fees, billing cycles, and payment terms are described in your order form or on our pricing page.

• All fees are stated in U.S. dollars and are non-refundable unless otherwise specified.
• Subscriptions automatically renew at the end of each billing period unless you cancel before the renewal date.
• We reserve the right to change our pricing with 30 days' notice. Price changes will take effect at the start of the next billing period.
• Failure to pay may result in suspension or termination of your access to the Services.

You agree not to:

• Use the Services for any unlawful purpose or in violation of any applicable laws or regulations.
• Reverse engineer, decompile, or disassemble any part of the Services.
• Attempt to gain unauthorized access to the Services, other accounts, or related systems.
• Use the Services to transmit malware, spam, or other harmful content.
• Resell, sublicense, or redistribute the Services or Mallory Data without our prior written consent, except as permitted in Section 9.
• Interfere with or disrupt the integrity or performance of the Services.

“Mallory Data” means the data, content, and intelligence the Services make available to you, including vulnerability and exploitation data, observables and indicators, threat actor and malware profiles, stories, enrichments, scores, correlations, and summaries, in any form, whether delivered through the application, API, MCP, feeds, exports, reports, or integrations. Mallory Data is part of the Services and is subject to Section 6, whether or not the individual facts it describes are publicly available. Mallory's selection, compilation, enrichment, and analysis of those facts are its property. Mallory Data does not include Customer Data.

License. Subject to these Terms and your subscription, Mallory grants you a limited, non-exclusive, non-transferable, non-sublicensable license, during your subscription, to use Mallory Data solely for your internal security operations, such as detection, investigation, incident response, vulnerability management, threat hunting, and reporting to your own personnel, unless your order form expressly permits a broader use. If you use the free Community plan, this license is limited to your personal, non-commercial use.

Third-Party Tools. You may send Mallory Data to third-party tools and platforms you use to run your security program, such as SIEM, SOAR, ticketing, or AI assistant tools (“Third-Party Tools”), provided that: (a) each Third-Party Tool processes Mallory Data solely on your behalf and to provide its services to you; (b) the provider of the Third-Party Tool does not use Mallory Data for its own purposes, including to develop or improve its products, to build or enrich datasets or threat intelligence, or to train, fine-tune, or evaluate artificial intelligence or machine learning models; and (c) you remain responsible for each provider's handling of Mallory Data. If you learn that a provider is using Mallory Data in a way this Section does not permit, you will promptly notify us and take reasonable steps to stop that use.

Restrictions. Except as expressly permitted in this Section or your order form, you will not, and will not permit any third party to:

• Sell, resell, license, sublicense, distribute, publish, or otherwise make Mallory Data available to any third party.
• Use Mallory Data to build, enrich, or benchmark any product, service, dataset, or threat intelligence offering that is provided to third parties or that competes with the Services.
• Use Mallory Data to train, fine-tune, or evaluate artificial intelligence or machine learning models. Providing Mallory Data as input to an AI tool to perform your internal security operations is permitted if the tool's provider does not retain it to train or improve its models.
• Scrape, bulk download, systematically copy, or store Mallory Data beyond what is reasonably necessary for your permitted use.
• Remove or obscure any attribution or proprietary notices in Mallory Data.

After Termination. When your subscription ends, your license to Mallory Data ends and you will stop using and delete it. You may keep Mallory Data that has already been incorporated into your own security records, such as tickets, incident reports, detection rules, and blocklists, for your internal use, subject to this Section. This Section survives termination of these Terms.

These Terms are effective until terminated. You may terminate your account at any time by contacting us. We may suspend or terminate your access to the Services at any time for any reason, including breach of these Terms.

Upon termination, your right to use the Services will immediately cease, and Section 9 governs any Mallory Data you retain. We will make your Customer Data available for export for 30 days following termination, after which we may delete it.

Entire Agreement. These Terms, together with the Privacy Policy and any order forms, constitute the entire agreement between you and Mallory regarding the Services.

Severability. If any provision of these Terms is found to be unenforceable, the remaining provisions will remain in full force and effect.

Waiver. The failure of Mallory to enforce any right or provision of these Terms shall not constitute a waiver of such right or provision.

Assignment. You may not assign these Terms without our prior written consent. We may assign these Terms without restriction.