Terms of Service

Pentest Today is operated by Crucible Fund LLC, a Delaware limited liability company ("we", "us", "our"). These Terms of Service form a binding agreement between you, or the organization you represent, and Crucible Fund LLC.

By creating an account, subscribing, or using the service, you accept these terms. If you are accepting on behalf of an organization, you confirm that you have authority to bind that organization. If you do not accept, do not use the service.

Our Acceptable Use Policy and Privacy Policy are part of this agreement. You must be at least 18 years old to use Pentest Today.

Pentest Today performs automated security testing against targets you specify, and generates security documentation from what it finds and from information you provide. That includes non-destructive reconnaissance and scanning, which does send active probes such as injection and authentication test payloads, an AI agent that probes targets you have entered as in scope, and generated security policies, architecture diagrams, questionnaire answers, and pentest reports.

Automated testing is not exhaustive. It finds a subset of the issues a target may have, and the absence of a finding is not evidence that a system is secure. You remain responsible for your own security program.

You are responsible for the accuracy of the information on your account, for keeping your credentials secure, and for everything that happens under your account. Tell us promptly if you believe your account has been used without your permission.

Log-in credentials belong to one named person and must not be shared. Your organization may hold as many accounts as it needs, and the subscription is not charged per seat.

Creating an account is free. A free account can set up its scope and run one pentest. Runs that fail with an error do not count against that allowance.

A subscription costs $499 USD per year and is what unlocks the results: the detail of each finding, including its title, the evidence, the reproduction steps, and the remediation guidance, along with generated reports and further pentest runs. Without a subscription you can still see how many issues were found, at what severity, in which category, and on which of your own assets.

Payment is processed by Stripe. Prices exclude taxes, which we add where required.

Fees are non-refundable except where the law requires otherwise. We do not refund partial or unused periods, and terminating an account for breach of these terms or of the Acceptable Use Policy does not entitle you to a refund.

If we discontinue the service during a term you have paid for, we refund the unused portion on a pro rata basis. If you think you have been charged in error, email scott@manager.ai before opening a chargeback and we will look into it.

Our Acceptable Use Policy sets out what is and is not permitted, and it forms part of these terms. Breaking it is a breach of this agreement.

You keep ownership of everything you put into the service and of the reports and documents it generates for you. You give us the permission we need to host, process, and transmit that material for the purpose of operating the service and producing your results, including sending relevant parts to the AI providers described in our Privacy Policy.

Generated documents are yours to use, publish, and share as you see fit.

One exception. Material captured from a target you were not authorized to test is not yours, and nothing in this section grants you any right to it. We handle that material as described in the Acceptable Use Policy.

Pentest Today generates drafts tailored to the information it has about your environment. Those drafts are a starting point, not professional advice.

• Generated policies, plans, and questionnaire answers are not legal advice and are not a substitute for a lawyer or a qualified auditor.
• Nothing we produce grants a certification, an attestation, or an audit opinion. We are not an auditor and we do not certify anyone.
• Reports describe what the automated testing observed. Review them before you rely on them or send them to a third party.

The service is provided as is and as available, without warranties of any kind, whether express or implied, including any implied warranty of merchantability, fitness for a particular purpose, or non-infringement. We do not warrant that the service will be uninterrupted, error free, or that it will find every vulnerability in a target.

To the fullest extent the law allows, neither party is liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, or data.

Our total liability arising out of or relating to this agreement is limited to the greater of the amount you paid us in the twelve months before the event giving rise to the claim, or $100. These limits do not apply to your obligations under the Acceptable Use Policy or to your indemnity below.

Some jurisdictions do not allow the exclusion of certain warranties or the limitation of liability for incidental or consequential damages. Where that is the case, the exclusions and limits above apply only to the maximum extent that jurisdiction permits, and nothing here limits liability that cannot lawfully be limited.

You will defend and indemnify Crucible Fund LLC against claims, losses, and costs, including reasonable legal fees, arising from your use of the service, your content, or your breach of this agreement. That expressly includes any claim arising from testing a system you were not authorized to test.

You may stop using the service and cancel at any time. We may suspend or terminate an account that breaches these terms or the Acceptable Use Policy, or where we are required to by law. A termination for breach does not entitle you to a refund.

We may also discontinue the service, or stop offering it to you, on 30 days' notice. If we do that during a term you have paid for, we refund the unused portion and you can export your reports and generated documents throughout the notice period.

If you want your data removed after you stop using the service, email scott@manager.ai. We confirm receipt within five business days and complete the deletion within 30 days, subject to the records we are required to keep, which the Privacy Policy sets out.

We may update these terms as the service changes. When a change is material we will give notice by email or in the app at least 30 days before it takes effect. Continuing to use the service after that means you accept the updated terms. The effective date and version are shown at the top of this page.

If you do not accept a material change, you can cancel before it takes effect and we will refund the unused portion of your term.

This agreement is governed by the laws of the State of Delaware, United States, without regard to its conflict of laws rules. The parties submit to the exclusive jurisdiction of the state and federal courts located in Delaware.

Crucible Fund LLC, a Delaware limited liability company. Questions about these terms, and legal notices, go to scott@manager.ai.