Terms of Use.

1. Acceptance of these terms

These Terms of Use (“Terms”) form a binding agreement between you and GK Code (“GK Code”, “we”, “us”, or “our”), a company based in the United Arab Emirates and the provider of Agent Red.

By accessing the Site, submitting a pilot request, or using the Platform, you agree to these Terms and to our Privacy Policy. If you use the Platform on behalf of an organization, you agree to these Terms on behalf of that organization and confirm that you have authority to bind it. In that case, “you” refers to both you and the organization.

If you do not agree to these Terms, do not use the Site or the Platform.

2. Definitions

• Site: agent-red.com and its subpages.
• Platform: the Agent Red AI-powered security validation service, including its agents, dashboards, reports, APIs, and related software.
• Service: the Site and the Platform together.
• Scope: the specific systems, applications, APIs, source code repositories, cloud environments, mobile applications, IP addresses, domains, and time windows that you approve for testing.
• Customer Data: any data you provide to the Platform, or that the Platform accesses within your Scope, including credentials, source code, configurations, and any personal data contained in your systems.
• Output: the findings, evidence, reports, remediation guidance, and other results the Platform produces for you.
• Pilot Agreement: any separate written agreement, order form, or statement of work between you and GK Code.

3. Eligibility and accounts

• You must be at least 21 years old to use the Service.
• The Platform is intended for business and professional use by security teams. It is not offered to consumers.
• Access to the Platform is by approval only. We may accept or decline any pilot request at our discretion.
• You must provide accurate information and keep it up to date. You are responsible for all activity under your account and must keep your login credentials secure.
• Notify us immediately at info@gkcode.co if you suspect unauthorized access to your account.

4. The Service and beta access

Agent Red is currently offered as a beta. During the beta:

• Features may be incomplete, change, or be removed at any time, with or without notice.
• We do not guarantee availability, uptime, response times, or support levels unless a Pilot Agreement says otherwise.
• Access is limited to the Scope and duration we agree with you before testing begins.
• We may limit, pause, or end beta access at any time.

If you have signed a Pilot Agreement with us, its terms take priority over these Terms where they conflict.

5. Authorized testing

Agent Red performs active offensive security testing. Testing a system without its owner’s permission may be a criminal offence, including under the UAE Federal Decree-Law No. 34 of 2021 on Combatting Rumours and Cybercrimes and equivalent laws in other countries. Accordingly, you represent, warrant, and agree that:

• You own every system in your Scope, or you hold explicit written authorization from its owner to perform the testing you request, and that authorization remains valid for the entire testing period.
• Where systems are hosted by a third party, such as a cloud provider, hosting company, or SaaS vendor, you have complied with that provider’s penetration testing policies and obtained any approvals it requires.
• You will define the Scope accurately and will not add, or allow the Platform to target, any system outside it.
• You will immediately tell us, and pause testing, if your authorization is withdrawn, expires, or is in doubt.
• You will provide written proof of authorization promptly on request.

We may refuse, pause, or stop any testing if we reasonably believe it is unauthorized, outside Scope, or unlawful. You are solely responsible for any testing of systems you are not authorized to assess, and you will indemnify GK Code for it as set out in Section 17.

6. Testing risks and your responsibilities

Security testing is inherently intrusive. Even when performed carefully and within Scope, it may cause service degradation, outages, data modification, triggered alerts, account lockouts, or other unintended effects. You acknowledge these risks and agree to:

• Take and verify backups of in-scope systems and data before testing begins.
• Prefer non-production or staging environments where possible. If you include production systems, you accept the additional risk.
• Schedule testing windows and tell the relevant internal teams, managed security providers, and monitoring services, so that testing activity is not mistaken for a real attack.
• Provide test accounts and credentials with the least privilege needed, and rotate or revoke them after the engagement.
• Tell us about any fragile, safety-critical, or regulated systems in advance so they can be excluded or tested with specific safeguards.

7. Acceptable use

You must not, and must not allow anyone else to:

• Use the Service to attack, probe, or access any system you are not authorized to test, or for any unlawful, harmful, or malicious purpose.
• Use the Service, its Output, or any exploit or technique it reveals to cause harm, extort, steal data, or gain unauthorized access.
• Attack, scan, or test the Agent Red Platform or GK Code’s own infrastructure, except through a responsible disclosure process we have approved in writing.
• Reverse engineer, decompile, or attempt to extract the source code, models, prompts, or underlying techniques of the Platform, except where the law expressly permits it.
• Copy, resell, sublicense, or offer the Service to third parties, or use it to build a competing product.
• Circumvent usage limits, access controls, Scope controls, or safety guardrails.
• Share your account or access with anyone outside your organization.
• Upload malware, or any content that infringes others’ rights or that you have no right to share.

8. Customer Data and confidentiality

• Ownership: you keep all rights in your Customer Data. You grant us a limited license to process it only as needed to provide, secure, and support the Service for you.
• Output: as between you and us, you own the Output produced for you, subject to our rights in the Platform described in Section 10.
• Confidentiality: we treat Customer Data and Output as confidential. We will not disclose them except to personnel and sub-processors who need them to provide the Service and are bound by confidentiality obligations, or when the law requires it.
• Personal data: we process personal data as described in our Privacy Policy. For personal data within Customer Data, we act as your processor. You are responsible for having a lawful basis to let us process it.
• Deletion: at the end of an engagement, we delete or return Customer Data as described in our Privacy Policy or Pilot Agreement.
• Your confidentiality: you agree to keep confidential any non-public information about the Platform, including its features, performance, pricing, and techniques.

9. AI-generated output

The Platform uses artificial intelligence to discover, test, and verify security issues. Although we verify material findings, AI-generated Output may be incomplete, inaccurate, or contain false positives or false negatives. Therefore:

• No security test can find every vulnerability. A report that finds no issues does not mean your systems are secure.
• You are responsible for reviewing Output and deciding what action to take, including whether and how to apply remediation guidance.
• Output is not legal, compliance, or audit advice, and does not by itself certify compliance with any standard or regulation.

10. Intellectual property

The Service, including its software, AI agents, models, prompts, methods, designs, text, graphics, logos, and the “Agent Red” name and marks, is owned by GK Code or its licensors and is protected by intellectual property laws. Subject to these Terms, we grant you a limited, non-exclusive, non-transferable, revocable right to use the Service during your approved access for your internal security purposes. All rights not expressly granted are reserved.

11. Feedback and aggregated data

• Feedback: if you send us suggestions, ideas, or feedback about the Service, we may use them freely, without any obligation or payment to you.
• Aggregated data: we may collect and use usage data and data derived from the Service to operate, secure, and improve our products, provided it is anonymized and aggregated so that it does not identify you, your organization, your systems, or any individual. This does not permit us to disclose your Customer Data or Output.

12. Publicity

We will not use your organization’s name, logo, or trademarks, or publish a case study about your use of Agent Red, without your prior written permission. Likewise, you may not use GK Code’s or Agent Red’s name or marks in a way that suggests endorsement without our prior written permission.

13. Third-party services

The Service may rely on, link to, or integrate with third-party services, such as cloud providers, source code hosts, and AI model providers. We are not responsible for third-party services, and your use of them is governed by their own terms. Integrations you connect to the Platform are used only within your approved Scope.

14. Fees

The Platform is free during the beta. We may introduce paid plans after the beta ends. Nothing will be charged automatically: you will need to accept a paid plan and its terms before any fee applies. See our Pricing page for current details.

15. Disclaimers

To the maximum extent permitted by law, the Service and all Output are provided “as is” and “as available”, without warranties of any kind, whether express, implied, or statutory. These include warranties of merchantability, fitness for a particular purpose, accuracy, non-infringement, and uninterrupted or error-free operation. We do not warrant that the Service will detect all vulnerabilities, prevent any security incident, or meet your requirements.

16. Limitation of liability

To the maximum extent permitted by applicable law:

• GK Code will not be liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss of profits, revenue, business, goodwill, or data, or business interruption, arising out of or related to the Service, even if advised of the possibility of such damages.
• GK Code will not be liable for damage resulting from testing performed within the Scope you approved, from testing you were not authorized to request, or from your failure to meet your responsibilities under Sections 5 and 6.
• GK Code’s total aggregate liability arising out of or related to these Terms or the Service will not exceed USD 1,000.

Nothing in these Terms limits or excludes liability that cannot be limited or excluded under applicable law, including liability for fraud, gross negligence, or wilful misconduct.

17. Indemnification

You will defend, indemnify, and hold harmless GK Code and its affiliates, officers, employees, and contractors from and against any claims, damages, losses, liabilities, penalties, costs, and expenses, including reasonable legal fees, arising out of or related to:

• Testing of any system that you were not fully authorized to have tested, or that falls outside your approved Scope because of information you provided.
• Your breach of these Terms, including the acceptable use rules.
• Your Customer Data, or your violation of any law or third-party right.
• Your use of the Output, including any remediation you carry out.

18. Suspension and termination

• You may stop using the Service at any time by contacting us.
• We may suspend or terminate your access immediately, with or without notice, if we reasonably believe you have breached these Terms, if testing appears unauthorized or harmful, if required by law, or if we end the beta.
• On termination, your right to use the Service ends, we stop all testing, and Customer Data is handled as described in Section 8.
• Sections that by their nature should survive termination will survive, including Sections 5, 7, 8, 9, 10, 11, and 15 to 21.

19. Changes to these terms

We may update these Terms from time to time. We will post the updated version on this page with a new “last updated” date and, for material changes, notify active Platform users by email or in the Platform. If you continue to use the Service after the changes take effect, you accept the updated Terms.

20. Governing law and disputes

These Terms and any dispute arising out of or related to them or the Service are governed by the laws of the Emirate of Dubai and, where applicable, the federal laws of the United Arab Emirates.

Before starting formal proceedings, both parties will try in good faith to resolve any dispute by negotiation for at least 30 days after written notice. If the dispute is not resolved, the courts of the Emirate of Dubai will have exclusive jurisdiction. Either party may seek urgent injunctive relief from any competent court.

21. General

• Entire agreement: these Terms, our Privacy Policy, and any Pilot Agreement form the entire agreement between you and GK Code about the Service.
• Severability: if any provision is found unenforceable, it will be limited to the minimum extent necessary, and the rest of these Terms will remain in effect.
• No waiver: our failure to enforce a provision is not a waiver of our right to do so later.
• Assignment: you may not assign these Terms without our written consent. We may assign them in connection with a merger, acquisition, or sale of assets.
• Force majeure: neither party is liable for delays or failures caused by events beyond its reasonable control.
• Export and sanctions: you will not use the Service in violation of applicable export control or sanctions laws, or on behalf of any sanctioned person or country.
• Language: these Terms are written in English. If they are translated, the English version prevails to the extent permitted by law.
• Notices: we may send notices to the email address associated with your account or pilot request. You may send notices to info@gkcode.co.

22. Contact us

For questions about these Terms, contact: