Cynoculist Inc.
Effective Date: September 15, 2026
Welcome to the services provided by Cynoculist Inc. ("Cynoculist," "the Company," "we," "us," or "our"), a Delaware corporation. These Terms of Use ("Terms") govern your access to and use of our marketing website, Cynoculist Hub (our AI Security Control Plane), and its products DASTA-AI, Intel GRC, and AetherSOC (collectively, the "Services").
By accessing or using our Services, you agree to be bound by these Terms, our Privacy Policy, and our Responsible AI Policy.
Cynoculist Hub is our platform. Intel GRC, DASTA-AI, and AetherSOC are licensed products on the Hub, and CynoPolicy Studio and SETA are capabilities of Intel GRC.
Provides corporate information, service overviews, and contact capabilities.
The AI Security Control Plane that federates identity, access, and auditability across licensed products.
An enterprise-grade intelligent GRC platform (also referred to as the Intelligent GRC Platform) for compliance tracking, audit control mapping, CynoPolicy Studio, SETA training, and AI-powered risk management.
An AI-enhanced, privacy-first web application security platform that automates dynamic scanning, authenticated testing, and risk-based reporting across Web apps, REST and GraphQL APIs, with a developer CLI and CI/CD pipeline integration.
An autonomous SOC platform (aethersoc.online) that ingests security alerts from connected cloud and SIEM sources (AWS GuardDuty, GCP Security Command Center, Azure Sentinel, Wazuh, and custom webhooks), triages and enriches each alert automatically, and escalates confirmed threats to designated analysts. Managed under a multi-tenant SaaS model with per-organization data isolation and five-tier role-based access control.
AI-assisted policy authoring, versioning, review, and attestation within Intel GRC.
Security Education, Training, and Awareness delivered as a licensed Intel GRC capability.
Payment services for the DASTA-AI Personal license are provided by Stripe. If you purchase a Personal license, you agree to Stripe's Terms of Service and Privacy Policy, and Cynoculist is not responsible for errors or security breaches occurring within the Stripe environment. All other licenses, including DASTA-AI Pro and Enterprise, Intel GRC, AetherSOC, Cynoculist Hub, and expert-led services, are billed by enterprise invoice under a separate written agreement that sets out the applicable fees, payment terms, and invoicing cadence.
Access to our professional applications requires account registration. You agree to:
Role Integrity: Adhere strictly to the permissions granted to your assigned role (e.g., org_admin, user). Any attempt to bypass role-based access control (RBAC) or access unauthorized functionality is a strict violation of these Terms.
You agree to use the Services only for lawful purposes. The following product-specific requirements apply:
You or your organization retain all proprietary rights to the data, text, and materials submitted to the Services ("User Content"), including audit evidence in Cynoculist and scan configurations in DASTA-AI.
You grant the Company a limited, worldwide, non-exclusive license to process your User Content solely to provide and maintain the Services (e.g., generating risk narratives).
For all applications using automated analysis, the Company utilizes a proprietary de-identification mechanism to scrub sensitive technical strings and PII before processing.
For Enterprise licensees utilizing the BYOK functionality, you are solely responsible for the procurement, security, and maintenance of your third-party AI provider keys (e.g., OpenAI/Azure). The Company is not liable for service interruptions or data breaches occurring within your third-party AI environment.
AI red-teaming services require documented client authorization for the systems, models, and environments in scope. Testing is limited to that authorization.
You retain ownership of policies you author. You grant the Company a limited license to host, process, and display that content solely to provide the Service.
SETA content and simulations are for authorized workforce training. You agree not to use training materials or phishing simulations for harassment or unauthorized targeting.
If you integrate third-party storage (e.g., AWS S3) for audit evidence, the Company acts strictly as your agent under the permissions you define.
All rights, title, and interest in the Services, including software, scanning logic, and branding, remain the exclusive property of Cynoculist. These Terms grant no rights to use the Company's trademarks, logos, or trade names without prior written consent.
All Services are provided on an "as is" and "as available" basis without warranties of any kind.
Generated or suggested policy language is decision-support only. You remain responsible for legal review and adoption of any policy.
You acknowledge that security scanning outcomes depend on endpoint discoverability and runtime patterns. Scanning depth may be impacted by target application architecture (e.g., SPA-heavy) and platform scan time limits.
Aether's AI triage verdicts (true positive, false positive, benign, needs review) are automated and best-effort. Triage accuracy depends on the quality and completeness of the underlying alert data from connected sources. Automated verdicts should not be the sole basis for incident response decisions. Confirmed threats are escalated to designated analysts for human review before case closure. The Company is not liable for security incidents resulting from reliance on automated triage verdicts without appropriate analyst validation.
SETA modules and simulations are educational. Completion records support program evidence and do not certify individual legal compliance.
To the maximum extent permitted by law, Cynoculist shall not be liable for any indirect, incidental, or consequential damages (including loss of profits or data) arising from your use of the Services.
We reserve the right to suspend or terminate your access to the Services at our discretion, without notice, for conduct that violates these Terms or is otherwise harmful to other users or the Company's business interests.
These Terms are governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to conflict of law principles.
We may update these Terms periodically. We will provide at least 30 days' notice for material changes via email or an in-app notification. Your continued use of the Services following an update constitutes acceptance of the revised Terms.
New York / New Jersey Metro Area (Remote-first)
A Delaware corporation
These Terms of Use were last updated on September 15, 2026