Terms of use

1. Acceptance of these terms

Reading the catalogue. The public catalogue is open and needs no account. These terms govern that use as well: by accessing Detections you accept them, and if you do not accept them you should not use the service.

Creating an account. An account is the point at which these terms become an agreement between us. Before an account exists, the sign-up screen asks you to confirm two things separately: that you agree to these terms, and that you have read the privacy notice. Neither is optional, and an account cannot be created without both. Every obligation set out below binds you from that moment.

What we keep. Each confirmation is recorded against your account with the version of the document you were shown and the moment you confirmed it. That is how either of us can answer later what was agreed and when, and it is why the confirmation is asked for rather than assumed.

When these terms change. A material change means the version in force moves, and the next time you sign in you are asked to confirm the new one before going on. Reading the catalogue never requires it; it is asked of an account, because an account is what the agreement is with.

Accepting on behalf of an organisation. If you use Detections for an organisation, you confirm that you are authorised to accept these terms on its behalf. Everywhere below, “you” then means both you and that organisation, and both are bound.

2. Who may use Detections

You may use Detections only if you are able to enter into a binding agreement and are not prohibited from doing so under any law that applies to you. You are responsible for ensuring that your use of the service is lawful where you are.

3. Your account

You are responsible for your credentials and for all activity that takes place under your account. Keep your credentials confidential, provide accurate information when you register, and tell us promptly at contacto@detections.app if you believe your account has been used without your authorisation. Enabling a second factor is the single most effective step you can take to protect it.

4. The service, and changes to it

Availability. Detections is provided on an “as available” basis. We may add, modify, suspend or discontinue any part of the service at any time, and we do not undertake that it will be available without interruption or at any particular moment.

Your work. One commitment does run the other way, and we make it deliberately rather than reserving everything: we will not quietly discard the detection content in your workspace. Every save creates an immutable version, so your own work is not overwritten, and where a change would remove something you wrote we will tell you rather than surprise you.

5. Acceptable use

You must not:

• attempt to access another workspace's content, another person's account, or any part of the service you have not been granted access to;
• probe, scan or test the security of the service except as the vulnerability disclosure policy permits;
• circumvent, disable or interfere with any access control, rate limit or other protective measure;
• place automated load on the service heavy enough to degrade it for other people, or extract its content in bulk beyond what the service makes available for that purpose;
• upload or distribute malicious code as such, as opposed to detection content describing it;
• contribute content you have no right to contribute, or misrepresent who wrote it;
• use, reproduce or redistribute catalogue content in breach of the licence that applies to it;
• use the service to violate the law, infringe anyone's rights, or impersonate another person or organisation.

6. Your content, and the rights you grant

You retain whatever rights you hold in the detection content you write. Contributing does not transfer ownership to us.

Private content. For content that stays in your workspace, you grant only the rights necessary for us to store, process and display it back to you in order to operate the service. We do not publish it, and nothing makes it public except an explicit act of yours.

Contributed content. When you contribute content to the public catalogue you select a licence for it, and you grant us a non-exclusive, worldwide, royalty-free right to host, reproduce, format, display and distribute that content as part of the catalogue under the licence you selected. You understand that others receive it under that licence, and that their rights come from the licence rather than from us.

What you confirm when you contribute. That you are entitled to contribute the content and to apply the licence you selected to it; that doing so does not infringe anyone's rights; that it contains no confidential information of a third party that you are not free to disclose; and that it does not breach an obligation you are aware of being under. These confirmations are limited to what you know and are reasonably able to determine.

7. Third-party detection content

Most of the catalogue was written by other people and published in public repositories. We do not claim authorship of it, and its availability through Detections does not replace or vary the licence it arrived under. A rule can carry two licences that are not the same — the one the upstream artefact was obtained under and the one the version published here is offered under. We state both and assert nothing about which governs; that is a licensing question and not ours to answer for you.

If you take content from here and use it, complying with the terms that apply to it is your responsibility. Ownership, attribution, what contributing grants and how to report a rights problem are set out in content and licensing. Where a licence calls for attribution it is published as a name and never as an email address; not every licence calls for it.

8. Rights we reserve

The service itself — its software, interface, design, the normalisation and analysis applied to catalogue content, the technique mappings, the relationships between rules, and the documentation around them — remains ours or our licensors'. These terms grant you no right in any of it beyond using the service as permitted here, and no right is granted by implication.

Marks. Third-party names, projects and trademarks appear on this site to identify the origin of material and describe compatibility. They belong to their owners and their use implies no sponsorship, affiliation or endorsement in either direction.

9. No warranty

To the fullest extent permitted by applicable law, Detections is provided “as is” and “as available”, without warranty of any kind, whether express, implied or statutory, including any implied warranty of merchantability, fitness for a particular purpose, non-infringement, or uninterrupted or error-free operation.

In particular, and because it is the reason people are here: a detection rule is not a guarantee. Nothing in the catalogue has been validated against your data, your platform, your log sources or your tuning. We make no representation that any rule will detect what it describes, that it will not fire on benign activity, that its technique mapping is correct or current, that it is compatible with your tooling, or that it is suitable for any purpose. Read a rule before you deploy it, test it where it will run, and treat what you find here as a starting point rather than a finished control. Detection engineering remains yours.

10. Limitation of liability

What is excluded. To the fullest extent permitted by applicable law, we are not liable for any indirect, incidental, special, consequential or exemplary loss, or for loss of profit, revenue, data, business or goodwill, arising out of or relating to your use of the service — including any security incident, intrusion, breach or loss that a detection did or did not identify — whether or not we were advised that such loss was possible.

The cap. Our total aggregate liability arising out of or relating to the service is limited to the amount you paid us for it in the twelve months before the event giving rise to the claim. Nothing on Detections is sold today, so that amount is currently nil.

What we do not try to exclude. Nothing in these terms excludes or limits any liability that cannot lawfully be excluded or limited, including liability for fraud or fraudulent misrepresentation. Where the law that applies to you does not allow one of the exclusions above, that exclusion applies only so far as that law permits, and the rest of this section continues to apply.

11. Your indemnity

You will indemnify us against claims, losses and reasonable costs arising from content you contributed, from your use of the service in breach of these terms, or from your infringement of the law or of a third party's rights. We will tell you promptly of any such claim and will not settle it in a way that admits fault on your part or imposes an obligation on you without your agreement.

12. Suspension and termination

Ending it yourself. You may stop using Detections at any time and can schedule deletion of your account from your profile. What deletion removes and what it keeps is described in the privacy notice.

Ending it on our side. We may suspend or terminate your access, in whole or in part, if you breach these terms, if your use puts the service or other people using it at risk, or where the law requires it. Where the circumstances allow it we would rather write to you first, and in most cases we will. Sections that by their nature should survive termination — the rights you granted for content already published, the reserved rights, the warranty and liability sections, and the indemnity — do survive it.

13. Paid plans

There are none. Nothing on Detections can be bought today, no payment details are collected anywhere, and the plan a workspace holds is enforced without anything being charged for it. If that changes, the terms covering a paid service will be published before anything is sold rather than after, and using Detections today does not commit you to them.

14. Changes to these terms

We may change these terms. The version on this page is always the current one and carries the date it last changed, shown at the top. If you continue to use Detections after a change takes effect, you accept the changed terms; if you do not accept them, stop using the service and delete your account.

15. General

If any provision of these terms is held to be unenforceable, it is severed and the remaining provisions continue in force. A delay or failure to enforce any provision is not a waiver of it. You may not assign or transfer these terms without our consent; we may assign them to a successor to the service. These terms, together with the privacy notice and content and licensing policy, are the whole of what has been agreed between us about the service, and replace anything said about it beforehand. Headings are for convenience and do not affect interpretation.

16. Contact

Write to contacto@detections.app. What the service stores is in the privacy notice, and how to report a vulnerability is on security.