Legal
Terms
What you can expect from Security Artifacts, and what it expects from you. Written in plain language on purpose.
Who you are dealing with
Security Artifacts is operated by Maysoon Ammar as a sole trader in the United Kingdom. It is one person, not a company, and there is no support team behind it. Contact details are on the masthead.
What the service is
A publication. Written research, guided labs, an automated feed of public security advisories, and a community forum. Some of it is free to read and some requires a subscription.
Everything here is information, not advice. Detection rules, analysis and lab material are published so practitioners can evaluate them against their own environment. Running something from this site in production without testing it is your decision and your risk.
Your account
- You need to be 16 or over.
- One person per account. Sharing a login with colleagues is what the Team plan is for.
- Keep your access to it secure. Anything done through your account is treated as done by you.
- You can delete it at any time by asking. See the privacy notice for what happens to your data.
Subscriptions and payment
Paid plans renew automatically until cancelled. Prices are shown on the pricing page and include any tax due.
Every paid plan starts with a 7-day trial, and nothing is charged during it. Pro and Pro+ take no card up front. Stripe collects nothing, not even a token. Team asks for a card at checkout, because an organisation buying seats is billed by invoice; it is still not charged until the trial ends.
On every plan, if there is no card on file when the trial ends, the subscription cancels itself rather than billing you. If you do nothing, nothing happens.
Cancelling. Cancel any time from your account. Access continues to the end of the period already paid for, and it does not renew after that. There is no cancellation fee and no notice period.
Refunds and the 14-day right. If you are a consumer in the UK or EU, you normally have 14 days to withdraw from a distance contract. Digital content is an exception once you have started accessing it and have agreed to that. In practice: if you have barely used the subscription and ask within 14 days, you will get your money back. This is deliberately more generous than the law requires, because arguing with somebody over £15 is worse for both of us than refunding it.
Price changes. Any increase is notified by email at least 30 days ahead and applies from your next renewal. You can cancel before it takes effect.
Card details are entered on Stripe's own hosted checkout and are never seen by this site.
What you may do with the content
Read it, use it at work, and apply what you learn. Specifically, you may run the detection rules and queries published here in your own environment, including commercially.
What you may not do:
- Republish articles in full, or resell access to them.
- Share your subscription so that people who have not paid can read members-only material.
- Scrape the site to train a model or to build a competing product.
Quoting a paragraph with a link back is fine and always will be. If you want to do something this section does not obviously allow, ask. The answer is usually yes.
What you post
You keep the copyright in anything you write here. Posting grants a non-exclusive right to display it on the site and to include it in the newsletter. You can publish the same work anywhere else, and we would rather you did.
By posting, you confirm that:
- It is yours to share. No client data, no employer telemetry, nothing under NDA.
- It does not identify a victim or an individual who has not consented.
- It contains no working exploit for an unpatched vulnerability.
- It is your own analysis, not text generated wholesale by a model and presented as yours.
Every submission is reviewed before publication. Anything that breaks the above is declined with a reason, and the community guidelines set out the rest.
Things that will get an account suspended
- Attacking the site or other members, or attempting to access accounts that are not yours.
- Using the community to distribute malware or phishing.
- Harassment.
- Repeatedly posting material you are not entitled to share.
Security research is welcome. If you find a vulnerability in this site, report it and it will be fixed and credited. Testing in good faith will not be treated as an attack. What is not welcome is testing that degrades the service for other people, or accessing other members' data to prove a point.
Availability
There is no uptime guarantee. This is one person running on shared infrastructure, and things will occasionally break. If a paid service is unavailable for a sustained period, say so and the subscription will be credited.
Liability
Security Artifacts is not liable for losses arising from your use of the information here, including any consequence of deploying a detection rule or acting on an analysis. Liability is limited to the amount you have paid in the previous 12 months.
Nothing here limits liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot lawfully be excluded. If you are a consumer, your statutory rights are unaffected by anything on this page.
Changes to these terms
Material changes are notified by email to account holders at least 30 days ahead. Continuing to use the site afterwards means accepting them. If you would rather not, you can cancel and be refunded for the unused part of the period.
Law
These terms are governed by the law of England and Wales, and its courts have jurisdiction. If you are a consumer resident elsewhere in the UK or EU, you keep the protection of the mandatory rules of your own country.