Terms of Service

Effective 27 August 2026.

These terms are an agreement between you and the company described below. They apply from the moment you create a Default RED™ account, buy something from us, or use any of our websites — whichever happens first.

Read them. If you do not accept them, do not create an account and do not buy anything from us.

1. Who you are contracting with

Default RED™ is operated by:

“We”, “us” and “our” mean that company. “You” means the person accepting these terms, and — where you are acting for an organisation — that organisation as well. See section 5.

2. What these terms cover, and what takes precedence

These are the general terms. They govern everything that no more specific document governs: your account, your profile, invoicing and payment, the email we send you, advertising on our surfaces, and your use of our public websites.

Some things you use will have their own document. When two documents disagree, this is the order that decides it — earlier beats later, but only on the specific point where they actually conflict:

1. A written agreement signed by both of us. Enterprise and procurement contracts sit at the top. If you have one, it wins.
2. A product licence. The terms attached to a licence govern what that licence entitles you to.
3. A service agreement you accepted at signup. Each Default RED service asks you to accept its own agreement the first time you use it, and that agreement governs that service.
4. These general terms. Everything else, and every gap the documents above leave.

Two documents are not in that list because they are not agreements. The Privacy Policy describes what we do with your personal data and is incorporated into these terms by reference. The Disclaimer sets out the limits of what our products, our writing and our numbers should be relied on for.

3. Who may use Default RED

You may use Default RED if all of the following are true.

You are at least 18 years old. Our products are professional security tooling and our commercial relationship involves payment. We do not knowingly provide them to children, and we do not offer a version for children. If we find that an account belongs to someone under 18, we will close it.

You have the capacity to enter a contract, and you are not barred from doing so under any law that applies to you.

We can lawfully deal with you. We are an Indian company and we are bound by Indian export, sanctions and trade law. We do not sell to, and will not knowingly provide services to, anyone in a country or territory we have listed as not served, or anyone on a sanctions or denied-party list that binds us.

You are somewhere we sell. Which countries we sell to, and what support comes with a purchase in each, is set out in Where we sell. That page is part of these terms. It says something important that is worth repeating here: for a large group of countries, we do not know your local law on buying and running security testing tools, we cannot check it for you, and we are not able to advise you on it. If you think a purchase like this may not be permitted where you are, do not make it.

We may refuse, cancel or reverse any order where we conclude we cannot lawfully or reasonably supply you. Where we cancel an order for that reason, we refund it, less any payment fees or charges that we cannot recover.

4. Your account

One account, one person. A Default RED account identifies a human being. Do not share your password or your session with anyone, do not let anyone else use your account, and do not create an account for someone else to use as though it were theirs. Where several people need access to the same work, use an organisation (section 5) and give each of them their own account.

Keep your details accurate. We use what is on your account to bill you, to work out what tax applies, to decide what we may lawfully sell you, and to reach you when something is wrong. A wrong country or a dead email address breaks all four.

Keep it secure. You are responsible for what is done through your account. Choose a password you have not used elsewhere, turn on every additional protection we offer, and tell us at support@defaultred.com as soon as you think someone else has access. We will act on that faster than on anything else you can send us.

Your account is yours to close. Closing it is a separate thing from leaving an individual service — you can stop using one service and keep the account, and you should not have to delete everything to get out of one product. What happens to your data when you close the account is in the Privacy Policy.

5. Organisations

Much of Default RED is bought and used by organisations rather than individuals. When you create an organisation, join one, buy on its behalf, or accept a document for it, you are telling us that you are authorised to do that — and we are entitled to rely on that.

If you turn out not to have been authorised, you accept these terms personally for what you did, and you are responsible for it.

An organisation’s owners and administrators can see and manage what happens inside it: who is a member, what has been bought, what has been spent, and what its members have done with organisation resources. That visibility is the point of an organisation, and it is not something an individual member can switch off. Your personal account — your profile, your own privacy settings, your other memberships — stays yours and is not exposed to them by joining.

6. Acceptable use

This section applies to everything we run. Individual services add their own rules; none of them relax these.

Do not:

• use Default RED to access, test, disrupt or interfere with any system you do not own and do not have written authorisation to test;
• use it to break any law that applies to you, to us, or to the target;
• attack, overload, probe or reverse-engineer our own infrastructure, except under a bug bounty program of ours that expressly permits it;
• circumvent any licence check, quota, paywall, rate limit or access control we put in place;
• resell, sublicense, rent out or white-label what we provide, unless a signed agreement says you may;
• use what we provide to build or train a competing product;
• upload or transmit malware to systems outside the scope you are authorised to test, or use our infrastructure to distribute it;
• impersonate anyone, or misrepresent your affiliation with any person or organisation;
• harass, threaten or abuse anyone — including the people who answer our support address.

We may suspend or remove access that is being used in any of these ways. Where we can tell you first, we will. Where the use is causing active harm, we will act first and explain afterwards.

7. Authorisation is yours to hold

Our products perform offensive security work. Some of them do it autonomously, inside a scope you define.

You are responsible for every target you point them at. You must own it, or hold written authorisation from whoever does, and that authorisation must cover the work being done and must remain valid for as long as the work runs. Keep it. We may ask you for it, and a claim that you had permission is worth whatever the document says and nothing more.

Set your scope carefully. Where a product acts on its own within a scope you gave it, what it does inside that scope is your responsibility, including against a system you did not intend to include. We cannot tell the difference between a target you meant to authorise and one you added by mistake, and neither can the tool.

Nothing in this section makes us responsible for obtaining your authorisation, reviewing your scope, or judging whether your testing is lawful where you are doing it.

8. Money

Prices. The price of anything is what is shown at the point of purchase, in the currency shown. We can change our prices, and a change never affects something you have already paid for. For a subscription, a price change takes effect at your next renewal and we will tell you before that renewal.

Tax. Prices are exclusive of tax unless the page says otherwise. We add GST and any other tax we are required to collect, worked out from the billing details you give us — which is why the country, state and, where it applies, the GSTIN on your billing profile need to be right. If they are wrong and we under-collect, the shortfall is yours to make good.

Invoices. We issue an invoice for what you buy, to the billing details on your account at the time. Raise a problem with an invoice within 30 days of the date it was issued; after that we will treat it as accepted, which does not affect any right you have that cannot be limited that way.

How you pay. Payments are handled by our payment provider. We do not see or store your full card number. Your relationship with the provider is subject to their terms as well as ours, and a payment they refuse is a payment we cannot accept.

Subscriptions renew. A subscription continues, and we keep charging for it, until it is cancelled. You can cancel at any time from your account, and cancelling stops the next renewal rather than the period you have already paid for — you keep what you bought until that period ends.

When a payment fails. We may retry it, and we may suspend the paid service while it is outstanding. Suspension is not termination: settle it and the service comes back. If it stays unpaid, we may end the subscription and, where the amount is properly due, recover it.

Refunds. Refund terms are shown at the point of purchase and those are the terms that apply to that purchase. Beyond them, we are not obliged to refund a change of mind. We do refund where we cancel an order under section 3, where we are required to by law, and where we simply failed to deliver what you paid for.

Currency and fees. You pay in the currency shown at checkout. Anything your bank or card issuer adds — conversion, cross-border fees — is between you and them, and we cannot see it or refund it.

9. Email we send you

Some email is not optional. While you hold an account we will send you messages about that account: security alerts, password and sign-in events, receipts and invoices, changes to these terms, and notices about a service you use. These are part of the service and you cannot unsubscribe from them without closing the account.

Everything else needs your consent. Newsletters, product announcements, offers and anything else we send to market to you go out only where you have opted in, you can withdraw that consent at any time from your account or from the unsubscribe link in the message, and withdrawing is as easy as giving it was. Withdrawing marketing consent does not affect the messages in the paragraph above, and it does not affect your account.

We do not sell your email address.

10. Advertising

We show advertising on some of our surfaces, and we operate advertising and affiliate programs that other people can buy into.

If you see ads. Whether they are personalised is your choice, and the controls are in your account. An advertisement is not an endorsement: what an advertiser says about their product is theirs, your dealings with them are between you and them, and we are not a party to them. What we use to choose which ads you see is described in the Privacy Policy.

If you advertise. You are responsible for your creative, your claims, your landing pages and your compliance with advertising law wherever your campaign runs. We may refuse a campaign, remove one, or stop working with an advertiser, and we do not have to explain a refusal.

If you earn from referrals. What you earn, how it is calculated and when it is paid are set out in the agreement for that program. Any earnings figure we show you before you join — in a calculator, an example or a projection — is an illustration produced from inputs you chose. It is not a forecast and it is not a promise. Tax on what you earn is yours.

11. What you give us

Your content stays yours. Anything you upload, write, configure or produce using Default RED belongs to you. You give us the permission we need to run the service — to store it, process it, back it up, and show it back to you and to the people you have shared it with — and nothing beyond that. That permission ends when the content does.

You are responsible for what you upload, including that you have the right to upload it.

Feedback is free. If you send us a suggestion, a bug report or an idea for a feature, we can use it without owing you anything and without keeping it confidential. Do not send us something you need us to treat as a secret; if you need that, ask us for an agreement first.

12. Our intellectual property

Default RED, the Default RED logo, our product names and our marks are ours. Our software, documentation, designs and written material are ours or our licensors’. Nothing in these terms transfers any of it to you.

What you get is permission to use what you have paid for, for as long as you have paid for it, within the limits of these terms and of any licence attached to it. You may not copy, modify, decompile or create derivative works from our software except to the extent the law says you may regardless of what a contract says.

Our documentation and this website may be read, quoted and linked to freely. Republishing them wholesale is not permitted without our agreement.

13. Third parties

Running Default RED means relying on other companies — for hosting, payments, authentication and delivery. Which ones, and what they receive, is in the Privacy Policy.

Our sites also link to places we do not run. We do not control them, we do not check them, and linking to one is not an endorsement of it.

14. Availability and changes

We try to keep Default RED running and to tell you when it is not. We do not promise an uptime figure, and unless a signed agreement gives you a service level, there are no credits for downtime.

We change our products continuously. Features arrive, change and are removed. Where we retire something you are paying for, we will give you reasonable notice and, where you have paid in advance for a period you will not get, a proportionate refund.

We are still launching. Parts of Default RED are in testing, and a service may run at reduced capacity or not be available at all in a country we otherwise sell to.

15. Suspension and ending it

You can leave whenever you like. Cancel your subscriptions, leave the services you have signed up to, or close your account.

We may suspend your access where you breach these terms, where an amount is overdue, where we are required to by law, or where continuing would expose us or someone else to real harm. We will restore access once the reason for it is resolved.

We may end this agreement on reasonable notice, or immediately where you have breached it seriously, where we are legally obliged to, or where you have been suspended and the reason has not been resolved.

What survives. Ending this agreement does not cancel money you already owe, and it does not undo the sections that are meant to outlive it — 11 on feedback, 12, 16, 17, 18 and 19.

16. What we do not promise

Default RED is provided as it is and as it is available.

To the fullest extent the law allows, we exclude all warranties, conditions and representations that are not written in these terms — including any implied warranty of merchantability, fitness for a particular purpose, or non-infringement.

In particular, we do not warrant that our products will find every vulnerability in a system, that anything they report is accurate or complete, that a system they have tested is secure, or that using them makes you compliant with any standard, framework or regulation. A tool’s findings are an input to your judgement, not a substitute for it. This is set out at more length in the Disclaimer.

17. Liability

Nothing in these terms limits liability that cannot lawfully be limited — including liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, and for anything else the law does not permit us to exclude.

Subject to that:

Neither of us is liable for indirect loss. That means loss of profit, loss of revenue, loss of anticipated savings, loss of business or goodwill, and any loss that is indirect or consequential, however it arises.

We are not liable for your data being lost or corrupted beyond restoring it from the backups we hold. Keep your own copies of anything you cannot lose.

Our total liability is capped at the greater of the amount you paid us in the twelve months before the event giving rise to the claim, or ₹10,000. That cap applies to everything arising out of or connected with these terms, taken together, not per claim.

We are not liable for what you did with the product. Testing you were not authorised to do, damage to a system you pointed a tool at, and the consequences of a scope you set are yours.

18. Indemnity

If someone brings a claim against us because of how you used Default RED — in particular, testing you were not authorised to carry out, or a breach of section 6 or section 7 — you will cover our reasonable costs of dealing with it, including legal fees and anything we are ordered or reasonably agree to pay.

We will tell you about a claim promptly, we will not settle it without asking you, and we will let you take conduct of the defence if you want it and can handle it properly.

19. Governing law and courts

These terms, and any dispute arising out of them or out of your use of Default RED, are governed by the laws of India.

The courts of New Delhi have exclusive jurisdiction. If you are a consumer in a country whose law gives you the right to bring proceedings where you live, this clause does not take that right away.

Talk to us first. Before starting proceedings, email legal@defaultred.com with what the problem is and what you want done about it. Most disputes end there, and it costs both of us nothing to try.

20. Changes to these terms

We will change these terms from time to time.

Where a change materially affects your rights or obligations, we will tell you before it takes effect — by email to your account address, or in the product — and give you reasonable notice. If you do not accept the change, your remedy is to stop using Default RED and close your account before it takes effect; continuing to use it afterwards means you accept it.

Editorial changes — fixing a typo, clarifying wording that already meant what it now says more plainly, updating a link — take effect when published and do not get a notice. The date at the foot of this page tells you when it last changed in substance.

21. The rest

Notices to us go to legal@defaultred.com, or to the registered office in section 1. Notices to you go to the email address on your account, and are treated as received when we send them, so keep it current.

Assignment. You may not transfer this agreement to anyone else without our written agreement. We may transfer it as part of a reorganisation or a sale of the business, and if we do, your rights under it are unaffected.

Severability. If a court finds part of these terms unenforceable, that part is cut back as far as it needs to be, or removed, and the rest stands.

No waiver. If we do not enforce something straight away, we have not given up the right to enforce it later.

No partnership. These terms do not make either of us the other’s agent, partner, employee or joint venturer.

Entire agreement. These terms, together with the documents named in section 2, are the whole agreement between us about their subject matter, and they replace anything said before. This does not exclude liability for fraudulent misrepresentation.

Force majeure. Neither of us is in breach for a delay or failure caused by something genuinely outside our control. It does not excuse paying money that is due.