01 Platform Services
SigmaSec provides automated vulnerability discovery, threat intelligence correlation (CISA KEV, EPSS), dependency usage analysis, AI-generated explanations, and remediation pull requests for supported dependency upgrades.
By accessing our platform or requesting pilot onboarding, you agree to comply with these terms.
02Authorized Use & Scanning Scope
You warrant that you own or have explicit authorization to scan, analyze, and test all code repositories, cloud assets, container registries, network hosts, and endpoints configured in your SigmaSec account.
Using SigmaSec to test third-party assets without verified authorization is strictly prohibited.
03Intellectual Property & Generated Code
Your Data: You retain complete and exclusive ownership of all source code, container images, scan configurations, and finding telemetry.
Remediation PRs: All patch diffs, pull requests, and remediation scripts generated by SigmaSec for your repositories become your exclusive property upon creation.
04Service Level & Pilot Disclaimer
During evaluation and beta pilot periods, the platform is provided on an "as-is" basis. Findings, risk rankings and AI-generated explanations may be incomplete or wrong, and engineering teams must review all generated pull requests before merging into production environments.
05Questions & Support
For commercial agreements, custom master service agreements (MSAs), or legal questions, email legal@sigmasec.ai.