Terms of Service

AiTM is built for lawful, authorized offensive-security work - penetration testing, red teaming, security research and CTF or educational use - carried out within your agreed scope and rules of engagement.

You must have explicit authorization for any system, network or person you test or target. You may not use the platform against anything you are not authorized to engage, or for any unlawful purpose. You are solely responsible for holding the necessary permissions.

You are solely responsible for your own actions and for ensuring you have the authorization, consent and legal basis for your activities, and for how you use any output the AI produces.

AiTM provides a platform and tooling. We do not perform engagements on your behalf and are not a party to your activities.

You may not use the platform to attack systems or people you are not authorized to engage, to cause real-world harm to non-consenting third parties, for indiscriminate or destructive attacks, for fraud, or for anything illegal regardless of authorization.

Use of the AI is governed. We may suspend or terminate access for abuse or for violating these terms, and features may be disabled at our discretion.

You must verify your email to use paid features. You are responsible for safeguarding your credentials, API keys and any AI provider keys you add, and for all activity under your account.

We provide two-step sign-in (authenticator apps and passkeys), session management and step-up re-authentication for sensitive actions. Keep a second factor and your recovery codes safe.

Payments are made in cryptocurrency (Bitcoin, on-chain or Lightning) through our payment processor. Prices are shown in a display currency (USD by default) and settled in Bitcoin at checkout; we do not accept or store card or bank details.

You can keep a prepaid account balance ("funds") and use it to buy plans and credits. Paid plans run for the term shown at purchase (for example, a 30-day period) and can optionally auto-renew from your funds; usage allowances reset each period and unused allowance does not carry over.

Cryptocurrency payments are final and non-refundable, and account funds and credits are non-refundable. Please see the Refund Policy for full details before you pay.

The underlying AI model and provider are proprietary to AiTM and are never disclosed. AI output can be imperfect or inaccurate - verify it before relying on it, especially for security-critical work.

If you bring your own AI provider key (BYOK), that traffic is isolated to your account and billed by your provider directly; it is never metered against your plan, and we are not responsible for your provider's charges.

Our handling of your data is described in the Privacy Policy, which forms part of these terms. The desktop agent runs on your machine and we keep no copy of your source code or conversation; we keep only what is needed to provide the service.

The service is provided “as is” and “as available” to the extent permitted by law. To the maximum extent permitted, AiTM is not liable for how you use the platform, for the outcomes of your activities, or for any indirect or consequential loss.

We may update these terms; material changes will be announced in advance, and continued use after they take effect means you accept them.