Terms of Use

x17 is an autonomous AI agent that hunts ecommerce storefronts for exploits. It probes a storefront you own or are authorized to test against the x17 exploit catalog — known abuse classes across promo, pricing, loyalty, checkout, account, referral, and return logic — and reports the classes the storefront is exposed to, each with a proof of concept, an estimated impact, and a recommended fix. We also offer a free, read-only exposure scan.

This section matters more than any other one.

By connecting a storefront or submitting a URL for a scan, you represent and warrant that you own that storefront or have explicit authorization from its owner to commission security testing against it. You may not point the Service at any site you do not control or lack authorization for. We may require written proof of ownership or authorization before or after running any scan, and we will refuse or halt scans we believe are unauthorized.

Our scans are designed to be non-destructive: the Vulnerability Agent does not complete real purchases, does not access real customer accounts or data, and is rate-limited to avoid disrupting your site. You are responsible for notifying any third parties (such as your hosting provider or security team) whose policies require notice of authorized testing.

If you submit a storefront you were not authorized to test, you are solely responsible for the consequences, and you will indemnify us as described in Section 09.

You must provide accurate information when creating an account and keep your credentials secure. You are responsible for all activity under your account. The Service is for business use by people 18 or older.

You agree not to:

• use the Service to discover, exploit, or facilitate the exploitation of vulnerabilities in any system you are not authorized to test;
• use findings, alerts, or reports to harm any third party or to commit fraud;
• resell, sublicense, or provide the Service to third parties without our written agreement;
• probe, disrupt, or reverse engineer the Service itself, or attempt to access other customers' data;
• use the Service in violation of applicable law.

We may suspend or terminate accounts that violate this section immediately and without refund.

You retain all rights to the data you send us, including purchase events and storefront configurations. You grant us a license to process that data solely to provide the Service. You are responsible for having the legal right to share the data you send us, including any personal information about your customers. Our handling of personal information is described in the Privacy Policy.

Vulnerability findings about your storefront are your confidential information. We do not publish, share, or disclose them to anyone but you, except as required by law. We may use aggregated, de-identified patterns from across the platform to improve detection, in ways that never identify you or expose your vulnerabilities.

Paid plans are billed through Stripe on the schedule shown at purchase. Plans renew automatically until canceled; you can cancel anytime and your plan remains active through the end of the paid period. Except where required by law, fees are non-refundable. We will give at least 30 days' notice before any price change takes effect on your plan.

No security product finds every vulnerability or stops every attack, and we do not promise otherwise. The Service is provided "as is" without warranties of any kind, express or implied. x17 supplements — it does not replace — your own security program, fraud controls, and judgment. We are not responsible for losses from exploits the Service did not detect or alerts you did not act on.

You will indemnify and hold x17 harmless from claims, damages, and costs (including reasonable attorneys' fees) arising from your breach of these terms — in particular Section 02 (Authorization to test) — or your violation of law or third-party rights in using the Service.

To the maximum extent permitted by law, neither party is liable for indirect, incidental, special, or consequential damages, or lost profits or revenue. Our total liability under these terms is capped at the amount you paid us in the 12 months before the claim arose (or $100 if you have only used free features).

You can stop using the Service and close your account at any time. We may suspend or terminate your access for breach of these terms, with notice where practicable. Sections 05, 06, and 08 through 12 survive termination.

These terms are governed by the laws of the State of Ohio, without regard to conflict-of-law rules, and disputes will be resolved in the state or federal courts located in Ohio. We may update these terms; for material changes we will notify account holders by email at least 14 days before they take effect. Continued use after that means you accept the updated terms.

Questions about these terms: founders@x17.ai.