Terms of service

Your agreement

These terms govern the PatchPlane website, control plane, APIs, agents and recipes. “PatchPlane,” “we” and “us” mean the operator of this service, reachable below. By creating an account, connecting a host or using the service, you agree to these terms. If you disagree, do not use the service.

You must be at least 18 and able to enter a binding agreement. If acting for an organization, you confirm your authority to bind it; “you” includes that organization. A separate written agreement signed with us controls where it conflicts with these terms. Our privacy policy explains how we handle information.

What PatchPlane does

PatchPlane observes enrolled hosts, assesses relevant vulnerabilities and delivers authorized mitigation or remediation recipes. A recipe may change configuration, reduce exposure or apply a bounded process-level change. Applicability depends on software, configuration, feature use and execution capabilities.

A successful mitigation can reduce one attack path while leaving others exposed. A result does not mean a host is fully patched, free of vulnerabilities or guaranteed safe. Review evidence and remaining exposure, and apply the permanent vendor fix through your normal patch process. Research and AI-assisted recipe output may contain errors or become outdated.

Host authorization and your responsibilities

Enroll only hosts you own or have explicit permission to administer. You authorize PatchPlane to collect agent reports and deliver instructions within the permissions and policies your organization enables. Connecting an observer does not authorize unrestricted execution. Enabling automatic remediation authorizes eligible changes within that policy.

You are responsible for assigning access, reviewing recipe scope and local requirements, maintaining backups and recovery options, and monitoring results. Do not bypass applicability checks or safeguards. Changes can affect applications, resource use or availability even when designed to preserve traffic; verify that an operation fits your environment.

Accounts and security

Provide accurate information and protect email accounts, passkeys, SSO credentials, enrollment links and host keys. Manage roles carefully and remove access when no longer needed. You are responsible for activity you authorize through your account and organization. Promptly report suspected unauthorized access and cooperate in securing affected accounts.

Acceptable use

Do not access or alter systems without permission, exploit others’ systems, distribute malware, violate privacy or intellectual property rights, or break applicable law. Do not evade access controls, forge identities or execution evidence, interfere with other organizations, or deliberately overload the service. Security research involving this service requires our prior authorization; report suspected vulnerabilities to the contact below.

Your data and our software

You retain rights in information you submit. You permit us to host, process, transmit and display it as needed to provide, secure and support the service, consistent with our privacy policy and your organization’s settings. You are responsible for the necessary rights and notices for that information.

We and our licensors retain rights in PatchPlane’s software, branding and service materials. We permit their use as part of authorized use of the service. Open-source components and other separately licensed materials remain governed by their licenses. Third-party services, identity providers and vendor software have their own terms.

Availability, changes and fees

We may improve, change or retire features and recipes. We aim to give reasonable advance notice of material reductions, except when urgent security, legal or operational issues require faster action. Unless separately agreed in writing, we do not promise a service level, uninterrupted availability or coverage for every host or vulnerability. Preview features may be incomplete or change.

Paid plans, fees and renewal terms must be disclosed and agreed separately. These terms alone do not authorize a charge.

Suspension and ending use

You can stop using the service at any time. We may restrict or suspend access for a material breach, unlawful activity, a security threat or a legal requirement. Where practical, we will explain the reason and give you an opportunity to address it. We may discontinue the service with reasonable notice where practical.

Removing a host or deleting an organization revokes access and cancels queued work, but an already authorized operation may finish. These actions do not uninstall agents, undo applied changes or erase retained audit and execution records. Remove agents and manage recovery on your hosts when ending use. Request data deletion as described in the privacy policy.

Warranties and liability

To the extent permitted by law, the service is provided “as is” and “as available,” without warranties of merchantability, fitness for a particular purpose, noninfringement, or that it will prevent every attack, detect every vulnerability or operate without errors. Specific commitments in a separate written agreement still apply.

To the extent permitted by law, neither party is liable under these terms for indirect, incidental, special, consequential or punitive damages, or lost profits, revenue or business opportunities. Each party’s total liability arising from the service is limited to the greater of US $100 or the fees you paid us for the service in the 12 months before the event giving rise to the claim. This limit does not excuse payment of agreed fees.

These exclusions and limits do not apply to fraud, willful misconduct, gross negligence, or liability that applicable law does not allow to be excluded or limited. Nothing here takes away mandatory consumer or privacy rights.

Changes, disputes and general terms

We may update these terms by posting a revised version and effective date. For material changes, we will provide reasonable advance notice through the service or email where practical, unless an urgent legal or security change is needed. Changes apply prospectively. If you disagree, stop using the service before changes take effect; continued use after that date means you accept them.

Please contact us first to try to resolve disputes in good faith. Either party may bring a claim before a court with jurisdiction; these terms do not require private arbitration or waive class-action rights. Mandatory applicable law continues to apply.

If a provision is unenforceable, the remaining terms stay in effect. Failure to enforce a provision is not a waiver. Provisions that by their nature should continue, including ownership, retained-data obligations and liability limits, survive termination.

Contact

For questions about these terms, service issues or security reports, email PatchPlane at support@patchplane.dev. Do not include credentials or sensitive host evidence in an initial message.