Terms and Conditions

1. The service

Sentinel Shield is a security monitoring service for Laravel applications. You install an open-source agent in your application; the agent scans for known threat patterns and reports findings to your dashboard. By creating an account you agree to these terms.

2. What the service does not guarantee

Read this section carefully. Sentinel Shield detects known patterns. It will not catch every compromise, and it can flag legitimate code as a threat. It is one layer of defence, not a guarantee that your application is secure or that a breach will be detected.

You remain responsible for your application's security, for keeping backups, and for verifying findings before acting on them. We do not warrant that the service will be uninterrupted or error free.

3. Auto-quarantine and maintenance mode

On plans where it is available, you may enable auto-quarantine, which moves files out of your application directory, and automatic maintenance mode, which replaces your application's entry point with a 503 page. Both are disabled by default and both are destructive by design.

If you enable them, you accept that a false positive can take your application offline or remove a legitimate file. Quarantined files are recoverable via sentinel:quarantine-restore. Keep independent backups.

4. Your account

You are responsible for activity under your account and for keeping your API keys secret. An API key grants the ability to submit scan reports for a site. Tell us promptly if you believe a key has been exposed, and revoke it from your dashboard.

You may only monitor applications you own or are authorised to monitor.

5. Plans and billing

• Paid plans are billed in advance, monthly or annually, through Stripe.
• Subscriptions renew automatically until cancelled.
• You can cancel at any time from your subscription settings. Cancellation takes effect at the end of the period you have already paid for; access continues until then.
• Plan limits — number of sites, scan frequency, retention window, and available detection patterns — are enforced by the service and are described on the pricing page.

6. Refunds

If the service does not work as described, email us within 30 days of the charge and we will refund it. We do not otherwise offer pro-rata refunds for partial periods.

7. Acceptable use

Do not use the service to monitor systems you do not control, to submit deliberately falsified reports, to attempt to access other customers' data, or to disrupt the service for others. We may suspend accounts that do.

8. The agent's licence

The agent is published under the MIT licence and its source is public. These terms govern the hosted dashboard service, not your use of the agent package itself.

9. Limitation of liability

To the maximum extent permitted by law, our total liability for any claim relating to the service is limited to the amount you paid us in the twelve months before the claim. We are not liable for indirect or consequential loss, including lost profits, lost data, or downtime — whether or not the service detected, failed to detect, or acted on a threat.

10. Changes and termination

We may update these terms; material changes will be announced by email or in the dashboard before they take effect. You may close your account at any time. We may suspend or close an account that breaches these terms.

11. Contact

Questions about these terms can go to [email protected].