Plain-English Summary

• This Service helps you distribute blocking decisions; you are responsible for how you use it.
• Routing changes are high impact. Use appropriate testing and safety controls.
• Threat intel can be wrong. Treat external inputs as untrusted until proven otherwise.
• We provide the Service “as available” without guarantees of uninterrupted operation.

1. Agreement to Terms

These Terms of Service ("Terms") constitute a legally binding agreement between you ("Customer," "you," or "your") and Spectops ("Spectops," "we," "us," or "our") governing your access to and use of the Spectops platform, including all associated APIs, documentation, and services (the "Service").

By creating an account, accessing, or using the Service, you agree to be bound by these Terms. If you are accepting these Terms on behalf of an organization, you represent and warrant that you have the authority to bind that organization. If you do not agree, you may not use the Service.

2. Description of Service

Spectops provides a platform for managed threat nullification (BGP blackhole routing and FlowSpec) at the network edge. Customers control sources, policies, and outputs while Spectops operates BGP edge enforcement. The Service includes:

• BGP session establishment and lifecycle management with customer routers or route servers
• Enable/disable system sources and add customer-provided feeds or webhooks
• Allow/deny lists, tagging, and source policy controls
• Threat nullification (RTBH) and FlowSpec rule generation and distribution
• Export lists in multiple formats plus API and webhook integrations
• Web-based dashboard for configuration, monitoring, and audit history

3. Account Registration and Security

You must provide accurate, complete, and current information when creating an account. You are solely responsible for:

• Maintaining the confidentiality of your account credentials, API keys, and session tokens
• All activities conducted through your account, whether authorized by you or not
• Ensuring that the Autonomous System Numbers (ASNs) registered to your account are ones you are authorized to manage
• The accuracy of all BGP session configurations, including neighbor IPs, prefix limits, and community policies
• Enabling two-factor authentication as required by your organization's security policies

You must notify us immediately at security@localhost if you suspect unauthorized access to your account.

4. Acceptable Use Policy

You agree not to use the Service to:

• Blackhole or filter traffic to IP addresses you are not authorized to manage
• Intentionally disrupt third-party networks or services via BGP announcements
• Inject false, misleading, or malicious routing information into the global BGP routing table
• Use the collective intelligence features to gain competitive intelligence about other users
• Circumvent rate limits, authentication controls, or access restrictions
• Reverse engineer, decompile, or attempt to extract the source code of the Service
• Use the Service for any purpose that violates applicable laws or regulations

Violation of this policy may result in immediate suspension or termination of your account.

5. Network Operations Responsibility

The Service provides tools for managing BGP routing policies. You acknowledge and agree that:

• You are solely responsible for the routing decisions made through the Service, including which prefixes are blackholed, which FlowSpec rules are deployed, and which BGP sessions are established
• Incorrect configurations can result in legitimate traffic being blocked, network outages, or routing instability affecting your network and potentially upstream providers
• You should test all configurations in a staging environment before deploying to production where feasible
• Spectops does not guarantee the accuracy, completeness, or timeliness of third-party threat intelligence feeds

6. Service Level and Availability

We use commercially reasonable efforts to maintain the availability and performance of the Service. However, the Service is provided on an "as available" basis. We do not guarantee:

• Uninterrupted or error-free operation of the Service
• That BGP announcements will be propagated within any specific time frame
• That all threat feeds will be fetched on schedule during periods of degraded connectivity

We reserve the right to perform planned maintenance with reasonable advance notice. Emergency maintenance may be performed without prior notice when necessary to protect the integrity or security of the Service.

7. Intellectual Property

The Service, including its software, algorithms, user interface, documentation, and all related intellectual property, is and remains the exclusive property of Spectops. These Terms do not grant you any ownership rights in the Service.

You retain ownership of your data, including your BGP configurations, threat feed configurations, and routing policies. You grant us a limited license to process this data solely for the purpose of providing the Service.

8. Data and Privacy

Our collection and use of personal information is governed by our Privacy Policy, which is incorporated into these Terms by reference. By using the Service, you consent to the practices described in the Privacy Policy.

9. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, SPECTOPS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, DATA, BUSINESS OPPORTUNITIES, OR GOODWILL, ARISING OUT OF OR RELATED TO YOUR USE OF OR INABILITY TO USE THE SERVICE, EVEN IF SPECTOPS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

IN NO EVENT SHALL SPECTOPS'S TOTAL AGGREGATE LIABILITY EXCEED THE AMOUNTS PAID BY YOU TO SPECTOPS FOR THE SERVICE DURING THE TWELVE (12) MONTHS PRECEDING THE CLAIM.

10. Indemnification

You agree to indemnify, defend, and hold harmless Spectops and its officers, directors, employees, and agents from any claims, damages, losses, liabilities, and expenses (including reasonable attorney's fees) arising from:

• Your use of the Service in violation of these Terms
• Your BGP routing decisions and their impact on third-party networks
• Your violation of any applicable law or regulation
• Any unauthorized use of your account

11. Termination

Either party may terminate this agreement at any time. Upon termination:

• All BGP sessions associated with your account will be gracefully shut down
• All blackhole routes and FlowSpec rules will be withdrawn from the routing table
• Your data will be retained for 30 days to allow for export, then permanently deleted
• API keys and session tokens will be immediately revoked

We may suspend or terminate your account immediately if we reasonably believe you have violated these Terms or the Acceptable Use Policy.

12. Modifications to Terms

We may update these Terms from time to time. We will notify you of material changes by email or through the Service at least 30 days before they take effect. Continued use of the Service after the effective date constitutes acceptance of the updated Terms.

13. Governing Law

These Terms shall be governed by and construed in accordance with applicable law, without regard to conflict of law principles. Any disputes arising under these Terms shall be resolved through binding arbitration, except where prohibited by law.

14. Contact

For questions about these Terms, contact us at: legal@localhost