Terms of Service

Effective Date: March 4, 2026

1. Acceptance of Terms

These Terms of Service ("Terms") are a legally binding agreement between you ("you" or "User") and Windsor Security LLC, an Ohio limited liability company ("Windsor Security," "we," "us," or "our"). These Terms govern your access to and use of the Windsor Security website at windsorsec.com (the "Site") and all related products, services, APIs, and tools (collectively, the "Services").

By accessing the Site or using any of our Services, you acknowledge that you have read, understood, and agree to be bound by these Terms. If you do not agree to these Terms, you must not access or use the Services.

We reserve the right to update or modify these Terms at any time. When we make changes, we will update the "Effective Date" at the top of this page. Your continued use of the Services after any such changes constitutes your acceptance of the revised Terms. We encourage you to review these Terms periodically.

2. Description of Services

Windsor Security provides cybersecurity tools and professional services designed for security operations teams. Our Services include:

Wallhacks

An IOC (Indicator of Compromise) enrichment and threat intelligence correlation platform. Wallhacks is available through both a web interface and an API, enabling security teams to enrich indicators and correlate threat data across multiple intelligence sources.

SignalForge

A detection tuning and noise cost accounting platform for Microsoft Sentinel. SignalForge helps security teams measure alert quality, quantify the operational cost of noisy detections, and prioritize tuning efforts based on data.

AI Security Assessment

A shadow AI visibility assessment for Microsoft 365 environments. This service identifies unauthorized or unmanaged AI usage within your organization and provides actionable recommendations for governance and risk reduction.

Professional Services

Windsor Security offers consulting engagements including detection engineering, AI security consulting, and threat intelligence operations. Professional services are scoped and delivered under separate statements of work.

Certain Services are available in both free and paid tiers. The features and limitations of each tier are described on our pricing page and may change from time to time.

3. Account Registration and Security

Some Services require you to create an account. When registering, you agree to the following:

  • You must provide accurate, current, and complete information during registration and keep your account information up to date.
  • You must be at least 18 years of age to create an account and use the Services.
  • You are limited to one account per person. Creating multiple accounts to circumvent restrictions or abuse the Services is prohibited.
  • You are responsible for maintaining the confidentiality of your password and for all activity that occurs under your account, whether or not you authorized that activity.
  • You must notify us immediately at hello@windsorsec.com if you become aware of any unauthorized access to or use of your account.

Windsor Security will not be liable for any loss or damage arising from your failure to protect your account credentials.

4. Acceptable Use

You agree to use the Services only for lawful purposes and in accordance with these Terms. Specifically, you agree not to:

  • Use IOC enrichment or threat intelligence features for any purpose other than legitimate security operations, research, or defense.
  • Exceed or attempt to circumvent API rate limits. Free tier accounts are limited to 20 API requests per day; Professional tier accounts are limited to 500 API requests per day.
  • Attempt to circumvent, disable, or interfere with any access controls, rate limiting mechanisms, authentication systems, or other security features of the Services.
  • Scrape, crawl, or access the Services through automated means without prior written authorization from Windsor Security.
  • Submit false, misleading, or intentionally inaccurate data to the platform.
  • Use the Services to harass, threaten, stalk, or harm any individual or organization, or to facilitate cyberattacks or other malicious activity.
  • Reverse-engineer, decompile, disassemble, or otherwise attempt to derive the source code, algorithms, or underlying structure of the platform.

For full details on acceptable conduct, please review our Acceptable Use Policy, which is incorporated into these Terms by reference.

5. API Terms

Access to the Windsor Security API is subject to the following additional terms:

  • API access requires authentication using JWT (JSON Web Token) bearer tokens. You are responsible for generating and managing your tokens through the platform.
  • API keys and authentication tokens are confidential. You must not share, publish, or expose your tokens to unauthorized parties. If you believe a token has been compromised, revoke it immediately and generate a new one.
  • Windsor Security reserves the right to rate-limit, throttle, or suspend API access at any time if we detect abuse, excessive usage, or behavior that threatens the stability or security of the platform.
  • The API is provided "as is." While we strive for high availability, we do not guarantee any specific uptime or service level agreement (SLA) for free tier API access. Paid tier SLAs, if any, will be specified separately.
  • We may modify, deprecate, or discontinue API endpoints with reasonable notice. We will make commercially reasonable efforts to communicate breaking changes in advance.

6. Intellectual Property

Windsor Security retains all rights, title, and interest in and to the Services, including but not limited to the platform software, user interface, design, documentation, branding, trademarks, and all related intellectual property. Nothing in these Terms grants you any ownership interest in the Services.

Threat intelligence output generated through your use of the platform (such as enrichment results, correlation data, and assessment findings) may be used by you in your internal security operations. This license is non-exclusive, non-transferable, and limited to your legitimate security purposes.

You retain ownership of the data you submit to the Services, including IOC queries, alert metadata, and configuration data. By submitting data, you grant Windsor Security a limited, non-exclusive, worldwide license to process, store, and analyze that data solely for the purpose of providing and improving the Services.

You may not copy, modify, distribute, sell, lease, or create derivative works based on the platform code, user interface, documentation, or any other proprietary materials without prior written consent from Windsor Security.

7. Payment Terms

Certain Services are offered on a paid subscription basis. The following terms apply to paid tiers:

  • Pricing is as displayed on the Site at the time of purchase. All fees are stated in U.S. dollars unless otherwise specified.
  • Payments are processed securely through Stripe. By subscribing to a paid tier, you authorize Stripe to charge your designated payment method in accordance with Stripe's terms of service.
  • Subscriptions renew automatically at the end of each billing period unless you cancel before the renewal date. You may cancel your subscription at any time through your account settings or by contacting us.
  • Refunds are provided at Windsor Security's sole discretion. If you believe you are entitled to a refund, contact us at hello@windsorsec.com.
  • We reserve the right to change pricing at any time. We will provide at least 30 days' notice before any price increase takes effect for existing subscribers. Continued use of the Services after a price change constitutes acceptance of the new pricing.

8. Data and Privacy

Our collection, use, and protection of your personal information is governed by our Privacy Policy, which is incorporated into these Terms by reference. By using the Services, you consent to the data practices described in our Privacy Policy.

Certain Services require access to your external systems. By using these Services, you represent and warrant that you have the authority to grant such access:

  • AI Security Assessment: You authorize Windsor Security to perform read-only access to your Microsoft 365 environment as described in the assessment scope agreed upon prior to engagement. This access is limited to the data necessary to identify shadow AI usage and assess related risks.
  • SignalForge: You authorize Windsor Security to access alert and incident metadata from your connected Microsoft Sentinel instance. This access is limited to the data necessary to perform detection tuning analysis and noise cost accounting.

You represent that you have obtained all necessary internal approvals and authorizations before granting Windsor Security access to your organization's environments and data.

9. Disclaimers

THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE. TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, WINDSOR SECURITY DISCLAIMS ALL WARRANTIES, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND ANY WARRANTIES ARISING OUT OF COURSE OF DEALING OR USAGE OF TRADE.

Without limiting the foregoing:

  • We do not warrant the accuracy, completeness, reliability, or timeliness of any threat intelligence data, IOC enrichment results, or other information provided through the Services.
  • IOC enrichment results and threat intelligence output are informational only and are not a substitute for professional security judgment, independent analysis, or human review.
  • We do not guarantee that the Services will detect all threats, prevent all security incidents, or eliminate all risks to your organization.
  • Assessment results, detection tuning recommendations, and all other advisory output are provided for informational purposes only. You are solely responsible for any decisions or actions taken based on the Services.
  • We do not guarantee uninterrupted, error-free, or secure operation of the Services.

10. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY THE LAWS OF THE STATE OF OHIO:

  • WINDSOR SECURITY, ITS OFFICERS, MEMBERS, EMPLOYEES, AGENTS, AND AFFILIATES SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, LOSS OF DATA, LOSS OF BUSINESS OPPORTUNITY, OR COSTS OF PROCUREMENT OF SUBSTITUTE SERVICES, REGARDLESS OF THE CAUSE OF ACTION OR THE THEORY OF LIABILITY (WHETHER IN CONTRACT, TORT, NEGLIGENCE, STRICT LIABILITY, OR OTHERWISE), EVEN IF WINDSOR SECURITY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
  • WINDSOR SECURITY'S TOTAL AGGREGATE LIABILITY TO YOU FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICES SHALL NOT EXCEED THE TOTAL AMOUNT PAID BY YOU TO WINDSOR SECURITY IN THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE CLAIM.
  • IF YOU HAVE NOT PAID ANY FEES TO WINDSOR SECURITY DURING THAT PERIOD, WINDSOR SECURITY'S TOTAL LIABILITY SHALL NOT EXCEED FIFTY U.S. DOLLARS ($50.00).

These limitations apply regardless of whether the remedy fails of its essential purpose. Some jurisdictions do not allow the exclusion or limitation of certain damages, so some of the above limitations may not apply to you.

11. Indemnification

You agree to defend, indemnify, and hold harmless Windsor Security LLC, its members, officers, employees, agents, and affiliates from and against any and all claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising out of or relating to:

  • Your use of or access to the Services.
  • Your violation of these Terms or any applicable law or regulation.
  • Your violation of any third-party rights, including intellectual property rights, privacy rights, or contractual rights.
  • Any data, content, or materials you submit to or through the Services, including IOC queries, alert metadata, and any other information you provide to the platform.

Windsor Security reserves the right, at your expense, to assume the exclusive defense and control of any matter for which you are required to indemnify us, and you agree to cooperate with our defense of such claims.

12. Termination

Windsor Security reserves the right to suspend or terminate your account and access to the Services at any time, with or without notice, for conduct that we determine, in our sole discretion, violates these Terms, is harmful to other users, or is otherwise objectionable.

You may terminate your account at any time by contacting us at hello@windsorsec.com. Upon termination, your right to access and use the Services ceases immediately.

The following sections shall survive termination of these Terms: Intellectual Property (Section 6), Disclaimers (Section 9), Limitation of Liability (Section 10), Indemnification (Section 11), Governing Law and Dispute Resolution (Section 13), and any other provisions that by their nature should survive.

13. Governing Law and Dispute Resolution

These Terms shall be governed by and construed in accordance with the laws of the State of Ohio, without regard to its conflict of law principles.

Any dispute, claim, or controversy arising out of or relating to these Terms or the Services shall be resolved exclusively in the state or federal courts located in the State of Ohio. You irrevocably consent to the personal jurisdiction and venue of such courts and waive any objection to jurisdiction or venue on the grounds of inconvenient forum or otherwise.

14. Severability

If any provision of these Terms is held to be invalid, unenforceable, or illegal by a court of competent jurisdiction, the remaining provisions shall continue in full force and effect. The invalid or unenforceable provision shall be modified to the minimum extent necessary to make it valid and enforceable while preserving its original intent.

15. Entire Agreement

These Terms, together with our Privacy Policy and Acceptable Use Policy, constitute the entire agreement between you and Windsor Security LLC with respect to the Services, and supersede all prior or contemporaneous communications, proposals, and agreements, whether oral or written, between you and Windsor Security regarding the subject matter hereof.

Professional services engagements may be governed by additional statements of work or service agreements, which shall supplement (but not conflict with) these Terms.

16. Contact

If you have questions, concerns, or feedback regarding these Terms of Service, please contact us:

Windsor Security LLC
Ohio, United States
Email: hello@windsorsec.com