Terms of Service

ekmire is a developer security platform that protects software at three layers: at write time through an MCP server that scans your IDE buffer, at commit time through the Build Guard CLI and pre-commit hook, and at runtime through a Rust reverse-proxy sidecar that inspects every inbound request to your application.

ekmire does not guarantee zero breaches. The Service materially reduces the surface area of common application security failures, but no security tool eliminates risk. Flux8Labs is not liable for security incidents, data loss, or business interruption that occurs despite use of the Service.

You must be at least 18 years old to create an account. One account per natural person. If you are creating an account on behalf of an organisation, you represent that you have authority to bind that organisation to these Terms.

You are responsible for the security of your account credentials, your project API keys, and any activity performed under your account.

The full Acceptable Use Policy is at ekmire.com/legal/aup. In summary, you may not use ekmire to probe, scan, or attack third-party systems; to generate harmful or illegal content via the LLM router; to share project API keys across multiple organisations; to circumvent event caps by creating duplicate free accounts; or to reverse-engineer the proxy binary or rule bundle.

Violations may result in immediate revocation of API keys and termination of your account without refund.

Project API keys are issued by Flux8Labs and remain Flux8Labs intellectual property. Keys are stored as bcrypt hashes; plaintext is returned exactly once at creation and cannot be recovered. We recommend storing the plaintext key in your secrets manager immediately.

Flux8Labs may revoke any key without notice if it has reasonable grounds to believe the key is compromised or being used in violation of these Terms.

ekmire does not store raw request bodies or response bodies. Only SHA-256 payload hashes, rule identifiers, severity, and metadata such as upstream URL and timestamp are stored. Source code never leaves your machine for BYOK users; the LLM call goes directly from the proxy to your provider using your key.

For full details on what is collected and how it is processed, see the Privacy Policy.

ekmire is a defence-in-depth tool. It reduces the likelihood and impact of common attacks, but it does not guarantee that every attack will be detected or blocked. You should not rely solely on ekmire to satisfy any compliance obligation such as SOC 2, ISO 27001, PCI DSS, or HIPAA. ekmire is one control in a broader security programme.

The Service is provided "as is" and "as available". Flux8Labs disclaims all warranties to the maximum extent permitted by law.

Plan limits are published at ekmire.com/pricing. When you reach the event cap for your plan, telemetry events above the cap are rate-limited client-side. Proxy protection itself continues; ekmire never stops blocking threats when you hit a billing limit.

Flux8Labs reserves the right to change pricing. Existing paid subscribers receive 30 days notice before any price increase takes effect on their plan.

Either party may terminate this agreement at any time. You can close your account from the dashboard Settings page. Flux8Labs may terminate your access for material breach of these Terms.

On account closure, all organisation data, including projects, events, keys, and billing records beyond statutory retention, is permanently deleted within 30 days. You may request earlier deletion by emailing [email protected].

As required under the Digital Personal Data Protection Act 2023 and the Information Technology Act 2000, Flux8Labs has appointed a Grievance Redressal Officer:

Name: Mohit Phogat
Email: [email protected]
Address: Jaipur, Rajasthan, India

You may contact the Grievance Redressal Officer for any complaints or concerns regarding data processing or these Terms. We will acknowledge within 48 hours and resolve within 30 days.

These Terms are governed by the laws of the Republic of India. Any dispute arising out of or related to these Terms or the Service is subject to the exclusive jurisdiction of the courts of Jaipur, Rajasthan.

For legal notices, contact [email protected].