Terms of Service

Last updated: July 8, 2026

Draft, pending attorney review. Before we connect to any customer's AWS account in production, these terms will be superseded by a signed Master Service Agreement. This page is not yet reviewed by counsel and should not be relied on as final.

1. Agreement

These Terms govern your access to and use of the PosturaNet website, waitlist, and platform (the "Service"), operated by PosturaNet Inc., a Delaware corporation. By using the Service you agree to these Terms. For paying customers, a separate Master Service Agreement or order form will govern in the event of a conflict.

2. The Service

PosturaNet scans connected AWS accounts for security misconfigurations, prioritizes findings, and can generate and, where you enable it, apply remediations subject to the approval controls described in our Trust Center. Features, detection rules, and remediation coverage may change as the product evolves; current capabilities are described accurately on our site and are not a guarantee of future functionality.

3. Access and your responsibilities

You are responsible for the AWS accounts you connect, the IAM permissions you grant us, and for reviewing and approving remediations before they run on production resources unless you have explicitly enabled autonomous mode for a given severity tier. You agree to use the Service only for lawful purposes and only against cloud environments you own or are authorized to manage.

4. Fees

Paid tiers are billed as described on our Pricing page or in your order form. Fees are non-refundable except as required by law or as expressly stated in your order form.

5. Disclaimers and limitation of liability

The Service is provided "as is." While we build dry-run checks, approval gates, and rollback into every automated remediation, no security product can eliminate all risk. To the maximum extent permitted by law, PosturaNet's aggregate liability arising from the Service will not exceed the fees you paid us in the twelve months preceding the claim, and PosturaNet is not liable for indirect, incidental, or consequential damages. Nothing in these Terms limits liability that cannot be limited under applicable law.

6. Data and security

Our handling of your data is described in our Privacy Policy. We access your AWS environment only through the cross-account IAM role you configure, using short-lived credentials.

7. Termination

You may stop using the Service and disconnect your AWS accounts at any time. We may suspend or terminate access for breach of these Terms or non-payment, with notice where practicable.

8. Changes

We may update these Terms as the product evolves. We will update the "last updated" date and, for material changes, notify active customers.

9. Contact

Questions about these Terms: legal@posturanet.com.