Terms of Use

Using the platform

These terms apply to AEGLIX MIND and all its workspaces, APIs and reports, including Guardian, Intel, CVEs, News, Investigate, Public OSINT, Campaigns, ModelDex and Arsenal. By using the service, you agree to these terms and acknowledge the data handling described in our Privacy Policy. If you do not agree, do not use the service.

Your account

Provide an email address you control and protect your password, session token and device. Do not share account credentials. Email verification and password recovery use emailed, expiring links when account email delivery is configured. Keep your password and access to your email safely. Completing recovery resets your password and signs out previous sessions; completing verification also asks you to sign in again. Google and GitHub sign-in require the respective provider to supply a verified email. Account linking between sign-in methods is not currently supported. Signing out revokes the current session. Settings lets you sign out other browser sessions, change an existing password and permanently delete your account after confirming ownership. Password changes revoke previous sessions. Profile details are private to your account.

Permitted use

Use the platform for lawful security research, defensive investigation, education and personal protection. Submit indicators and content that you are authorized to share. Use of the platform does not grant permission to access, scan or test third-party systems, and does not expand any authorization you already hold.

Prohibited use

Do not attempt unauthorized access, probe private networks through the scanner, collect other users’ history, evade rate limits or access controls, disrupt the service, or use its intelligence to facilitate fraud, harassment or other unlawful activity. Do not submit credentials, secret tokens, sensitive private links or content you do not have a right to disclose.

Results and AI limitations

Scan verdicts, scores, related indicators, vulnerability records and AI-generated assessments are decision-support information. They can be incomplete, incorrect, outdated or inconsistent. LOW risk or no matching evidence does not establish safety. AI confidence is not a guarantee or a probability of harm. Validate findings against original sources and your environment before blocking systems, attributing activity or making remediation decisions.

Campaigns, sources and attribution

An OTX pulse, CISA advisory or individual indicator does not by itself establish a campaign, actor or victim count. Incoming reports are reviewed before publication as campaign records. Historical records do not imply current activity, and published evidence can change. Source review reduces uncertainty but does not guarantee accuracy. Use the Contact page to request a correction with supporting evidence.

Exports and external actions

You are responsible for handling downloaded reports, indicators and blocklists securely and applying them appropriately. Reports may include your own saved scan information. A report download or copy action does not block traffic, notify an abuse contact or initiate a takedown. External searches and links are governed by the destination service’s terms.

Third-party content and reuse

Threat feeds, vulnerability data, MITRE ATT&CK material, news articles and vendor reports retain their respective ownership, attribution, licence and sharing conditions. Availability on AEGLIX MIND does not grant unrestricted redistribution rights. Respect source licences and Traffic Light Protocol or other sharing restrictions when using or exporting intelligence. Links and summaries do not imply endorsement by the source.

Availability and access

Source coverage, features and limits may change. Provider outages, quotas, stale caches or hosting interruptions can affect results and update schedules. We may restrict abusive access or suspend features to protect the service. We do not promise uninterrupted operation, a fixed response time or emergency incident-response support.

Warranty and liability

To the extent permitted by applicable law, the service is provided as available and without warranties of accuracy, completeness or fitness for a particular purpose. Aeglix Security Research is not responsible for losses caused by reliance on the service or external content to the extent such liability may lawfully be limited. These terms do not exclude rights or liabilities that applicable law does not allow us to exclude.

Changes and contact

We may revise these terms as the platform evolves. The date above shows the current revision; continued use after a revision means acceptance of the revised terms. For questions about these terms, contact aeglixmind@gmail.com.

ModelDex, model access and licensing

ModelDex is a discovery and comparison directory. A catalog listing does not grant access to a model, API credits, a provider subscription or permission to use model weights. Check the original provider’s current license, acceptable-use rules, pricing, regional availability and quotas. A free tier, open weights and permission for commercial use are different conditions.

Imported listings contain provider-supplied metadata and are distinguished from reviewed entries. Reviewed information can also become outdated. The discovery assistant interprets your requirements and ranks available catalog evidence; it does not benchmark models or guarantee hardware compatibility, performance, licensing suitability or availability. Unknown requirements and conflicts need your review. AI interpretation may be unavailable or subject to request limits.

Messages, screenshots and model improvement

Only submit content you are authorized to share. Review and redact text extracted from screenshots before agreeing to external AI analysis. Message or image analysis does not establish that media is authentic or provide a forensic deepfake determination. Feedback does not automatically retrain our models, and assistant conversations do not create a persistent learning profile.

Arsenal tools, exploit references and trust labels

Arsenal is a discovery and comparison directory for security tools and exploit references. A listing does not grant a software license, permission to test a target or endorsement by the original author, government agency or AEGLIX MIND. Respect each source’s license and terms, and use tools only on systems you own or are explicitly authorized to assess.

Source review labels describe recorded evidence and editorial decisions, not a guarantee of safe execution. Unreviewed is not a malware verdict. README observations are limited text checks, not complete source or dependency audits. An available VirusTotal repository-URL reputation lookup does not scan tool binaries, and no detections or no provider record does not establish safety. Review the scope and date of each check and verify the current upstream release.

Commands and documentation require your own assessment before use. Arsenal does not install or execute listed tools for you. Its floating helper currently searches published catalog records; external AI troubleshooting is not enabled. Comparisons and helper results do not replace authorized testing, professional judgment or the original documentation. Report incorrect listings or disputed review labels through our Contact page with source evidence.

Public OSINT and evidence handling

Use the Public OSINT workspace for lawful research with a legitimate purpose. Public availability does not grant permission to harass, stalk, dox, discriminate against or unlawfully profile people. Respect privacy, applicable law and each source’s access, licence and redistribution conditions. Upload only files you are authorized to process.

Names, usernames, network records and legal-entity results are source-specific candidates, not verified identity matches or proof of wrongdoing. Missing results do not establish absence. Public IP network context does not locate a person, and embedded image metadata can be missing or edited. This feature does not access private accounts, identify faces, determine phone ownership or provide an authenticity or deepfake verdict.

The workspace is a preview with source-specific coverage and request limits. Notes are temporary; save an export before leaving if you need a copy. You are responsible for protecting exported evidence and retaining the source context. JSON export does not create a hosted case record, prove chain of custody or grant rights to redistribute personal information.