Terms of use
These terms govern this website. They are not a services agreement: if you buy anything from us, a separate signed contract governs it and says so.
Who you are agreeing with
This site is operated by 2Atomic Inc., a Delaware corporation with its principal place of business at 2440 Bert Dr, Building 100, Suite 105, Hollister, CA 95023. "We", "us", and "2atomic" mean that company. "You" means whoever is using the site.
By using this site you accept these terms. If you do not accept them, do not use the site.
What this site is
An informational site describing what we build and how to reach us. It publishes our coordinated vulnerability disclosure policy, our security.txt, and a contact form. It also offers accounts, through which a signed-in customer uploads firmware for analysis. An account is opened by invitation and paid for by invoice; the site itself takes no payment.
What it is not: browsing it does not create a customer relationship, and nothing on it is a warranty about any product.
Services are governed by a separate agreement
If we analyze an artifact for you, that work runs under a signed written agreement between your organization and ours. That agreement governs scope, authorization, confidentiality, ownership of findings, liability, and everything else that matters. Where it and these terms disagree, that agreement wins.
Nothing said in a sales conversation, in an email, or on this page varies a signed agreement. If it is not in the contract, do not rely on it.
Acceptable use
Use of this site is subject to our acceptable use policy, which is part of these terms. In short: do not use this site or anything we provide to attack systems you are not authorized to test, and do not submit artifacts you have no right to submit.
Testing this site itself is covered by the disclosure policy, including its safe harbour. That policy is the permission; these terms do not withdraw it.
Our content
The text, design, and marks on this site belong to us or to whoever licensed them to us. You may read it, quote it with attribution, and link to it. You may not pass it off as your own or use our name or marks to suggest we endorse you.
Where we publish something under an open license, that license governs it and is stated with it.
Links to other sites
We link to other organisations' sites, including our own product domains and third-party advisories. We do not control those and we are not responsible for what they say or do.
No warranty
This site is provided as is. We do not warrant that it will be available, uninterrupted, or error-free, and we disclaim all implied warranties, including merchantability, fitness for a particular purpose, and non-infringement, to the fullest extent the law allows.
Security content on this site, including any advisory or research writing, is published for information. It is not advice about your systems, and acting on it is your decision.
Limitation of liability
To the fullest extent the law allows, we are not liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, or data, arising out of your use of this site. Our total liability for any claim arising out of this site is limited to one hundred US dollars.
This limit applies to this website only. Liability for our services is set in the agreement that governs them, not here. Nothing in these terms limits liability that cannot be limited by law, including liability for fraud or wilful injury, which California Civil Code section 1668 places beyond contractual exemption.
Privacy
What we collect and why is in the privacy policy. We set only a session cookie and run no analytics on this site.
Governing law and where disputes are heard
These terms are governed by the laws of the State of California, without regard to its conflict-of-laws rules. Any dispute arising out of them or out of your use of this site is subject to the exclusive jurisdiction of the state and federal courts located in San Benito County, California, and you and we each consent to that venue.
If you are a consumer resident elsewhere, this clause does not deprive you of the protection of mandatory law in the place you live.
Changes
We version this page and date every change. A change applies from the date it is published; it does not reach back over something that already happened.
Contact
Questions about these terms: security@2atomic.com, or 2Atomic Inc., 2440 Bert Dr, Building 100, Suite 105, Hollister, CA 95023. To report a vulnerability, use security@2atomic.com and the disclosure policy instead.