Terms.

oknek is a runtime endpoint defense daemon for AI agents on Linux. The website at oknek.com is the marketing surface, the documentation, and the entry point to the early-access list, paid tiers, and the open-source release of the daemon binary.

oknek is operated by an entity to be incorporated in the United States (Delaware C-Corp, in progress at the time of writing). Once incorporation completes, the legal entity name will appear here and in the LICENSE copyright notice.

You may use oknek.com, the open-source daemon, and any paid tier to defend AI agent workloads you operate or are authorized to operate. You agree not to:

• Use oknek to attack, exfiltrate, surveil, or otherwise harm systems you do not have explicit authorization to access
• Misrepresent oknek's coverage, capabilities, or detection rules in your own public claims (i.e., don't say "oknek catches X" if it doesn't)
• Attempt to overwhelm oknek.com or our APIs (the rate limit on /api/signup exists for a reason)
• Reverse-engineer, decompile, or use the oknek software or detection rules as the basis for a competing product
• Reverse-engineer the cloud control plane (when it exists) for the purpose of building a clone

Outside of those things, we want you to use the product as aggressively as you can.

The oknek daemon (oknekd), the CLI (oknek), the detection rule pack (R1–R7), and the installer are proprietary software licensed for use by paying customers under a commercial agreement. Source is made available to licensed customers under NDA so your security team can audit the detection logic; it is not open source, and may not be self-hosted without a license or redistributed.

Paid tiers (Pro, Business, Enterprise) provide the cloud control plane, hourly rule updates, forensic replay, threat intelligence feeds, compliance overlays, and support SLAs under your commercial license, billed monthly or annually per server. The pricing page (/pricing/) is authoritative; this section just summarizes.

Pilots are scoped per engagement and governed by the commercial license and any pilot terms agreed in writing. There is no free tier and no self-hostable free edition.

Paid tiers are billed monthly or annually in advance per server. Stripe processes all payments. We will email you a receipt on every successful charge.

Refunds: if you cancel within 30 days of a new paid subscription, we'll refund in full, no questions asked. After 30 days you can downgrade or cancel future billing at any time; we don't pro-rate refunds on partial months.

Failed payments: if your card declines, we'll retry three times over five days and email you between attempts. After that, the daemon falls back to the open-source feature set until you update the card.

Annual contracts above Enterprise: custom terms. Email [email protected].

Security software is an arms race. oknek is built to catch known attack patterns and behavioral drift — it is not, and will never be, a guarantee that your AI agents are unhackable. Real adversaries find real new attacks. We ship rules as fast as we can; we publish what we don't catch on /threats/; we are honest about the limits in /docs/architecture/.

To the extent the law permits: oknek is provided "as is." We disclaim implied warranties of merchantability, fitness for purpose, and non-infringement. Our total liability for any claim is capped at the amount you paid us in the twelve months preceding the claim. This cap does not limit our liability for gross negligence, willful misconduct, or anything else that cannot be limited under the laws of the jurisdiction governing the contract.

These disclaimers do not waive any consumer-protection rights you have in your jurisdiction (e.g., EU consumer law, California consumer law).

We will update this page when terms materially change. If we do, we'll show the new "last updated" date at the top of the page and (for paid subscribers) email you 30 days before the change takes effect. You can cancel without penalty if you don't want to agree to updated terms.

Changes to address typos, broken links, formatting, or genuinely-minor clarifications won't trigger a notice.