Terms of Service

Last updated: August 31, 2026

Global distribution. Payments and order processing are securely handled by our authorized global distribution partner, acting as Merchant of Record. That partner is responsible for all global tax collection, invoicing, and payment security.

These Terms of Service (the “Terms”) form a binding agreement between you (the “Customer”, “you”) and Bastion Cyber, a sole proprietorship operating from Ciudad del Este, Alto Paraná Department, Republic of Paraguay (the “Provider”, “we”, “us”), governing the purchase, activation and use of GhostShield EDR and any related software, binaries, license keys, documentation, updates and support (together, the “Software”).

By purchasing a license, downloading an installer, activating a license key or running the Software on any machine, you accept these Terms in full. If you do not accept them, do not install or use the Software. If you accept these Terms on behalf of a company, you represent that you have authority to bind that company.

1. Definitions

Software — GhostShield EDR, including its eBPF engine, user-space daemons, command-line tools, the Argos panel, installers, and all updates supplied to you.
Engine — the kernel-space (eBPF) and Ring 0 / Ring 3 enforcement components of the Software.
HWID — the Hardware Identifier derived from the Customer’s server, used to bind a license to a single machine.
License Key / JWT — the signed token issued to you that authorises the Software to run on a specific HWID.
Official Reseller — our authorized Merchant of Record (MoR), as defined in Section 4.
Subscription Term — the billing period you purchased (monthly, annual or other period shown at checkout).

2. The Software

GhostShield EDR is endpoint detection and response software for Linux servers. It observes kernel events through eBPF and may block, terminate or deny operations it classifies as hostile. The Software is delivered digitally, runs entirely on infrastructure you control, and requires privileged (root) access, a supported Linux distribution and a compatible kernel.

The Software is not a managed service, not an insurance product, and not a substitute for backups, patching, network segmentation, or a wider security programme.

3. License Grant

Subject to your compliance with these Terms and to payment in full, we grant you a limited, non-exclusive, non-transferable, non-sublicensable, revocable license to install and run one (1) instance of the Software per licensed server, for the duration of your Subscription Term, solely to protect infrastructure that you own or are contractually authorised to defend.

Each license is bound to a single HWID. A license is not transferable between machines after issuance, except where we approve a re-issue in writing (for example, after documented hardware failure or a provider-side migration). Licenses are issued to a named account and may not be shared, resold, rented, leased, pooled, time-shared or offered as a service to third parties.

All rights not expressly granted are reserved. This is a license, not a sale: no title to the Software or to any intellectual property in it passes to you.

4. Official Reseller and Merchant of Record

Our authorized Merchant of Record (MoR) is the reseller for all sales of the Software. This means that the Merchant of Record, and not Bastion Cyber, is the seller of record on your transaction and is responsible for processing your payment, calculating and remitting sales tax, VAT, GST and equivalent duties, issuing invoices and receipts, and handling billing correspondence and refund execution.

Your purchase is therefore also subject to the Merchant of Record’s own terms and privacy policy. Where the Merchant of Record’s terms govern the payment transaction and these Terms govern the use of the Software, both apply in their respective domains. Bastion Cyber never receives, processes or stores your card, bank or wallet credentials.

5. Orders, Billing and Renewal

Payment Processing and Billing: Our checkout, billing, and payment processes are securely conducted by our authorized Merchant of Record (MoR). The MoR acts as the official seller and reseller of GhostShield licenses for all transactions, taking responsibility for invoicing, tax collection, and primary support regarding refunds, financial disputes, and payment processing.

Prices are shown at checkout in the currency offered by the Official Reseller and are exclusive of taxes unless stated otherwise; applicable taxes are added and collected by our authorized Merchant of Record.
Renewal. Licenses do not renew automatically. There is no recurring charge and no stored payment mandate. When a Subscription Term ends, the license simply expires. To continue, you purchase a new license on this site at the then-current price and generate the renewal JWT in the system with ghostshield renew, which extends the license on that host for the new term.
Because nothing renews on its own, there is nothing to cancel: letting a term end is the cancellation. A term already started is not retroactively refunded, except as set out in our Refund Policy.
If a payment fails or is reversed, we may suspend license validation until the account is settled.
We may change prices with effect from the next Subscription Term; the price of a term already paid for does not change mid-term.

6. License Validation, HWID and JWT

The Software performs dynamic license validation. It computes the HWID of the host and verifies a cryptographically signed License Key (JWT) before enabling enforcement features. You agree:

not to interfere with, spoof, replay, patch out, emulate, virtualise or otherwise circumvent HWID derivation, signature verification, expiry checks or any anti-tamper mechanism;
not to run the Software with a key you did not lawfully obtain from us or the Official Reseller;
that a license which fails validation may cease to enforce, and that we may revoke a key we reasonably determine to have been shared, forged, tampered with, or obtained fraudulently.

7. Prohibited Uses

Acceptable Use Policy and Intellectual Property: The granted license is revocable, non-transferable, and strictly for protecting your assets. It is strictly prohibited to: (i) reverse engineer, decompile, or disassemble the agent binaries or dashboard; (ii) attempt to extract eBPF objects, BPF Type Formats (.BTF), or licensing keys; (iii) use the software to build a competing product or analyze our Jailer containment logic.

The following are strictly prohibited and constitute a material breach of these Terms, terminating your license immediately and without refund.

7.1 Reverse engineering and tampering

Reverse engineering, decompiling, disassembling, de-obfuscating, lifting, decompiling to source, or otherwise attempting to derive the source code, eBPF bytecode logic, algorithms, detection heuristics, data structures or internal protocols of the Engine or any other component.
Extracting, dumping, instrumenting, tracing, hooking, patching, hot-patching, relinking or modifying any binary, kernel object, eBPF program, map or embedded key of the Software.
Creating derivative works of the Software, or any product that reproduces its detection logic.
Removing, obscuring or altering copyright notices, license notices, watermarks or attributions.
Any attempt to defeat, bypass, disable, weaken or neutralise the HWID binding, JWT signature verification, license expiry, anti-tamper, self-protection or telemetry integrity of the Software.
Distributing, publishing or trafficking in tools, keys, patches or instructions whose purpose is to accomplish any of the above.

Where mandatory local law grants you a non-waivable right to decompile for interoperability, that right survives; before exercising it you agree to first request the necessary interface information from us in writing.

7.2 Unauthorised and unlawful use

Running the Software on infrastructure you do not own or are not authorised in writing to defend.
Using the Software to attack, disrupt, intercept, surveil or gain unauthorised access to any third party, or as a component of offensive tooling.
Using the Software to process content unlawfully, or in breach of applicable data protection, wiretap, labour or telecommunications law in your jurisdiction.
Using the Software in life-critical, life-support, aviation control, nuclear or other high-risk environments in which failure could cause death, injury or severe environmental damage.
Reselling, white-labelling, sublicensing, or providing the Software to third parties as a managed or hosted service without a separate written agreement with us.
Publishing benchmarks, detection-evasion results or comparative security tests of the Software without our prior written consent.
Sharing, publishing or leaking installers, license keys, private build artefacts or credentials.

8. Customer Responsibilities

You are solely responsible for your infrastructure and for how the Software is deployed on it. In particular, you agree that you will:

validate the Software in a staging or non-production environment before enabling enforcement in production, and maintain tested, restorable backups at all times;
keep a working out-of-band recovery path (console, rescue mode, snapshot) before enabling any blocking, lockdown, anti-tamper or immutability feature;
maintain a supported kernel and distribution, and accept that kernel upgrades may change eBPF behaviour and require an updated version of the Software;
configure allowlists, VIP lists and enforcement modes appropriately for your workloads, and review the impact of enforcement on legitimate processes;
obtain any consent or notice required in your jurisdiction before monitoring systems used by employees or third parties;
safeguard your license keys, credentials and panel access, and notify us promptly of any suspected compromise.

The Software enforces at Ring 0. Misconfiguration can block legitimate processes or render a host unreachable. That risk is yours to manage.

9. Support and Updates

During an active Subscription Term we provide reasonable-effort technical support by email at contact@bastioncyber.online, in Portuguese or English, on Paraguayan business days. Support covers installation, compatibility and defect reports. It does not include incident response, forensic investigation, infrastructure administration, custom development, or the remediation of a compromise. We may issue updates, and may deprecate versions, kernels or distributions with reasonable notice. We are not obliged to maintain compatibility with unsupported, end-of-life or custom-patched kernels.

10. Intellectual Property

The Software, its Engine, its architecture, source code, detection logic, documentation, trade marks and branding are and remain the exclusive property of Bastion Cyber and its licensors, protected by Paraguayan and international copyright and trade secret law. Feedback you voluntarily send us may be used without restriction or compensation. Nothing in these Terms grants you any right to use our name or marks except to state factually that you are a customer.

11. Third-Party and Open-Source Components

The Software may include third-party and open-source components, licensed under their own terms, which prevail over these Terms to the extent of any conflict for those components. Notices are supplied with the distribution or on request.

12. Confidentiality

Non-public information exchanged between the parties — including build artefacts, keys, detection internals and any security findings about your environment — is confidential and must be protected with at least reasonable care and used only for the purpose of this agreement.

13. Disclaimer of Warranties

THE SOFTWARE IS PROVIDED “AS IS” AND “AS AVAILABLE”, WITHOUT WARRANTY OF ANY KIND, EXPRESS, IMPLIED OR STATUTORY, INCLUDING WITHOUT LIMITATION THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, AND ANY WARRANTY ARISING FROM COURSE OF DEALING OR USAGE OF TRADE.

No security tool guarantees 100% invulnerability. We do not warrant that the Software will detect, block or prevent every intrusion, malware sample, zero-day, insider action, supply-chain compromise, misconfiguration or data exfiltration attempt; that it will be uninterrupted, error-free, or free of false positives or false negatives; that it will be compatible with every kernel version, distribution, hypervisor or container runtime; or that any given result will be achieved by using it.

14. Limitation of Liability

Acknowledgement of Liability — version 1.0, in force since 13 September 2026. This is the text identified by the version recorded against your acceptance.

Limitation of Liability: GhostShield operates at the kernel level (Ring 0) using advanced isolation and eBPF to mitigate threats. However, cybersecurity is a dynamic environment. The software is provided “as-is”, under a risk mitigation and best-effort model. Under no circumstances shall BastionCyber be liable for data loss, loss of profits, server downtime, ransomware infections, or any indirect damages arising from the use or inability to use our agent.

To the maximum extent permitted by applicable law:

Bastion Cyber shall have no liability whatsoever for any intrusion, compromise, ransomware event, privilege escalation, data breach, data loss, data corruption, service outage, downtime, host unavailability, blocked legitimate process, corrupted backup, regulatory fine, reputational harm, or third-party claim occurring on or in relation to the Customer’s servers, whether or not the Software was running, detected the event, or failed to detect it;
Bastion Cyber shall not be liable for any indirect, incidental, special, punitive, exemplary or consequential damages, nor for loss of profits, loss of revenue, loss of business, loss of goodwill, loss of anticipated savings, or loss or corruption of data, even if advised of the possibility of such damages;
our total aggregate liability arising out of or relating to the Software and these Terms, on any theory of liability, shall not exceed the total amount actually paid by you for the Software during the twelve (12) months immediately preceding the event giving rise to the claim;
these limitations apply even if a limited remedy fails of its essential purpose, and they allocate the risk between the parties as reflected in the price of the Software.

Nothing in these Terms excludes liability that cannot lawfully be excluded, including liability for fraud, wilful misconduct, or death or personal injury caused by negligence. Where local consumer law grants you non-excludable rights, those rights are unaffected.

15. Indemnification

You will defend, indemnify and hold harmless Bastion Cyber and its operator against any claim, demand, loss, liability, fine or expense (including reasonable legal fees) arising from your use of the Software in breach of these Terms, your unauthorised deployment of the Software on infrastructure you do not control, your violation of law or of third-party rights, or content or activity on your servers.

16. Suspension and Termination

We may suspend or terminate your license immediately, without refund, if you materially breach these Terms — in particular Section 7 — if payment is not made or is reversed, or if continued use would expose us to legal liability. You may terminate at any time by cancelling your subscription and uninstalling the Software. On termination, all license rights end and you must remove every installed instance and destroy all copies and keys. Sections 7, 10, 12, 13, 14, 15, 20 and 21 survive termination.

17. Export Control and Sanctions

You represent that you are not located in, organised under the laws of, or ordinarily resident in a country or territory subject to comprehensive sanctions, and that you are not on any restricted-party list. You will not export, re-export or make the Software available in violation of applicable export control or sanctions law.

18. Force Majeure

Neither party is liable for failure to perform caused by events beyond its reasonable control, including internet or hosting failures, upstream provider outages, cyberattacks, power failures, acts of government, natural disaster or armed conflict.

19. Changes to These Terms

We may amend these Terms. Material changes will be reflected in the “Last updated” date on this page and, where reasonably practicable, notified by email. Changes apply from the next Subscription Term or, for non-material changes, on publication. Continued use after the effective date constitutes acceptance. If you do not accept a material change, your remedy is to let your current term expire and not buy a renewal.

20. Governing Law and Exclusive Jurisdiction

Governing Law and Jurisdiction: These Terms shall be governed and construed in accordance with the laws of the Republic of Paraguay. Any dispute arising from these Terms shall be submitted to the exclusive jurisdiction of the competent courts in Ciudad del Este, Alto Paraná Department.

The United Nations Convention on Contracts for the International Sale of Goods does not apply.

Each party waives any right to a jury trial and, to the extent permitted by law, agrees that claims will be brought only in an individual capacity and not as a plaintiff or class member in any purported class or representative proceeding.

21. General

Entire agreement. These Terms, together with the Privacy Policy and the Refund Policy, are the entire agreement between the parties regarding the Software and supersede all prior understandings.
Severability. If any provision is held unenforceable, it will be limited to the minimum extent necessary and the remainder stays in force.
No waiver. Failure to enforce a provision is not a waiver of it.
Assignment. You may not assign these Terms without our written consent; we may assign them in connection with a merger, acquisition or sale of assets.
No agency. Nothing here creates a partnership, joint venture, employment or agency relationship between the parties.
Language. The English version of these Terms is the controlling version. Any translation is provided for convenience only.
Notices. Notices to us must be sent to contact@bastioncyber.online; notices to you are sent to the email address on your account.

22. Contact

Bastion Cyber — sole proprietorship
Ciudad del Este, Alto Paraná Department, Republic of Paraguay
contact@bastioncyber.online
Billing, invoices and payment queries: handled by our authorized Merchant of Record (MoR).