Terms of Service

Last updated: 2026

1. What IncidentKit is

IncidentKit generates educational cybersecurity tabletop exercise materials based on the configuration you provide. It is a self-service product with no ongoing subscription — each purchase is a one-time transaction for the exercise package(s) described at checkout.

2. Not professional advice

Content produced by IncidentKit is educational material only. It is not legal, regulatory, compliance, or incident-response advice, and does not guarantee compliance with any law, regulation, contract, or standard. You are solely responsible for how you use the material, including verifying its suitability for your organization with qualified professionals.

3. Acceptable use

You agree not to submit real secrets, credentials, protected health information, or other sensitive operational data through the service, and not to use the service to generate or request content intended to facilitate actual system compromise, malware development, or exploitation of any system.

4. Payment

Payments are processed by Stripe. Prices are shown in USD at checkout. See our Refund Policy for details on refunds.

5. Intellectual property

Once generated and delivered, you may use your exercise package internally within your organization, including modifying it for your own use. The underlying base templates and generation system remain the property of IncidentKit.

6. Disclaimer & limitation of liability

The service and all generated content are provided "as is" without warranties of any kind. To the maximum extent permitted by law, IncidentKit is not liable for any indirect, incidental, or consequential damages arising from use of the service or its content.

7. Changes

We may update these terms from time to time. Continued use of the service constitutes acceptance of the then-current terms.