Terms of Service

Last Updated: March 24, 2026

These Terms of Service ("Terms") govern your purchase and use of the ThreatLab software and associated services provided by BrightByte Labs LLC ("we," "us," "our," or "Licensor"). By subscribing to or purchasing ThreatLab, you ("Customer," "you," or "your") agree to these Terms.

These Terms supplement the End User License Agreement (EULA) and Privacy Policy. In the event of a conflict, the EULA governs software usage and these Terms govern the commercial relationship.

1. What You Are Purchasing

A ThreatLab subscription provides:

ThreatLab Desktop Application — a Windows desktop application for malware analysis, threat investigation, and security research, including Hyper-V sandbox automation, real-time behavioral monitoring, threat scoring, PDF report generation, session recording, and EVTX log analysis with Sigma detection rules.
VPN Routing — access to VPN infrastructure for anonymizing sandbox network traffic during analysis sessions, subject to availability.
AI-Powered Threat Analysis — optional AI analysis of aggregated session threat data via third-party AI services, which can be enabled or disabled at any time.
Base VM Image — a downloadable Windows virtual machine image for use as the sandbox environment.
Software Updates — access to application updates and new features released during your subscription period.
Management Portal — web-based portal for account management, license administration, and organizational settings.

2. What You Are NOT Purchasing

Your subscription does not include:

Dedicated or guaranteed support response times (support is provided on a best-effort basis)
Service level agreements (SLAs) for uptime or availability
Custom development, integration, or consulting services
Windows operating system licenses (the base VM image requires a valid Windows license)
Hardware, Hyper-V configuration, or IT infrastructure support
Guaranteed malware detection or security outcomes

3. Subscription Plans and Pricing

3.1 Plans

ThreatLab is offered under the following subscription plans:

Trial — a time-limited evaluation period with limited features, provided at no cost. Trial subscriptions may not include all features available in paid plans.
Standard — the full-featured paid subscription at the then-current published price.

Current pricing is published at threatlabsandbox.com. We reserve the right to introduce additional plans or modify plan features with reasonable notice.

3.2 Seats

Each subscription includes a defined number of seats. One seat authorizes installation and use on one machine. Additional seats may be purchased. Seats can be transferred between machines by deactivating one machine and activating another.

3.3 Price Changes

We may change subscription pricing with at least 30 days' written notice (via email or portal announcement). Price changes take effect at the start of your next billing cycle after the notice period.

4. Billing and Payment

4.1 Recurring Billing

Subscriptions are billed on a recurring monthly or annual basis (depending on the plan selected) through Stripe, our payment processor. By subscribing, you authorize recurring charges to your payment method at the applicable rate.

4.2 Payment Method

You must provide a valid payment method. You are responsible for keeping your payment information current. If a payment fails, we may retry the charge, suspend your subscription, or terminate your access after reasonable notice.

4.3 Taxes

Prices are exclusive of applicable taxes. You are responsible for all taxes, duties, and levies imposed by your jurisdiction. Stripe may collect applicable sales tax on our behalf where required.

5. Refund Policy

Trial Period: We encourage you to evaluate ThreatLab thoroughly during the trial period before purchasing a paid subscription.

First 7 days of a new paid subscription: If you are unsatisfied with ThreatLab, you may request a full refund within 7 days of your initial paid subscription by contacting support@brightbytelabs.com. Your license will be deactivated upon refund.
After 7 days: Subscription fees are non-refundable. You may cancel at any time to prevent future charges, but no refund will be issued for the current billing period.
Renewals: Renewal charges are non-refundable. Cancel before your renewal date to avoid being charged for the next period.

6. Cancellation

You may cancel your subscription at any time through the Management Portal or by contacting support@brightbytelabs.com. Upon cancellation:

Your subscription remains active until the end of the current billing period.
No further charges will be made after the current period ends.
After your subscription expires, the software will cease to function and your license will become inactive.
Your local session data (reports, recordings, screenshots, EVTX logs) remains on your machine and is not deleted.

7. Account and Access

7.1 Account Security

You are responsible for maintaining the confidentiality of your account credentials, license keys, and activation tokens. You are liable for all activity under your account. Notify us immediately at support@brightbytelabs.com if you suspect unauthorized access.

7.2 Acceptable Use

You agree to use ThreatLab only for lawful purposes consistent with its intended use as a security analysis tool. You may not use the software or its associated services (including VPN infrastructure) for any illegal activity, to attack or disrupt systems you do not own or have authorization to test, or to violate any applicable law or regulation. We reserve the right to suspend or terminate accounts that violate this policy.

8. Service Availability

We strive to maintain availability of our licensing servers, VPN infrastructure, management portal, and update services. However, these services are provided without any uptime guarantee. We may perform maintenance, updates, or modifications that temporarily affect availability. We will make reasonable efforts to provide advance notice of planned downtime.

The desktop application's core analysis functionality (sandbox creation, monitoring, EVTX analysis, report generation) operates locally and does not depend on our servers being available, except for initial license activation and periodic validation.

9. Modifications to the Service

We may modify, update, or discontinue features of ThreatLab at any time. We will provide reasonable notice of material changes that reduce functionality. If we discontinue the service entirely, we will provide at least 60 days' notice and offer prorated refunds for any prepaid period beyond the discontinuation date.

10. Intellectual Property

All intellectual property rights in ThreatLab, including the software, documentation, branding, and associated services, are owned by BrightByte Labs LLC. Your subscription grants a limited license to use the software as described in the EULA. No ownership rights are transferred.

11. Disclaimer of Warranties

THREATLAB AND ALL ASSOCIATED SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED. WE DO NOT WARRANT THAT THE SOFTWARE WILL DETECT ALL THREATS, THAT ANALYSIS RESULTS WILL BE ACCURATE OR COMPLETE, THAT SANDBOX ISOLATION WILL PREVENT ALL MALWARE ESCAPE, OR THAT THE SERVICE WILL BE UNINTERRUPTED OR ERROR-FREE. YOU USE THREATLAB AT YOUR OWN RISK.

12. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, BRIGHTBYTE LABS LLC SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES ARISING FROM YOUR USE OF OR INABILITY TO USE THREATLAB, INCLUDING BUT NOT LIMITED TO LOSS OF DATA, LOSS OF PROFITS, SYSTEM DAMAGE, MALWARE ESCAPE, OR BUSINESS INTERRUPTION.

OUR TOTAL LIABILITY FOR ALL CLAIMS ARISING FROM THESE TERMS OR YOUR USE OF THREATLAB SHALL NOT EXCEED THE TOTAL AMOUNT YOU PAID TO US IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.

13. Governing Law and Disputes

These Terms are governed by the laws of the Commonwealth of Pennsylvania, United States, without regard to conflict of law principles. Any disputes arising from these Terms shall be resolved in the state or federal courts located in Pennsylvania. You consent to the personal jurisdiction of such courts.

14. International Customers

ThreatLab is operated from the United States. If you access or use ThreatLab from outside the United States, you do so at your own initiative and are responsible for compliance with local laws. Data transmitted to our servers (license validation, VPN sessions, portal accounts) is processed in the United States.

15. Changes to These Terms

We may update these Terms from time to time. We will notify you of material changes via email or portal announcement at least 30 days before they take effect. Your continued use of ThreatLab after the effective date constitutes acceptance. If you do not agree to the updated Terms, you may cancel your subscription before the changes take effect.

16. Severability

If any provision of these Terms is found to be unenforceable, the remaining provisions remain in full force and effect.

17. Entire Agreement

These Terms, together with the EULA and Privacy Policy, constitute the entire agreement between you and BrightByte Labs LLC regarding your subscription to and use of ThreatLab.

18. Contact

For billing questions, account issues, or questions about these Terms:

BrightByte Labs LLC
Email: support@brightbytelabs.com
Website: https://threatlabsandbox.com