Terms of Service

Zulfiqaar, operated by MSS · Last updated 20 October 2026

Authorized use only. Sessions are monitored and recorded. Zulfiqaar is for authorized offensive-security work: in-scope bug bounty, sanctioned penetration tests, and CTFs. Only target systems you own or have explicit permission to test. Operators monitor and record session activity to enforce this.

1. Acceptance

These Terms are an agreement between you and MSS ("we", "us"). By creating an account or using the hosted Zulfiqaar workbench, you agree to them and to our Privacy Policy. If you do not agree, do not use the service. You must be at least 18 and able to enter a binding contract. If you use Zulfiqaar for an organization, you confirm you can bind that organization to these Terms.

2. Authorized use only

Only test assets you own, or for which you hold current, documented authorization.
Declare your targets, scope and authorization truthfully, and keep the agent within that scope.
Follow the rules of any bug-bounty program or engagement you work under, and all applicable laws.
Do not use Zulfiqaar for unauthorized access, service disruption, fraud, or any other unlawful activity.

You alone are responsible for your authorization. We verify domain ownership and require an operator authorization check before granting a session, but these checks do not move responsibility to us. You are legally responsible for every action taken in your session.

3. Monitoring, recording and intervention

You agree that operators may, at any time and without further notice, watch your session in real time, including the agent's actions, tool output, captured traffic and the live browser, and may keep recordings of that activity. Operators may pause, suspend or end a session that appears to go beyond its declared authorization or to break these Terms. This oversight is a core safety control and a condition of use.

4. Accounts and sessions

Access is sold as time-boxed sessions. Each paid order goes through an authorization review before a session is granted. Sessions run in an isolated container for your account and end when the session time runs out or the container is shut down. Keep your sign-in details secure; you are responsible for activity under your account.

5. Payments and refunds

We offer a one-hour trial and fixed-length access plans, listed on the Pricing page. Prices and access lengths are shown before you pay, and your access time starts when an operator approves your authorization, not when you pay. Trial payments are processed by Whop and access plan payments by Paddle; the processor's own terms apply to the payment itself. If a plan includes a finding guarantee, its conditions are stated at purchase. Except where a guarantee applies or the law requires otherwise, a purchase is non-refundable once the session has been granted. If your authorization is rejected before a session is granted, you will be refunded.

6. AI model usage

In the trial, we supply the agent's model access up to the usage limit shown on the Pricing page; excessive or abusive use may be rate-limited or stopped. On access plans, you supply your own model key and are responsible for its usage, its cost, and the provider's terms.

7. Platform security

Do not try to escape your container, reach other users' sessions, tamper with routing or isolation, get around monitoring, or test MSS's own infrastructure. Doing so is a material breach of these Terms and may be unlawful. To report a vulnerability in Zulfiqaar itself, email access@msszulfiqaar.com.

8. No warranty and limitation of liability

The service is provided "as is", without warranties of any kind, including that it will find any particular vulnerability or run without interruption. To the fullest extent the law allows, MSS is not liable for indirect, incidental or consequential losses, or for the results of how you use the tool. Our total liability for any claim is limited to the amount you paid for the session it relates to. Nothing in these Terms limits liability that cannot be limited by law.

9. Indemnity

You agree to cover MSS's losses and costs from claims arising out of your use of the service, including any testing you carried out without proper authorization.

10. Suspension and termination

We may suspend or close your account for any breach of these Terms, including testing outside your authorization or attempts to defeat isolation or monitoring. You can close your account at any time by emailing us. Sections 2, 8, 9 and 12 continue to apply after termination.

11. Changes to these Terms

When we change these Terms, we update the date at the top of this page. If a change is significant, we will email account holders before it takes effect. Continuing to use the service after that means you accept the updated Terms.

12. Governing law and disputes

These Terms are governed by the laws of the country in which MSS is established, and its courts have jurisdiction over any dispute, except where the law of your country of residence gives you the right to bring a claim there.

Before starting formal proceedings, please contact us at access@msszulfiqaar.com so we can try to resolve the issue directly.

13. General

These Terms and the Privacy Policy are the whole agreement between you and us about the service. If any part is found unenforceable, the rest still applies. If we do not enforce a right straight away, we have not given it up.