Terms of Service

Cortex is an AI-powered security auditing service built and operated by Hamza Hafeez Bhatti, based in Lahore, Pakistan. The service is available at cortex-edr.com and app.cortex-edr.com.

When these terms refer to "Cortex," "we," "us," or "our," they mean the operator above.

Cortex connects to GitHub repositories you provide, scans the code using a multi-agent AI pipeline, and generates a security audit report. The service also includes a conversational AI interface (Cortex Chat) that can answer questions about your codebase and audit results.

Cortex is a code analysis tool — it is not a substitute for professional security advice, a penetration test, or a security certification. Findings are generated by AI and may contain errors, false positives, or omissions.

You must create an account to use the service. You are responsible for:

• —Keeping your password secure.
• —All activity that happens under your account.
• —Ensuring the email address on your account is accurate and accessible.

If you suspect unauthorized access, notify us immediately at cortexedr@gmail.com. We are not liable for losses caused by unauthorized use of your account if you failed to secure it.

You can:

• ✓Use Cortex to audit repositories you own or have explicit permission to scan.
• ✓Share audit reports with your team or clients.
• ✓Use the output to improve the security of your code.

You cannot:

• ✗Use Cortex to audit repositories you do not own or have no authorization to access.
• ✗Attempt to reverse-engineer, scrape, or extract underlying AI models or pipelines.
• ✗Resell or white-label the service without a written agreement.
• ✗Abuse the service in ways that damage infrastructure or other users.
• ✗Use the service for any illegal purpose.

Cortex offers a free tier with a limited number of scans per month, and paid plans with higher limits. Paid plans are billed monthly through Paddle, our payment processor.

Subscriptions automatically renew unless you cancel before the next billing date. You can cancel anytime from your account settings. Cancellation stops future charges; we do not issue refunds for partial billing periods unless required by applicable law.

If a payment fails, we may downgrade your account to the free tier until payment is resolved. Prices are listed in USD and may change. If we increase the price of your active plan, we will notify you at least 30 days in advance.

You own your code. We do not claim any ownership over repositories you submit for analysis.

By submitting a repository, you grant Cortex a limited, temporary license to access and process its contents for the purpose of generating a security report. We do not use your code to train AI models, sell it, or share it with third parties beyond what is required to run the service (e.g., passing relevant code snippets to an AI API to produce an analysis).

Audit results and chat history are stored in your account and are accessible to you. See our Privacy Policy for full details on how we handle your data.

AI-generated security findings are not guaranteed to be accurate, complete, or free of false positives. Cortex is a tool to assist in identifying potential issues — not a final authority on the security posture of your application.

Always validate findings before acting on them, particularly before disclosing vulnerabilities or making significant architectural changes. We are not responsible for decisions you make based on audit results.

We aim to keep Cortex available and running, but we do not guarantee 100% uptime. The service may be unavailable during maintenance, updates, or unforeseen outages. We will make reasonable efforts to notify users of planned downtime.

You can close your account at any time. We will delete your account and associated data upon request, subject to our data retention obligations.

We may suspend or terminate your account if you violate these terms, without prior notice in cases of serious or ongoing violations. If we terminate your account for reasons other than a violation, we will notify you and, where applicable, provide a prorated refund.

To the fullest extent permitted by law, Cortex is provided "as is." We are not liable for any indirect, incidental, or consequential damages arising from your use of the service, including but not limited to data loss, security breaches in your application, or lost revenue.

Our total liability for any claim related to the service is limited to the amount you paid us in the three months preceding the claim.

We may update these terms from time to time. If we make material changes, we will notify you by email or a prominent notice in the app at least 14 days before the changes take effect. Continued use of the service after changes take effect constitutes acceptance of the new terms.

These terms are governed by the laws of Pakistan. Disputes arising from these terms will be resolved in the courts of Lahore, Pakistan, unless local consumer protection laws in your country require otherwise.

For questions about these terms, reach us at: