1. Not a Guarantee of Security
Orkexto is a tool designed to assist your organization's security operations by correlating, prioritizing, and surfacing findings across the security tools you connect. Orkexto does not guarantee, and should not be relied upon as guaranteeing:
- the identification of all security vulnerabilities, misconfigurations, threats, or incidents present in your environment;
- the prevention of any security breach, data loss, unauthorized access, or other security incident;
- the accuracy, completeness, or timeliness of any finding, correlation, risk score, or recommendation generated by the Service; or
- that your use of the Service satisfies any specific regulatory, contractual, or insurance requirement.
Orkexto's coverage is inherently limited to the tools you connect and the scope of access you grant. Gaps in connector coverage, misconfigured connectors, or limitations in the underlying source tools' own detection capabilities will limit what Orkexto can surface. You remain solely responsible for your organization's overall security posture and incident response.
2. AI-Generated Output
Findings, correlations, risk scores, incident narratives, and remediation recommendations are generated in whole or in part by artificial intelligence, including large language models. AI-generated output can be incomplete, outdated, or incorrect. It should be treated as a decision-support input, reviewed by qualified personnel, and not acted upon automatically except through the Act-mode mechanism you have explicitly and knowingly configured, with a rollback plan you have defined, per the Terms of Service.
3. No Professional Advice
Nothing in the Service constitutes legal, regulatory, insurance, or professional security-consulting advice. Recommendations generated by the Service are informational and operational in nature. Where a finding has legal, regulatory, or contractual significance (for example, a potential breach-notification obligation), you should consult qualified counsel or a licensed professional before acting or declining to act.
4. Third-Party Connected Systems
Orkexto integrates with third-party tools and services that we do not own, operate, or control (including cloud providers, SIEM/EDR vendors, and ticketing systems). We are not responsible for the availability, accuracy, security, or performance of any Connected System, or for any change a third-party vendor makes to its API, authentication method, or data format that affects the Service's ability to ingest or act on that system's data. Outages or degraded performance in a Connected System may result in incomplete or delayed findings within Orkexto.
5. Act-Mode Automation
Any action type you configure to operate in Act mode executes automatically, without a human approval step, within the scope and rollback plan you define. You are solely responsible for the decision to enable Act mode for any action type, for the adequacy of the rollback plan, and for testing the automation appropriately before relying on it in a production environment. Orkexto's guardrail/policy engine enforces the scope you configure, but does not independently judge whether a given automation is safe for your specific environment — that determination is yours.
6. No Life-Safety or Safety-Instrumented System Use
Orkexto is designed for information-technology and cloud security use cases. It is not designed, tested, or intended for use in connection with safety-instrumented systems, life-safety systems, medical devices, or any system where a failure or delay could result in death, personal injury, or severe physical or environmental harm. Do not connect Orkexto to, or rely on Orkexto for monitoring of, any such system.
7. Beta and Evolving Features
Certain features, connectors, or capabilities may be labeled or designated as beta, early access, or preview. These features are provided "as is," may change or be discontinued without notice, and may have reduced reliability compared to generally available features.
8. Security Certifications
Any reference to pursuit of, alignment with, or progress toward a security certification or framework (including SOC 2 Type II) describes a certification process that may be in progress. Such references do not constitute a representation that the certification has been obtained unless we have expressly and currently stated that it has, with a current certificate or attestation available upon request.
9. Limitation of Liability Cross-Reference
The disclaimers in this document are subject to, and should be read together with, the warranty disclaimers and limitation of liability provisions in Sections 11 and 12 of the Orkexto Terms of Service.
Contact
Questions about this document should be directed to legal@orkexto.com.
Orkexto, Houston, Texas.