Tripwire
Terms

Terms of Service

Last updated July 5, 2026

Tripwire is a product of Tachyon International Inc. These terms govern your use of the Tripwire service. The most important part is the acceptable use section: you may only place decoy credentials in systems, accounts, and repositories that you own or are authorized to monitor. Please read on.

Agreement to these terms

Tripwire (tripwire.so) is operated by Tachyon International Inc. (Tachyon, we, us). By requesting a bundle, creating a canary, signing in, or otherwise using the service, you agree to these Terms of Service and to our Privacy Policy. If you are using Tripwire on behalf of an organization, you represent that you are authorized to accept these terms for that organization. If you do not agree, do not use the service.

What Tripwire is (and is not)

Tripwire provides decoy credentials and canaries: inert secrets, files, and endpoints that you place where an intruder might find them. It sends you an alert when one is used. It is a detection tool: it is designed to tell you when a planted decoy is touched. It does not prevent, block, or remediate a breach, and it is not a substitute for good security practice. You should not rely on Tripwire as your only security control.

Eligibility and your account

Tripwire is intended for developers and businesses and is not directed to anyone under 16. You are responsible for the email address and account you use with Tripwire and for activity that occurs under it. Keep your access to that email secure; sign-in and alerts depend on it.

Acceptable use

Deception tools can be misused. To keep Tripwire lawful and safe, you agree that:

  • Authorization. You will place decoy credentials and canaries only in systems, cloud accounts, repositories, drives, devices, and environments that you own or are otherwise clearly authorized to monitor. You will not use Tripwire to surveil, entrap, or collect data on a specific individual you are not authorized to monitor.
  • Third-party platforms. When you place a decoy on a third-party platform (for example a code host, package registry, or paste site), you will comply with that platform’s terms and acceptable-use rules.
  • Lawful purpose. You will not use Tripwire for any unlawful, harmful, deceptive, infringing, or abusive purpose, or to gain unauthorized access to any system or data.
  • The service itself. You will not attempt to break, overload, probe (other than good-faith security testing per our Security page), reverse-engineer, resell, or circumvent limits of the service, and you will not use it to send spam or to impersonate others.

You are solely responsible for where you place decoys and for your use of the alert data you receive. We may suspend or terminate access that we reasonably believe violates this section.

Your decoys and the data they collect

The decoy credentials Tripwire issues are designed to grant access to nothing of value. When a decoy is used, Tripwire processes the technical detail of that event, such as the source IP address, user agent, and action, and shows it to you. That data may relate to whoever interacted with your decoy; you decide how to use it, and you are responsible for handling it lawfully. See our Privacy Policy for how we process personal data.

Beta service

Tripwire is offered as a beta and is free during the beta period. Features, limits, and pricing may change, and we may add, modify, or discontinue parts of the service. We will give reasonable notice of material changes where we can.

No warranty

Tripwire is provided “as is” and “as available,” without warranties of any kind, whether express or implied, including implied warranties of merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that detection or alert delivery will be uninterrupted, timely, complete, or error-free, that every use of a decoy will be detected, or that an alert will always reach you. The absence of an alert does not mean nothing happened.

Limitation of liability

To the fullest extent permitted by law, Tachyon and its officers, employees, and suppliers will not be liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss of data, profits, revenue, or goodwill, arising out of or relating to your use of, or inability to use, Tripwire, even if advised of the possibility. Our total liability for any claim relating to the service will not exceed the greater of the amount you paid us for the service in the twelve months before the claim, or US$100.

Indemnification

You will indemnify and hold harmless Tachyon from any claim, loss, or expense (including reasonable legal fees) arising out of your use of Tripwire in violation of these terms or applicable law, including your placement of decoys without authorization.

Suspension and termination

You may stop using Tripwire at any time and ask us to delete your data. We may suspend or terminate access if you violate these terms, if required by law, or to protect the service or its users. Sections that by their nature should survive termination (including acceptable use, disclaimers, limitation of liability, and indemnification) will survive.

Changes to these terms

We may update these terms as the product evolves. We will revise the date above and, for material changes, take reasonable steps to notify you. Continued use after a change means you accept the updated terms.

Governing law

These terms are governed by the laws of the State of Delaware, United States, without regard to its conflict-of-laws rules, and the courts located there will have jurisdiction over any dispute, except where applicable law gives you the right to bring a claim elsewhere.

Contact

Questions about these terms can be sent to [email protected]. Tripwire is a product of Tachyon International Inc.