Please read these Terms of Service (“Terms”) carefully before using the website clsecuritylabs.com (the “Site”) or any services offered by CLS Security Labs LLC (“CLS Labs,” “we,” “us,” or “our”). By accessing or using the Site or our services, you agree to be bound by these Terms. If you do not agree to these Terms, do not use the Site or our services.

1. Company Information

CLS Security Labs LLC is a Colorado limited liability company providing AI security assessment, red team testing, defense infrastructure, and related consulting services. Our services include but are not limited to: AI model security assessments, red team penetration testing of large language models, deployment of defense proxies and classifiers, compliance mapping, and security consulting.

2. Description of Services

CLS Labs provides professional AI security services under the following service tiers:

Forge Assessment (Tier 1): Automated OWASP Top 10 for LLMs scan covering prompt injection, jailbreaking, data exfiltration, and related attack categories.

Custom Assessment (Tier 2): Tailored attack development, industry-specific testing, RAG and agent security evaluation, and defense calibration.

Full CLAP Assessment (Tier 3): Comprehensive security evaluation including continuous monitoring, full defense deployment, and compliance documentation.

Ongoing Defense Services: Managed defense proxy, classifier updates, continuous monitoring subscriptions at Community (free), Pro, and Enterprise tiers.

Specific service terms, deliverables, timelines, and fees will be defined in a separate Statement of Work (SOW) or Master Services Agreement (MSA) executed between CLS Labs and the client.

3. User Obligations and Acceptable Use

By using the Site or engaging our services, you agree that you will not: (a) use the Site or any information obtained from CLS Labs to conduct unauthorized security testing against any system you do not own or have explicit written authorization to test; (b) attempt to reverse-engineer, decompile, or extract proprietary methodologies, classifier architectures, or defense mechanisms; (c) redistribute, sublicense, or resell any CLS Labs deliverables, tools, or reports without prior written consent; (d) use the Site to transmit any malicious code, spam, or content that violates applicable law; or (e) misrepresent your identity or authority to engage CLS Labs services.

4. Intellectual Property

CLS Labs Property: All content on the Site, including text, graphics, logos, trademarks, software, methodologies, attack taxonomies, defense architectures, the CLAP protocol, Forge Engine, Certified Remediation Patterns (CRPs), classifier models, and all related intellectual property, are and remain the sole property of CLS Security Labs LLC. Nothing in these Terms transfers any ownership rights to you.

Client Property: During service engagements, CLS Labs may access client systems, models, and data. All client proprietary information, including system prompts, model configurations, and business data, remains the property of the client and is subject to the applicable Data Handling Agreement.

Assessment Deliverables: Reports and deliverables produced during an engagement are delivered to the client for their internal use. CLS Labs retains the right to use anonymized, aggregated findings to improve its tools, classifiers, and services, as specified in the Data Handling Agreement.

5. Confidentiality

CLS Labs treats all client engagement data as confidential. Specific confidentiality obligations will be governed by a separate Non-Disclosure Agreement (NDA) and/or the confidentiality provisions within the applicable MSA or SOW. CLS Labs will not disclose client-specific findings, system details, or vulnerability data to any third party without written consent.

6. Disclaimer of Warranties

The Site and all services are provided “as is” and “as available” without warranties of any kind, either express or implied, including but not limited to implied warranties of merchantability, fitness for a particular purpose, and non-infringement. CLS Labs does not warrant that: (a) the Site will be uninterrupted or error-free; (b) any security assessment will identify all vulnerabilities in a client’s system; (c) any defense deployed will prevent all attacks; or (d) the information on the Site is complete, accurate, or current.

AI security is an evolving field. New attack techniques and vulnerabilities emerge continuously. CLS Labs’ assessments represent a point-in-time evaluation based on known attack methodologies at the time of testing.

7. Limitation of Liability

To the maximum extent permitted by applicable law, in no event shall CLS Security Labs LLC, its members, employees, agents, or contractors be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, data, goodwill, or business opportunity, arising out of or in connection with: (a) your use of or inability to use the Site; (b) any services performed by CLS Labs; (c) any vulnerabilities not detected during an assessment; or (d) any unauthorized access to or alteration of your systems.

CLS Labs’ total aggregate liability for all claims arising out of or related to these Terms or any services shall not exceed the fees paid by you to CLS Labs during the twelve (12) months preceding the claim.

8. Indemnification

You agree to indemnify, defend, and hold harmless CLS Security Labs LLC, its members, employees, agents, and contractors from and against any and all claims, liabilities, damages, losses, costs, and expenses (including reasonable attorney’s fees) arising out of or related to: (a) your breach of these Terms; (b) your use of any CLS Labs deliverables or findings in a manner not authorized by these Terms or the applicable SOW; or (c) any third-party claim arising from your use of the Site or services.

9. Authorized Testing Disclaimer

CLS Labs conducts security assessments only against systems for which the client has provided explicit written authorization. CLS Labs will not knowingly test any system without proper authorization. Clients represent and warrant that they have the legal authority to authorize testing of any system submitted for assessment. CLS Labs shall not be liable for any claims arising from a client’s failure to obtain proper authorization.

10. Published Research and Reports

CLS Security Labs publishes aggregate adversarial performance data. Specific reproducible vulnerabilities are subject to our Responsible Disclosure Policy with vendor notification prior to publication. Reports available for purchase contain performance metrics only and do not include exploitation techniques.

11. Third-Party Links and Services

The Site may contain links to third-party websites, tools, or services. CLS Labs does not endorse, control, or assume responsibility for any third-party content or services. Your use of third-party services is subject to their respective terms and policies.

12. Modifications to Terms

CLS Labs reserves the right to modify these Terms at any time. Changes will be posted on the Site with an updated “Last Updated” date. Your continued use of the Site or services after any changes constitutes acceptance of the modified Terms. For clients under active service agreements, material changes to these Terms will not override the terms of any executed MSA or SOW.

13. Termination

CLS Labs may suspend or terminate your access to the Site at any time, with or without cause, and with or without notice. Upon termination, all provisions of these Terms which by their nature should survive will survive, including intellectual property provisions, disclaimers, limitations of liability, and indemnification.

14. Governing Law and Dispute Resolution

These Terms shall be governed by and construed in accordance with the laws of the State of Colorado, without regard to its conflict of laws principles. Any disputes arising under these Terms shall first be subject to good-faith negotiation between the Parties. If negotiation fails, disputes shall be resolved by binding arbitration administered in the State of Colorado in accordance with the rules of the American Arbitration Association, unless both Parties agree in writing to submit the dispute to a court of competent jurisdiction in the State of Colorado.

15. Miscellaneous

Entire Agreement: These Terms, together with any applicable MSA, SOW, NDA, and Data Handling Agreement, constitute the entire agreement between you and CLS Labs with respect to the subject matter hereof.

Severability: If any provision of these Terms is held to be unenforceable, the remaining provisions shall remain in full force and effect.

Waiver: No waiver of any provision shall be deemed a further or continuing waiver of such provision or any other provision.

Assignment: You may not assign these Terms without our prior written consent. CLS Labs may assign these Terms in connection with a merger, acquisition, or sale of all or substantially all of its assets.

16. Contact Information

For questions about these Terms, please contact:

CLS Security Labs LLC
Email: legal@clsecuritylabs.com
Website: clsecuritylabs.com