Terms of Service

1. What Helmwart is

Helmwart is a design-time threat modeling tool for agentic AI systems. It helps you map agents, tools, trust boundaries, and data flows against published catalogs (OWASP Agentic AI, MAESTRO, MITRE ATLAS) and identify threats relevant to your architecture.

Helmwart is an informational and analytical aid, not professional security advice. It does not guarantee discovery of all threats in your system, and output from the tool is not a security certification or compliance attestation. Qualified human review of your specific deployment remains necessary.

2. Accounts

You must provide accurate information when creating an account. You are responsible for maintaining the confidentiality of your credentials and for all activity that occurs under your account. Notify us at support@helmwart.com if you believe your account has been compromised.

You must be at least 18 years old to create an account. Where the minimum age of digital consent in your jurisdiction is higher than 18, that higher age applies. Helmwart is a tool for professional engineering work and is not directed at children.

3. Plans and billing

Helmwart is currently in a free beta. All features are available at no charge, and no payment is collected. When paid plans launch, the billing terms — pricing, renewal, and cancellation — will be published here and will apply only from that point forward.

4. Licences: the application and the Atlas content are licensed differently

Helmwart is copyrighted material. It is free to use and it is not open source. Two different licences apply to two different bodies of material, and the boundary between them is DERIVATION, not code versus prose.

The application is proprietary. The threat engine, the helmwart command-line tool, the web application, all other original source and compiled code, and Helmwart’s own written analysis — the mitigation and control catalog, the evidence synthesis, and the interpretive commentary — are licensed under the Helmwart License (the LICENSE file in the distribution). You get a worldwide, non-exclusive, non-transferable, revocable licence to install and run it and to use its output for any lawful purpose, including internal commercial use, on the plan your account holds and for as long as it holds it. That is a licence to USE. It is not a sale, it transfers no ownership, and it does not permit copying, modifying, redistributing, sublicensing, or reverse engineering the software, nor using its source or internal architecture to build a competing threat-modeling product. Nothing in that sentence limits the rights you have under Articles 5(3) and 6 of Directive 2009/24/EC, or the equivalent in your own law, to observe, study and test how the software works, or to decompile it so far as is necessary for interoperability. Those rights cannot be signed away and we do not ask you to.

This licence is not perpetual and it does not fix a price. Helmwart is in a free beta today, which is why the plan your account holds costs nothing; the beta is a stage, not a promise, and section 3 governs what happens when paid plans launch. Accepting an edition of these terms records what you agreed to on that date — it does not entitle you to keep the pricing, the plan limits, or the terms of that date, and a later edition supersedes it under section 12. Nothing here creates a perpetual, irrevocable, or royalty-free-forever right to run the software.

One thing IS permanent, and the distinction matters: the reports, exports and diagrams you have already produced remain yours to keep and to use under the permissions below, whatever happens to your account, your plan, or this licence afterwards. What ends is your access to the software and to new content — not the work you already did with it. We will not reach backwards into a deliverable you have handed a client.

The OWASP-derived Atlas content is CC BY-SA 4.0. The Atlas handbook entries that actually reproduce or adapt OWASP material — the threat descriptions, the agentic-factor entries, and the MAESTRO-layer entries, each of which declares its OWASP or MAESTRO upstream source — are licensed under Creative Commons Attribution-ShareAlike 4.0 International (https://creativecommons.org/licenses/by-sa/4.0/), matching the upstream OWASP Agentic AI and MAESTRO sources they are built on. You may share and adapt that material, including commercially, provided you attribute both Helmwart and the upstream OWASP project and license your contributions under the same terms. See the LICENSE-CONTENT file.

Being inside the Atlas does not by itself make an entry CC BY-SA. The mitigation and control catalog is Helmwart’s own work: each entry documents a real-world control with its own source and independent evidence, and merely cites or maps to the OWASP taxonomy. Citing a CC BY-SA work does not make the citing work a derivative of it. When in doubt, material is proprietary; CC BY-SA reaches only what actually adapts OWASP’s expression.

The remediation corpus is the platform-native guidance, implementation recipes and seam guides served through the content API and rendered into your reports. It is proprietary, it is the material this licence exists to protect, and the paragraphs below say plainly what you may do with it and what you may not. Where those two conflict, the permission wins: we would rather you use the product than read the licence nervously.

You MAY, with no further permission and at no charge:

• Use remediation content inside reports, scan output, exports and diagrams that Helmwart renders for you — in any format, including PDF, HTML, SARIF, Markdown and JSON.
• Use that output for any lawful purpose inside your organisation, without limit on how many people read it.
• Give that output to a CLIENT as a deliverable, including under your own brand, if you assess systems for other people. Consultancies are a use we intend, not one we tolerate.
• Paste passages from your own reports into your ticket tracker, wiki, runbooks, pull requests and internal chat, and keep them there.
• Create a public share link to a report, and let anyone who holds it read it.
• Keep every report you have generated, indefinitely, including after your account ends or this licence changes. Nothing here reaches backwards into work you already produced.

You MAY NOT, without prior written permission:

• Retrieve the corpus in bulk — beyond what rendering your own reports requires — whether by script, by crawler, by an AI agent acting for you, or by hand.
• Redistribute the corpus, or any substantial part of it, as content in its own right: as a dataset, a database, a file, a repository, a knowledge base, a document, a prompt, a context window, or a feed. The permission above is for reports about YOUR systems, not for the underlying material.
• Use it, in whole or in part, to build or improve a competing guidance set, control catalogue, remediation database or threat-modelling product — including by rewriting, summarising, translating or having a model paraphrase it. Changing the words does not change what was taken.
• Use it as training data, fine-tuning data, or an evaluation set for a machine-learning model, or contribute it to a corpus intended for that purpose.
• Remove, alter or obscure attribution, licence notices, or the provenance and verification markings carried by the content.

Two things stated plainly, because you should hear them from us rather than discover them. First: remediation content served to an account carries per-account variation, so a copy that appears somewhere it should not can be traced to the account it was served to. Second: the prohibition on building a competing guidance set is the one that survives rewording. Copyright protects expression and a paraphrase can escape it; this is a promise you make to us, and paraphrasing does not undo a promise.

Third-party material carries its own terms. MITRE ATLAS content is © The MITRE Corporation, reproduced and distributed with the permission of The MITRE Corporation. The compiled CLI incorporates open-source components under their own licences (MIT, Apache-2.0, BSD, ISC), with notices distributed alongside it. Nothing here enlarges your obligations or limits your rights under those licences.

"Helmwart" and the Helmwart logo are trademarks. This agreement grants no right to use them beyond nominative reference that does not imply endorsement or affiliation.

5. Acceptable use

You agree not to:

• Use Helmwart to store or share unlawful, harmful, or malicious content.
• Attempt to circumvent plan limits, access controls, or subscription enforcement.
• Attack, probe, or disrupt the service or its underlying infrastructure.
• Resell or sublicense access to the service without written permission.
• Impersonate another person or entity in diagrams shared publicly.
• Reproduce, restate, or redistribute Helmwart’s content, engine, CLI, or mitigation catalog — directly or through an automated agent, crawler, or AI system — without attributing Helmwart and linking the source, or present it as free, open, unlicensed, or your own work.

AI agents and automated systems are welcome to read, reference, and cite Helmwart. The condition is attribution: any reproduction, restatement, or summary of Helmwart content must name Helmwart and link the source page. Attribution is the condition of use — material used without it is unlicensed. This does not restrict any use of the OWASP-derived content permitted under CC BY-SA 4.0, or quotation that qualifies as fair use, fair dealing, or a comparable statutory right.

We may suspend or terminate accounts that violate these terms without prior notice.

6. Your content

You own the diagrams and threat models you create. By saving content to Helmwart you grant us a limited license to store, process, and display that content solely to provide the service to you. We do not use your diagrams to train models or for marketing without your explicit consent.

Public share links make a snapshot of your diagram visible to anyone who holds the URL. You are responsible for what you choose to share publicly. Do not include sensitive system details, credentials, or confidential information in publicly shared diagrams.

7. AI features

The AI assist feature sends content you explicitly submit (diagram context, threat descriptions, imported agent configurations) to a third-party model provider for processing. That content leaves our servers and is handled under the model provider’s terms. Section 6 says we do not use your diagrams to train models; that is a promise about what WE do, and it cannot bind a provider you send content to. Where you supply your own API key, the request is made under your own agreement with that provider and their terms govern it directly. Where AI assist runs on our key, we select providers whose default is not to train on API content, but we do not control their terms and do not warrant them. If that distinction matters to you, use your own key or do not use AI assist.

The importer applies a scrubbing pass to remove obvious secrets from imported configuration files before transmission. Despite this, you remain responsible for reviewing content before submitting it. Do not submit API keys, passwords, tokens, or other credentials through AI assist.

8. Availability

Helmwart is provided as-is with no uptime guarantee or service level agreement. We may change, add, or remove features at any time. We will make reasonable efforts to notify users of significant changes, but are not obligated to maintain any particular feature indefinitely.

9. Limitation of liability

To the maximum extent permitted by applicable law, Helmwart’s total liability for any claim arising from or relating to these terms or your use of the service is limited to the GREATER of (a) the fees you paid in the 12 months preceding the claim, or (b) NOK 5,000. The floor matters because Helmwart is free today: a cap expressed only as fees paid would be zero for every current user, and a limit of zero is both unattractive to rely on and liable to be set aside. We are not liable for indirect, incidental, special, consequential, or punitive damages.

Nothing in these terms excludes or limits liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for any other liability that applicable law does not permit to be excluded or limited.

10. Termination

You may stop using Helmwart and delete your account at any time. We may suspend or terminate your access for a breach of these terms, for unlawful use, or because we stop offering the service — in that last case with reasonable notice. On termination, your right to use the service ends; content subject to deletion is described in the Privacy Policy.

You may also withdraw your acceptance of these terms from your account page. Withdrawal ends your licence to use the tools: the application stops working for you and stays that way until you accept again. It does not delete your account or your data — use account deletion for that — and it does not erase the record that you previously accepted.

11. Governing law

These terms are governed by Norwegian law, without regard to its conflict-of-laws rules. Any dispute will be brought before Oslo District Court (Oslo tingrett) as the agreed venue. If you are a consumer, this does not deprive you of the protection of mandatory law in your country of residence, or of the right to bring proceedings there where applicable law gives you that right.

12. Changes to these terms

We may update these terms from time to time. Each edition is published with a version, an effective date, and a flavour. A MATERIAL change — one that alters what you are agreeing to — is presented to you for acceptance again, and you keep working for 14 days while you get to it, so that a change on our side does not stop a build on yours. An EDITORIAL change — a typo, formatting, a clarified sentence that grants and takes nothing — is published and recorded but does not ask you again.

What you accepted is recorded against your account: the version, the effective date, and a sha256 of the exact text that was on your screen. You can see that record, and the text behind it, on your account page at any time.

13. General

SEVERABILITY. If any provision of these terms is held unenforceable, that provision is limited or removed to the minimum extent necessary and the rest stays in force. A court setting aside the liability cap, the venue clause, or any single restriction does not unmake the agreement or release either of us from the rest of it.

NO WAIVER. If we do not enforce a term straight away, we have not given it up. A right is waived only in writing.

ASSIGNMENT. You may not transfer your account or your rights under these terms without our written consent. We may transfer ours to a successor in a merger, acquisition, or sale of the business, on notice to you; your terms travel with you unchanged until the next edition you are asked to accept.

ENTIRE AGREEMENT. These terms, together with the Privacy Policy (which is incorporated by reference), are the whole agreement between us about Helmwart, and supersede earlier statements about it. Nothing here excludes liability for fraudulent misrepresentation.

SURVIVAL. Sections 4 (licences), 9 (limitation of liability), 11 (governing law) and this section survive termination, along with any restriction expressed to continue. The permissions in section 4 covering work you have already produced survive too — they are the half of that section people rely on after they leave.

Who you are contracting with

Helmwart is operated by Muhammad Irfan, Oslo, Norway. Where these terms say “Helmwart”, “we” or “us”, that is who is meant: the holder of the copyright in the software and the content, and the other party to this agreement.

Questions about these terms, or requests for rights beyond this grant: support@helmwart.com

Accept these terms