Terms

This site describes a piece of software. It is not a service, and nothing here is an offer of support.

The site

The pages and the demo are provided as they are, for reading and for trying. They may change or disappear without notice.

The demo is a demo

It replays verdicts recorded from the real engine against a test server built to behave badly. It is not a security assessment of your own servers, and a clean result here says nothing about them.

The software

hardened-mcp is offered under the licence in its repository, which is where its warranty terms live. Read them before you rely on it.

What it does not promise

The audit log is tamper-evident, not tamper-proof. Injection detection is pattern-based and will miss phrasings it has no pattern for. The page headed What the gateway does not do states the rest, and it is part of these terms.