Terms and conditions

By using the website or installing the product you accept the terms below. If you disagree, do not install the product and do not use the services.

For business customers, specific terms in a signed contract take precedence over this page. This is the standard version, not the negotiated one.

We grant you a non-exclusive, non-transferable right to install and use Malnox on the number of devices covered by the active licence. A “seat” is one activated installation, not a physical device.

The Free plan can be used without an account, unlimited in time, within the functional limits shown. We have no right to remotely disable Free features.

Displayed prices are in EUR and include VAT. For business customers we can issue reverse-charge invoices or proformas on request.

You may request a refund within 30 days of the first purchase, without justification. Write from the account address and we close the licence; we do not ask for a reason and do not run retention scripts.

Malnox detects some threats, not all. The kernel driver exists and compiles, but has no official signature, so it does not load on a normal Windows; the emulation sandbox statically reconstructs encoded payloads but does not run the file in a virtual machine; memory scanning cannot open another user's processes or system-protected ones; a bootkit installed before the operating system is not intercepted. These limits are published and are part of the contract: you cannot claim you bought something else.

When a verdict is “malicious”, Malnox acts: it stops the process holding the file (after checking it is not an essential system process), moves the file to AES-256-GCM encrypted quarantine, denies execution if the move fails and, during an encryption attack, freezes the suspect processes before restoring the backups. The limits published above concern detection precision, not a missing response.

For licences with an account, the product periodically sends a summary of the installation's health to api.malnox.com: how many engines are active, the security score, the licence state, the state of signatures, of the learning engine, of self-defence and of the kernel filter. Full details, including what is never sent, are in the privacy policy under “Installation health”.

The report contains no file content, file names, paths or personal data of other people. It serves only to display state in your admin console and cannot be used to change a detection verdict.

You may not use the product to attack, disrupt or access systems you do not own without authorisation. You may not use the rules or the engine to build a competing product by reverse-engineering our binaries.

Vulnerability reporting is encouraged and does not constitute prohibited use, as long as you follow the responsible disclosure policy.

These terms are governed by Romanian law. The competent courts are those in Bucharest, without limiting consumers' right to bring proceedings at their place of residence.