# Bandit Stealth Terms of Use

Version 2026-10-06 · Effective date: October 6, 2026

These terms apply to the Bandit Stealth desktop IDE ("Stealth IDE"), the Bandit Stealth command-line tool ("Stealth CLI", installed as `bandit`), and the Bandit Cloud services they can connect to (together, the "Software"), as distributed by Burtson Labs LLC ("Burtson Labs", "we", "us"). By installing or using the Software you agree to these terms. If you use the Software for an organization, you confirm you are allowed to accept these terms for it, and "you" includes that organization.

## 1. Open-source license comes first

The Software's source code is licensed under the Apache License, Version 2.0. Nothing in these terms takes away any right that license gives you. If you build the Software from source and do not use Bandit Cloud, the Apache license is the only agreement that applies to that code. These terms add the rules for our official builds and for Bandit Cloud, and they repeat, in plain language, the disclaimers the Apache license already contains.

## 2. What the Software can do on your computer

The Software includes an AI agent. Depending on the permissions and mode you choose, it can:

- read, create, change, move and delete files;
- run commands, scripts and programs in a terminal;
- install packages and change project configuration;
- use git, including creating commits and pushing to remote repositories;
- connect to the internet, AI model providers and other services you configure;
- send your prompts, code and file contents to the model provider you select;
- use paid services (for example a model provider's API) and incur charges on your account.

AI models make mistakes. The agent can misunderstand a request, produce wrong or insecure code, act on outdated information, or take an action you did not expect. Approval prompts, permission modes, sandboxes and other safety controls reduce this risk but do not remove it.

## 3. Your responsibilities

You are responsible for how you use the Software and for every action you approve or allow it to take. In particular:

- **Review before you rely on it.** Review generated code, commands and changes before you run, ship, deploy or depend on them.
- **Keep backups.** Use version control and keep backups of anything you cannot afford to lose. Do not run the agent with broad permissions on data or systems without a recovery path.
- **Choose permissions carefully.** Automatic-approval modes let the agent act without asking you first. Use them only where you accept that risk.
- **Only give access you are entitled to give.** Do not point the agent at systems, accounts, data or credentials you are not authorized to use.
- **Protect secrets.** Do not paste passwords, keys or tokens into prompts. If the agent can read a file, it may send that file's contents to your model provider.
- **Watch your costs.** You are responsible for charges from model providers and other services you connect, including charges caused by the agent's actions.
- **Check third-party terms.** Model providers, extensions, package registries and other services you use with the Software have their own terms, privacy practices and charges. Those terms are between you and them.
- **Do not use it where failure could cause serious harm.** The Software is not designed or tested for controlling medical devices, vehicles, aircraft, weapons, critical infrastructure, or any system where a mistake could cause death, injury or major damage.

## 4. Acceptable use

Do not use the Software or Bandit Cloud to break the law; to access systems or data without permission; to create or spread malware; to harass, defraud or deceive people; to infringe others' rights; or to interfere with Bandit Cloud or other users. Security testing is welcome only on systems you are authorized to test. This section does not limit your rights in the source code under the Apache license.

## 5. Your content and output

You keep all rights to your code, prompts, files and other content. As between you and us, output the Software generates for you is yours to use, to the extent we have any rights in it. We do not promise that output is accurate, original, free of third-party rights, or fit for any purpose. You are responsible for checking licences and notices for code the agent brings into your project.

When you use Bandit Cloud, we process your content only to provide the service, keep it secure and support you, as described in our Privacy Policy at banditailabs.com/privacy.

## 6. Bandit Cloud accounts

Some features need a Bandit Cloud account. Keep your credentials safe and tell us at security@burtson.ai if you think your account has been compromised. You must be at least 18 years old to create an account. We may suspend or end access to Bandit Cloud for misuse, non-payment or to protect the service or other users. Paid plans, if any, are governed by the terms shown when you buy them. Ending a Bandit Cloud account does not affect your rights in the source code.

## 7. Updates and changes to the Software

The Software can check for updates and may offer to install them; you can turn automatic update checks off. We may change, add or remove features, and Bandit Cloud features may change or end. Preview and beta features may be incomplete or change without notice.

## 8. No warranty

THE SOFTWARE AND BANDIT CLOUD ARE PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SOFTWARE OR ITS OUTPUT WILL BE ACCURATE, SECURE, ERROR-FREE OR UNINTERRUPTED, OR THAT IT WILL NOT DAMAGE OR DELETE DATA.

## 9. Limitation of liability

TO THE FULLEST EXTENT PERMITTED BY LAW:

- BURTSON LABS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, DATA OR GOODWILL, OR FOR THE COST OF RECOVERING OR REPLACING DATA, SYSTEMS OR SERVICES, ARISING FROM OR RELATED TO THE SOFTWARE, ITS OUTPUT, OR ANY ACTION THE SOFTWARE TAKES, EVEN IF WE WERE TOLD SUCH DAMAGES WERE POSSIBLE.
- BURTSON LABS' TOTAL LIABILITY FOR ALL CLAIMS RELATED TO THE SOFTWARE AND BANDIT CLOUD IS LIMITED TO THE GREATER OF (A) THE AMOUNT YOU PAID BURTSON LABS FOR BANDIT CLOUD IN THE 12 MONTHS BEFORE THE CLAIM AROSE, AND (B) ONE HUNDRED US DOLLARS (US $100).

Some places do not allow these exclusions or limits, so some of them may not apply to you. Nothing in these terms limits liability that cannot be limited by law, such as liability for fraud or, where applicable, gross negligence or wilful misconduct.

## 10. Indemnity

If someone brings a claim against Burtson Labs arising from content you supplied, your use of the Software in breach of these terms or the law, or systems you directed the agent to access without authorization, you will cover our reasonable costs of defending and resolving that claim. This does not apply to claims caused by our own breach or misconduct.

## 11. Separate agreements

If you have a signed agreement with Burtson Labs (for example a statement of work or enterprise agreement), that agreement controls where it conflicts with these terms.

## 12. Changes to these terms

We may update these terms. We will post the new version with a new date, keep earlier versions available, and, for material changes, ask you to accept them again in the Software. Changes do not apply retroactively and never reduce rights you already have under the Apache license.

## 13. Governing law

These terms are governed by the laws of the State of Missouri, USA, without regard to conflict-of-law rules. Any dispute will be brought in the state or federal courts located in Jackson County, Missouri, and you and we consent to their jurisdiction. If you are a consumer, you keep any rights the law where you live gives you that cannot be waived.

## 14. General

If any part of these terms is found unenforceable, the rest stays in effect. Our not enforcing a term is not a waiver. You may not transfer these terms without our consent; we may transfer them with our business. These terms, the Privacy Policy and the Apache License are the entire agreement about the Software, unless you have a separate signed agreement.

## 15. Contact

Burtson Labs LLC, 723 E 18th St, Suite 1099, Kansas City, MO 64108, USA · legal@burtson.ai