Terms of Service
The agreement between you and Marshal Security Ltd. for this website and the services we host — what you may do with them, what we commit to, and what we do not.
LAST UPDATED August 21, 2026
These terms are a contract between you and Marshal Security Ltd. (“Marshal”, “we”, “us”), a company registered in Israel. They apply when you use marshal.codes or any of the services we run. If you do not accept them, do not use those services.
If you are agreeing on behalf of a company or another organization, you confirm you are authorized to bind it, and “you” means that organization.
Marshal is not a self-service product. It is deployed on-premises, in your own infrastructure, under a written agreement between us. These terms are the floor beneath that agreement — they cover the website and the services we run around your deployment. They do not sell you anything, set a price, or entitle you to use Marshal.
1. What these terms cover
These terms govern the parts of Marshal that we operate:
| Service | What it is | Who can use it |
|---|---|---|
| marshal.codes | This website, including the blog and the access-request form | Anyone |
| Downloads | Distribution of the Marshal CLI binaries | Anyone may download; running Marshal requires an agreement |
| Auth broker | Our hosted single sign-on broker, where your organization uses it | Customers, under their agreement |
| Marketplace | The catalog your deployment searches, browses, and installs packages from | Customers, under their agreement |
| Registry | The registries serving container images and charts | Customers, under their agreement |
Access to the last three is provisioned to your organization by us. It is not open to the public, and credentials for it are issued under your agreement rather than by signing up.
2. Your agreement comes first
The Marshal software you run on-premises is licensed under the written agreement between your organization and us. Nothing on this page grants you a license to it, and downloading a binary is not permission to run it.
That agreement governs the commercial relationship in full — scope of use, fees, term, renewal, support commitments, service levels, and anything else it addresses. Where it says something different from these terms, the agreement wins, for every subject it covers and not only for the software license. These terms fill the gaps it leaves, and apply on their own to anyone using the public website who has no agreement with us.
We are also not a party to what happens inside your deployment. Your code, your credentials, your agent sessions, and your users are yours — as the privacy policy sets out, they never reach us. If you run a deployment that other people use, their relationship is with you, not with us.
3. Maturity of the hosted services
Marshal is in private beta. Except where your agreement commits us to something more, the services in section 1 are provided as they are: we make no uptime commitment, there is no service level agreement, and features may change, break, or be withdrawn.
If we discontinue a hosted service, we will give you reasonable notice and, where the service holds anything of yours, a reasonable window to retrieve it. Where your agreement sets a notice period, that one applies.
4. Using the services
The public website is open to anyone. The services provisioned to your organization are for the authorized users your agreement covers, using them for your organization’s own business purposes and within the scope that agreement sets. You are responsible for your users following these terms. Marshal is built for software teams and is not offered to anyone under 16.
Do not:
- Break the law with them, or use them to harm, defraud, or deceive anyone.
- Access an account, deployment, or dataset that is not yours, or try to.
- Probe, scan, or interfere with our infrastructure, or work around a limit, quota, or access control we put in place. Good-faith security research is welcome — see section 12.
- Upload malware, or distribute a marketplace package designed to do harm.
- Scrape or bulk-download the site or the registries beyond what normal use requires, or share, resell, or sublicense your access to a provisioned service.
- Remove or obscure any notice of ownership on anything we provide.
You are responsible for what happens under your credentials, and for keeping them secure. Tell us at security@marshal.codes if you think they have been compromised.
5. Packages from the marketplace
The marketplace catalogs packages, some of which we publish and some of which come from third parties. We do not audit third-party packages, and listing one is not an endorsement of it. A package you install runs in your infrastructure with the permissions you grant it — review it before you do, exactly as you would any other dependency.
Where a package carries its own license, that license governs your use of it. Report a package you believe is malicious to security@marshal.codes, or one you believe infringes your rights to support@marshal.codes. We will investigate and, where warranted, remove it.
6. What you send us
You keep ownership of anything you send us — an access request, a support email, a bug report. You give us permission to use it for the purpose you sent it for, and we handle any personal data in it as described in the privacy policy.
Suggestions are the exception worth stating plainly: if you tell us how the product should work, we may act on it freely and without owing you anything for it.
7. Our intellectual property
The website, the hosted services, the Marshal name, and the Marshal logo belong to us. These terms give you permission to use the services as described, and nothing more — no ownership passes to you, and no rights are granted by implication.
8. Fees and commercial terms
Marshal is a commercial product. Every entitlement to use it — the on-premises software and the services provisioned around it — arises from a written agreement, and the fees, term, and scope of use live there. There is no free tier, no trial you can start yourself, and nothing on this website is an offer, a quote, or a price.
Browsing marshal.codes and downloading a CLI binary cost nothing, and this page does not make either of them chargeable. It also does not make them a license to run Marshal — see section 2. To discuss terms, request access or write to support@marshal.codes.
9. Suspension and termination
Where you have an agreement with us, its term and termination provisions govern — including what happens to your deployment and your access when it ends. This section applies to the public website, and to anything the agreement leaves open.
You can stop using the website at any time. To have data we hold about you deleted, email privacy@marshal.codes.
We may suspend access if you breach these terms, if your use puts our systems or other users at risk, or if we are legally required to. Except where the breach is serious or the risk is immediate, we will warn you first and give you a chance to fix it, and we will restore access once the cause is resolved. Sections 6 through 15 survive the end of these terms.
10. No warranty
Except for the warranties your agreement gives you, the services are provided as is and as available. To the extent the law allows, we disclaim every warranty that is not written down in these terms or in that agreement — including any implied warranty of merchantability, fitness for a particular purpose, or non-infringement.
We do not warrant that a service will be uninterrupted, error-free, or secure against every attack, that defects will be corrected, or that any output or package is accurate or fit for your purpose. Decisions you make on the basis of what a service tells you are yours.
11. Limitation of liability
To the extent the law allows, neither party is liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, lost revenue, lost business, or lost or corrupted data, even if it was warned they were possible.
Where your agreement allocates liability or sets a cap, that allocation applies to everything it covers. For anything it does not — and for anyone using the public website without an agreement — our total liability arising out of these terms or the services is capped at the greater of what you paid us in the twelve months before the claim, or US$100.
Nothing here limits liability that cannot be limited by law — including for death or personal injury caused by negligence, for fraud, or for willful misconduct. Some jurisdictions do not allow some of these exclusions, in which case they apply only as far as that jurisdiction permits.
12. Security research
If you find a vulnerability, tell us at security@marshal.codes. Research done in good faith — testing only your own accounts and data, avoiding privacy violations and service disruption, and giving us a reasonable chance to fix what you found before disclosing it — is not a breach of section 4, and we will not pursue you for it.
13. Changes to these terms
We may update these terms. When we do, we change the date at the top of the page. If a change materially affects your rights, we will give you notice — by email where we have your address, or on the site — before it takes effect. Continuing to use the services after that means you accept the new terms.
14. Governing law
These terms are governed by the laws of the State of Israel, without regard to its conflict-of-laws rules. The competent courts of Tel Aviv-Yafo have exclusive jurisdiction over any dispute arising from them, and both of us submit to that jurisdiction.
If you are a consumer, this does not deprive you of the protection of mandatory rules in the country where you live.
15. The rest
These terms, together with the privacy policy and any separate written agreement referenced in section 2, are the whole agreement between us about the services they cover. If a court finds any part unenforceable, the rest stands. Not enforcing something once does not waive it. You may not transfer these terms without our written consent; we may transfer them to a successor to our business. Neither of us is liable for a failure caused by something genuinely outside our control.
Nothing here makes either of us the other one’s partner, agent, or employee.
16. Contact
Privacy and data requests: privacy@marshal.codes
Security reports: security@marshal.codes
Questions about these terms, and everything else: marshal.codes/support