The terms for using kosa8 and kosa8.com.

01The short version

• kosa8 is proprietary software. You get a licence to use it for your own internal purposes, during the trial or while you hold a paid plan.
• Every plan starts with a free 14-day trial and no card. After that, kosa8 is paid software.
• Polar is our merchant of record: it takes payment, handles tax and issues your licence key.
• kosa8 runs on your machine. Your sandboxes, files and audit logs are yours, and we do not receive them. Our privacy policy lists exactly what leaves your computer.
• Use kosa8 lawfully, do not break or bypass its licence controls, and do not use it to harm others.
• The software is provided as is, and our liability is limited to what you paid us in the last twelve months.

02Your licence to the software

The software is licensed, not sold. Its full licence is the kosa8 Proprietary Software License distributed with it as LICENSE, and these terms include it. In brief: subject to these terms, kosa8 grants you a limited, non-exclusive, non-transferable, non-sublicensable, revocable licence to install and use the software in object-code form for your internal purposes, during the trial or for as long as you hold a valid paid subscription or licence key, within the plan, capacity and feature limits of that plan.

Unless we agree otherwise in writing, or applicable law does not allow the restriction, you must not copy, modify or create derivative works of the software; sell, rent, sublicense, distribute or host it for third parties; reverse engineer, decompile or disassemble it; remove, disable or circumvent any licence-key check, entitlement, usage limit, signature verification or other technical control; remove proprietary notices; or use it to build a competing product or service.

An Enterprise or Government order, or any other written agreement signed by kosa8, prevails over these terms where the two conflict.

03The trial

Every plan starts with a free 14-day evaluation period. No payment card is needed. The trial is for evaluating kosa8, is offered once per user or organisation, and may not be reset or extended by reinstalling or by altering the files kosa8 uses to track it. When the trial ends, features that need a plan stop working until you buy one. kosa8 does not lock you out of your own work: an existing sandbox keeps running and can still be saved and undone.

04Plans, billing and usage

Prices and plans. Plans, prices and limits are shown on the pricing page at the time you buy. Prices are in US dollars and exclude taxes unless stated. Plans are priced by concurrent copies (forks) and, for team plans, per person.

Merchant of record. Purchases are processed by Polar (polar.sh) as merchant of record. Polar collects payment, calculates and remits sales tax and VAT, issues invoices and receipts, and issues your licence key. Polar's own terms of service apply to the purchase transaction.

Renewal. Subscriptions renew automatically at the end of each monthly or annual period, at the then-current price, until you cancel. We will give you notice before a price increase takes effect on your renewal.

Usage and overage. Some plans include metered items. Overage and Burst Passes are billed only if you turn them on or buy them. Usage is counted from the tamper-evident audit log on your machine and reported as aggregate counts, as described in the privacy policy. kosa8 usage shows the same figures we bill. If you believe a charge is wrong, tell us within 60 days of the charge and we will review it with you.

Licence keys. Your licence key is for you or your organisation only. Keep it confidential. You are responsible for activity under your key, and you must not share it beyond the people and machines your plan covers.

05Cancellation and refunds

You can cancel a subscription at any time from Polar's customer portal or by emailing us. Cancellation stops the next renewal, and your plan stays active until the end of the period you have already paid for.

Because every plan has a free 14-day trial, payments are generally non-refundable, and we do not refund partial periods. If you are charged in error, or kosa8 does not work on a supported computer and we cannot fix it, email us within 14 days of the charge and we will refund it. Refunds are issued through Polar to your original payment method. None of this limits any right to a refund you have under the consumer law that applies to you.

06Acceptable use

You are responsible for what you, your team and the AI agents you run do with kosa8. You must not use kosa8 or the website to:

• break any law, or infringe anyone's intellectual property, privacy or other rights;
• gain unauthorised access to, attack, scan or disrupt any system, network or account you do not own or have permission to test;
• create, distribute or operate malware, or run denial-of-service, spam or fraud campaigns;
• interfere with or overload kosa8's servers, billing endpoints or website, or probe them for vulnerabilities outside responsible disclosure to contact@kosa8.com;
• falsify usage reports or tamper with the audit log to change what is billed.

Sandboxes reduce risk; they do not remove it. You remain responsible for the commands, code and agents you run, the network access and credentials you grant them, and checking their output before you rely on it.

07Your data and your connections

Everything kosa8 creates on your machine, including sandboxes, disks, snapshots, images, prompts, audit logs and configuration, belongs to you, and we claim no rights in it. Because it is stored on your hardware or in accounts you control, you are responsible for backing it up. How we handle the limited personal data we do receive is set out in the privacy policy.

Some features connect to services you choose, with your own credentials, such as Anthropic's API, Hugging Face, container registries, your own Cloudflare R2 bucket or your SIEM. Those services are not provided by kosa8, and your use of them is governed by their own terms and charges.

08Third-party components and services

The software includes third-party components under their own licences, including free-software programs under the GPL and LGPL inside the sandbox guest images. Those licences govern those components, and nothing in these terms restricts the rights they grant. The list, licence texts and source-code offer are in THIRD_PARTY_NOTICES.md, distributed with the software.

We rely on third-party providers such as Cloudflare, Polar, Resend and GitHub to run the website, billing, email and downloads. We are not responsible for outages or changes in services we do not control.

09The website and the newsletter

You may browse kosa8.com and share links to it. Its content, logos and the kosa8 name and mark belong to kosa8; do not copy them in a way that suggests we endorse you, or scrape the site in a way that degrades it. Blog posts, research and examples are information, not legal, security or compliance advice. Links to other sites are provided for convenience and those sites have their own terms. The newsletter is opt-in, and you can unsubscribe from any email with one click.

10Ownership and feedback

kosa8 and its licensors keep all right, title and interest in the software, the documentation and the website, including the kosa8 name and marks. Apart from the licence in section 02, these terms grant you no rights in them. If you send suggestions or feedback, we may use them without obligation to you.

11No warranty

THE SOFTWARE AND THE WEBSITE ARE PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT, EXCEPT AS EXPRESSLY STATED IN A SEPARATE WRITTEN AGREEMENT SIGNED BY KOSA8. We do not warrant that kosa8 will be uninterrupted or error-free, or that any sandbox will contain every threat. Some jurisdictions do not allow these exclusions, so some of them may not apply to you.

12Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, KOSA8 WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, DATA OR BUSINESS, ARISING FROM OR RELATED TO THE SOFTWARE, THE WEBSITE OR THESE TERMS, EVEN IF ADVISED OF THEIR POSSIBILITY. KOSA8'S TOTAL LIABILITY FOR ALL CLAIMS WILL NOT EXCEED THE AMOUNT YOU PAID FOR THE SOFTWARE IN THE TWELVE MONTHS BEFORE THE CLAIM. Nothing in these terms limits liability that cannot be limited by law, such as for fraud.

13Indemnity

If you use kosa8 for business, you will defend and indemnify kosa8 against third-party claims arising from your breach of these terms or from the code, agents and data you run with it, except to the extent the claim is caused by kosa8.

14Suspension and termination

You may stop using kosa8 at any time. Your licence ends automatically when your trial or subscription ends and is not renewed, or if you materially breach these terms. We may suspend or revoke a licence key that is shared beyond its plan, used to circumvent licence controls, or used in breach of section 06; where practical we will tell you first and give you a chance to fix it. When your licence ends you must stop using the features it covered and delete copies you are no longer licensed to keep. Your data on your machine stays yours. Sections 02 (restrictions), 07, 08 and 10 to 16 survive termination.

15Export and government use

The software contains encryption and is subject to export-control and sanctions laws, including those of India and the United States. You must comply with them and must not use or export kosa8 to sanctioned countries or persons. The software is "commercial computer software" and "commercial computer software documentation" as used in FAR 12.212 and DFARS 227.7202; United States Government users acquire only the rights in these terms or in their signed order.

16Governing law and disputes

These terms are governed by the laws of India, without regard to conflict-of-law rules, and the courts of India have exclusive jurisdiction, unless a signed order says otherwise. Before starting any proceedings, write to us so we can try to resolve the issue informally within 30 days. If you are a consumer, you keep the protection of the mandatory laws of the country where you live and may bring proceedings there.

If any part of these terms is unenforceable, the rest stays in effect. If we do not enforce a right, we have not waived it. You may not assign these terms without our written consent; we may assign them to a successor of our business. These terms, the licence, the privacy policy and any signed order are the whole agreement between us about kosa8.

17Changes

We may update these terms as kosa8 changes. We will update this page and its effective date, and if a change is material we will say so in the release notes and, where we have your email address for that purpose, tell you by email at least 14 days before it takes effect. Changes do not apply to a period you have already paid for. If you keep using kosa8 after a change takes effect, the new terms apply; if you do not agree, you can cancel.

18Contact

kosa8 is registered in India and the United States. For any question about these terms, licensing, billing or refunds, email contact@kosa8.com. A person reads it.

Effective 31 October 2026