Terms of Service

HuntRule (huntrule.com, "the service", "we") is a catalog of Sigma detection rules built from public threat reporting. "Content" means the detection rules, queries, metadata, mappings and other material provided through the service.

By creating an account or using the service you accept these terms and the Privacy Policy, which is an integral part of them. Signing in requires accepting the current version of both. If you use the service on behalf of an organization, you confirm you are authorized to bind that organization, and "you" includes it. You must be at least 18 years old to hold an account. If you do not agree, do not use the service.

HuntRule publishes detection rules together with their sources, MITRE ATT&CK mappings, telemetry requirements and known limitations. Reading the public catalog is free and needs no account. An account adds member features, and paid subscriptions add a periodic allowance of rule unlocks for the duration of the subscription term. We may change, add to or retire features of the service and the subscription plans; material changes to paid plans take effect from your next billing period.

Accounts are created by signing in with Google. You agree to provide accurate account information and keep it current. One person holds one account, and an account may not be shared with, transferred or sold to anyone else. You are responsible for safeguarding access to your Google identity and for all activity under your account — including activity by anyone you allowed in. Tell us through the contact form immediately if you suspect unauthorized use. If we have closed your account for a breach of these terms, you may not open a new one without our written consent.

Paid subscriptions are billed through our payment provider, upfront, at the price and interval shown at purchase. Applicable taxes (such as VAT) may be charged on top, or collected later where they are assessed after payment. Unlock allowances renew per billing period and unused allowance does not carry over unless the plan says otherwise. You can cancel at any time; cancelling stops future renewals and your plan stays active until the end of the period already paid for. Prices for a renewal may change — the price shown at renewal is the one that applies.

Fees are non-refundable, and we do not give refunds or credits for partly used billing periods or unused unlock allowance — except where a mandatory consumer right under applicable law says otherwise, or where we have expressly agreed to one in writing. Statutory withdrawal rights for digital services may apply to consumers in some jurisdictions; using the paid service within the withdrawal window may waive them to the extent the law allows.

Subject to these terms, we grant you a non-exclusive, non-transferable, non-sublicensable right to access the service and to use the content in your own organization's security operations — your SIEM, EDR and detection tooling — for the duration of your access to it. This license is for end use. It does not allow redistributing, republishing, sublicensing, renting or selling the content, offering it to third parties as part of a managed or commercial service, or building a competing collection from it.

If your subscription ends, copies of rules you exported remain yours to keep, but from that point you use them at your own risk: they will not be updated or supported, and we make no claim that they stay effective against evolving threats.

Some content originates from third parties — most notably the SigmaHQ community repository — and is licensed under the Detection Rule License (DRL) 1.1 or another license shown with the rule. Attribution, author credits and license notices displayed with a rule are part of the rule: keep them intact when you copy a rule out. Rights in third-party content remain with their respective owners, and your use of it must comply with its license terms.

You agree not to, and not to let anyone else:

• access content gated behind a paid plan without paying for it, or share unlocked content in ways section 6 does not permit;
• scrape, crawl, bulk-download or mirror the site or catalog by any automated means — the documented API and exports are the supported programmatic access, within fair use of shared resources;
• reverse engineer, decompile or otherwise attempt to derive the non-public parts of the service;
• remove or alter copyright, attribution, license or provenance notices;
• provide the content to a competitor of HuntRule, or use it to build one;
• interfere with the operation of the service — probing, overloading, hacking, uploading malicious code, or circumventing rate limits and access controls;
• use the service or content in violation of applicable law, including export control and sanctions regulations, for which you are solely responsible.

You may not use the service or the content — rules, metadata, summaries or any part of the catalog — to train, fine-tune, validate or otherwise develop any machine learning or AI model; to create embeddings, vector indexes or retrieval corpora for AI systems; or to build any dataset for those purposes. This applies whether the model is hosted by you or by a third party. It does not restrict your use of AI features we ourselves provide within the service for their intended purpose.

The service, the site and all material in them that is not third-party content belong to HuntRule or their respective owners; all rights not expressly granted are reserved. If you send us feedback — suggestions, bug reports, ideas — you grant us a non-exclusive, royalty-free right to use it without restriction, and you confirm it does not knowingly infringe anyone's rights.

You can close your account at any time from the dashboard settings. We may suspend or terminate your account if we reasonably believe you have breached these terms, infringed intellectual property rights, engaged in fraud or abuse, or where the law requires it. On termination your right to use the service ceases; sections that by their nature survive — licensing limits, disclaimers, liability, indemnity — keep applying.

The service and every rule in it are provided as is and as available. Detection rules describe behaviour reported at a point in time: no rule is guaranteed to detect every variant of a technique, to be free of false positives, or to fit an environment it has never seen. You deploy content into your own systems at your own risk and are solely responsible for what runs there — review, tune and test every rule against your own telemetry before you rely on it. We do not warrant that the service will be uninterrupted, timely, secure or error-free, and HuntRule is not a substitute for a security team or a monitoring service.

To the maximum extent permitted by law, HuntRule and its suppliers are not liable for indirect, incidental, special, punitive or consequential damages — including lost profits, lost data, business interruption, or security incidents that a rule did not detect or a detection that arrived late. Our total cumulative liability for all claims arising out of these terms is limited to the amount you paid for the service in the twelve months before the event giving rise to the claim. Nothing here excludes liability that cannot be excluded under applicable law.

To the extent permitted by law, you agree to indemnify and hold HuntRule harmless from claims, damages and expenses arising out of your breach of these terms, your use of the service in violation of law, or your violation of a third party's rights.

We are not liable for failure to perform caused by events beyond our reasonable control — natural disasters, war, terrorism, labour disputes, embargoes, failures of infrastructure providers, or acts of authorities.

When these terms change materially, the version date above moves and you will be asked to accept the new version at your next sign-in before continuing. The versions you previously accepted remain on record. If you do not accept, you can stop using the signed-in service; the public catalog stays readable either way.

These terms are governed by the laws of the Republic of Türkiye, and its courts have jurisdiction over disputes arising from them. Before starting any formal proceeding, both sides agree to first try in good faith to resolve the dispute within thirty days of written notice of it. If any provision of these terms is held unenforceable, the rest remains in effect. Questions go through the contact form.