The deal between us.

These terms govern your use of Attentra, operated by Attentra Labs. By signing up as a customer or using our services, you agree to these terms. If any of it is unclear, email us at hello@attentra.xyz before you sign up.

What Attentra does

Attentra is a real-time security monitoring service for Solana DeFi protocols. We observe your declared on-chain surfaces, evaluate them against detection rules, send alerts to destinations you configure, and publish the current state of your declared invariants to an on-chain attestation account.

Attentra is read-only and off-chain. We do not hold custody of your funds or keys. We do not sign transactions on your behalf. We do not have authority over your protocol's programs or administrative accounts.

What Attentra does not do

• We do not guarantee detection of every possible attack. Novel attack patterns we have not seen before may not trigger our rules.
• We do not replace your audits. Audits validate code correctness at a point in time; Attentra watches for operational drift after deployment. Both are needed.
• We do not respond on your behalf to incidents. Our job is to detect, alert, and publish; your job is to act.
• We do not guarantee prevention. Some attacks (single-transaction drains, for example) leave no window for response. We will detect and attest, but we cannot stop what's already happening.

Your obligations

• Provide accurate protocol configuration during onboarding. If your declared invariants don't match your actual protocol, our detections and attestations will be wrong in ways that are your responsibility to correct.
• Keep your dashboard account credentials secure. Two-factor authentication is required.
• Don't attempt to compromise our infrastructure or abuse the service.
• Don't resell or redistribute our monitoring or attestation data to third parties as a service without a written agreement.
• Pay on time, per your plan.

Plans and billing

Plans are billed monthly or annually via SolanaPay. Annual plans receive a 15% discount. Fees are per the pricing published at the time of your signup; we may change pricing for new customers, but existing customers are grandfathered for the duration of their current term.

A 30-day paid pilot is available for all tiers. If you're not satisfied after the pilot, we refund the pilot fee — no arguments. After the pilot, you can cancel anytime; you keep the service until the end of your current billing period.

If you cancel during a paid annual term, we do not prorate refunds, but the service continues until the end of the term.

Availability

We target 99.5% uptime on the detection engine. Service credits for extended downtime are available per your plan's SLA. Uptime is measured on our engine; we do not guarantee the availability of third-party dependencies (Solana RPC providers, destination providers, email delivery) that affect end-to-end service delivery. We maintain multiple providers for each critical dependency.

Planned maintenance is announced via our status page and customer email with at least 48 hours' notice. Emergency maintenance (security patches, provider-side incidents) may happen without notice; we log and communicate what happened within 24 hours.

Our obligations

• Run the service per these terms and your plan.
• Keep your data secure and not share it beyond what's in our privacy policy.
• Alert you to any detection at the destinations you configured, within the latency targets your plan states.
• Update attestations per the cadence stated for your plan.
• Maintain the infrastructure, update detection rules, and disclose material changes to the service.

Liability

Attentra is a security monitoring service, not an insurance product. We are not liable for losses your protocol incurs from exploits, regardless of whether Attentra detected them.

Our maximum aggregate liability to you under any claim arising from our service is limited to the total fees you have paid in the 12 months preceding the claim. This is consistent with standard SaaS liability practice and applies regardless of the type of claim.

If you need coverage against protocol exploit losses, talk to DeFi insurance providers (Nexus Mutual, InsurAce, Sherlock, OpenCover). We are happy to integrate with them if they price coverage using our attestation data.

Termination

Either party can terminate with notice. You can cancel anytime through your dashboard or by email. We can terminate if you materially breach these terms (for example, by refusing to pay or by attempting to abuse the service), with at least 7 days' notice and a chance to cure the breach.

On termination, we disable your account within 7 days and delete your configuration data within 30 days. Historical attestation records on the Solana chain are public and cannot be deleted — this is a property of the blockchain.

Changes to these terms

We may update these terms. Material changes are announced to active customers via email at least 30 days before they take effect. If you don't agree to a material change, you can terminate and receive a prorated refund for the unused portion of your prepaid term.

Governing law

These terms are governed by the laws of the jurisdiction in which Attentra Labs is incorporated. Disputes are resolved first by good-faith email, then by arbitration if that fails.

Contact

Questions about these terms: hello@attentra.xyz.