Last updated: October 29, 2026
These terms govern your use of GaleOps ("GaleOps", "we", "us"), the galeops.xyz website (the "Site"), and any products, downloadable materials, or assessment tools published on it. By using the Site, purchasing a product, or engaging us, you agree to these terms. If you do not agree, do not use the Site.
These terms cover the Site and self-serve products only. Our paid security engagements — AI agent risk reviews, security assessments, red team exercises, guardrail implementation, and compliance advisory work — are governed by a separate written agreement that sets out the scope, fees, deliverables, and liability for that work. Where an engagement agreement conflicts with these terms, the engagement agreement governs the engagement.
Nothing on this Site is an offer capable of acceptance. No client, engagement, or professional-services relationship is created by reading the Site, submitting the contact form, downloading a free resource, or using a self-serve scan. A relationship is created only when we both sign a written engagement agreement, or when you purchase a product through the checkout flow and our order confirmation is issued to you.
Our assessments, reviews and testing are time-boxed evaluations of a defined scope, at a defined point in time, against the system, commit, or configuration you gave us access to. You acknowledge and agree that:
Our downloadable products — workbooks, tabletop kits, guides, templates and other self-serve materials — are licensed to you, not sold outright. Your licence is personal, non-exclusive, non-transferable, and for your internal business use. You may not resell, sublicense, republish, or redistribute a product or its contents, including as part of a course, a consulting deliverable, or another product.
Our products are AI-assisted. They are prepared with the assistance of language models and reviewed by a human, but you remain responsible for their accuracy and for how you use them. Products are provided for general informational and educational purposes. They are not legal, compliance, financial, or professional advice, they do not create an attorney–client or advisory relationship, and they are not a certification that any system complies with any framework, regulation, or control set.
Free scanners, readiness checks, checklists, and other no-cost materials are provided "as is" on an informational basis, at no charge and with no obligation. We may change, withdraw, or limit their use at any time. Use of a free tool is not an engagement and does not create a support obligation.
You agree that you will:
If you believe you have found a vulnerability in this Site or in our systems, please report it to us at mattgale87@gmail.com rather than exploiting it, disclosing it publicly, or testing without authorisation. We will make a reasonable effort to acknowledge and remediate valid reports.
Each party will keep the other's confidential information confidential and use it only for the purpose for which it was disclosed. This includes your system architecture, prompts, agent configurations, code, data, credentials, and assessment findings; and our methods, tooling, templates, pricing strategy, and unpublished research. These obligations survive termination of any engagement and last five (5) years, except for trade secrets and security-sensitive credentials, which remain protected for as long as they qualify as such.
You retain all right, title, and interest in your own materials, systems, code, and data. We retain all rights in the Site, our products, methodologies, frameworks, tooling, templates, and pre-existing know-how. We grant you a limited, non-exclusive licence to use a purchased product as described in section 3.
We will not publish your name, logo, engagement details, or findings publicly without your prior written consent. Where you have consented to an anonymised case study, we may describe the class of problem and the approach taken.
Engagements are fixed-price as set out in the engagement agreement. Products are sold at the price shown at checkout. Any deposit is applied to the total fee. Where work has not begun, a deposit is refundable on written request. Where work has begun and deliverables have been produced, fees are non-refundable except where the engagement agreement provides otherwise. We may suspend work where an invoice is more than thirty (30) days overdue. Prices are exclusive of taxes, duties, and similar governmental charges, which are your responsibility.
Except as expressly stated in a written engagement agreement, the Site, products, and materials are provided "as is" and "as available", without warranties of any kind, whether express or implied, including implied warranties of merchantability, fitness for a particular purpose, accuracy, non-infringement, and uninterrupted availability. We do not warrant that the Site will be error-free, that any material is complete or current, or that products will meet your specific requirements. Nothing in these terms excludes a liability that cannot lawfully be excluded.
To the fullest extent permitted by law, and except where an engagement agreement says otherwise, neither party is liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for loss of profits, revenue, business, goodwill, data, or anticipated savings, arising out of or in connection with these terms or your use of the Site, products, or materials. This includes any decision taken in reliance on our materials or any assessment performed.
Each party's total aggregate liability arising out of or relating to these terms is limited to the greater of (a) the amounts you paid us in the twelve (12) months preceding the event giving rise to the claim, or (b) one hundred US dollars (USD 100). Nothing in these terms limits liability that cannot be limited by law, including liability for fraud, wilful misconduct, or death or personal injury caused by negligence.
You agree to indemnify and hold harmless GaleOps and its personnel from and against third-party claims, losses, and reasonable costs arising from your use of the Site or materials in breach of these terms or of applicable law, or from your infringement of a third party's rights. This obligation does not apply to claims arising from our own breach of these terms, and does not limit the liability cap in section 11.
The Site links to material we do not control, including third-party tools, payment providers, and published material. We are not responsible for the content, accuracy, or availability of those resources, and a link is not an endorsement. Client names, product names, trademarks, and logos appearing on the Site remain the property of their respective owners and are used to identify published work or to describe integrations, not to imply endorsement.
We may change, suspend, or withdraw the Site, any product, or any part of them at any time without notice. We may also revise these terms; the current version is always published on this page and the date at the top shows when it last changed materially. Continuing to use the Site after a change means you accept the revised terms.
You may stop using the Site at any time. We may suspend or terminate access immediately, without liability, where you breach these terms, or where required by law or by a third party. Provisions that by their nature should survive termination survive it, including ownership, confidentiality, warranty disclaimers, indemnification, and limitation of liability.
Entire agreement. These terms, together with our Privacy Policy and any engagement agreement, are the entire agreement between us concerning their subject matter and supersede prior understandings, whether written or oral. If any provision is held unenforceable, the remainder stays in effect. A failure to enforce a provision is not a waiver of it. You may not assign these terms without our written consent; we may assign them to a successor of the business.
These terms and any dispute arising from them are governed by the laws of the State of Minnesota, United States, without regard to its conflict-of-laws provisions. You and GaleOps consent to the exclusive jurisdiction of the state and federal courts located in Hennepin County, Minnesota, without prejudice to any mandatory consumer protections available to you where you live.
Questions about these terms, or a request that we correct a detail in them, go to mattgale87@gmail.com.
GaleOps is a trading name. These terms apply to the Site and to self-serve products purchased through it. They do not replace the terms of any signed engagement agreement.