Effective date: July 12, 2026
These Terms of Service ("Terms") are an agreement between you and Default Deny LLC, an Oregon limited liability company ("Allowist," "we," "us"), governing your use of the Allowist service, website, agents, and related software (together, the "Service"). By creating an account or using the Service, you accept these Terms. If you use the Service on behalf of an organization, you represent that you have authority to bind that organization, and "you" means that organization.
Allowist maintains dynamic IP allow lists and publishes them as feeds that your firewalls and network equipment consume. Devices running the Allowist agent report their public IP addresses; administrators may also add addresses manually or grant access through one-time Allow Links. The Service is currently offered in an early-access (beta) phase, and features may change as it matures.
You are responsible for the accuracy of your account information, the confidentiality of your credentials, and all activity under your account. You agree to keep agent tokens, feed credentials, and API keys secret, and to rotate them promptly if you suspect exposure — the Service provides one-click regeneration for this purpose. Organization administrators control membership, roles, and security policy (including requiring multi-factor authentication) for their organization, and are responsible for those choices. Notify us promptly at [email protected] of any suspected unauthorized access.
You retain all rights to the data you and your organization store in the Service, including IP addresses, device names, allow list entries, and recipient information ("Customer Data"). You grant us a limited license to host, process, transmit, and display Customer Data solely to operate, secure, and support the Service. You are responsible for having the rights and, where applicable, the consents necessary to store Customer Data in the Service — including telling the people whose devices report to your allow lists that their IP addresses are being collected for network access control.
You agree to use the Service only for lawful network access management on networks and systems you own or are authorized to administer. Without limiting that, you must not:
We may suspend or terminate access that we reasonably believe violates this section, with notice where practicable.
We grant you a non-exclusive, non-transferable license to install and run the Allowist agent and installation scripts on devices you own or are authorized to manage, solely for use with the Service. You may inspect the scripts — the Service displays them before download — but may not remove their security functions or misrepresent their origin.
Paid subscriptions are billed through PayPal on a recurring basis and renew automatically until cancelled. You may cancel at any time from Plan and Billing or through PayPal; cancellation takes effect at the end of the current billing period, and fees already paid are non-refundable except where required by law. Free trials convert back to your previous plan automatically when the trial ends. Plan limits and feature sets are described in the Service and may evolve; we will not materially reduce what a paid plan includes during a period you have already paid for. Prices may change with at least 30 days' notice, effective at your next renewal. You are responsible for any applicable taxes.
We engineer the Service for high availability on Akamai Connected Cloud infrastructure behind Akamai's global network with network-level DDoS mitigation, and we operate it with care. However, during the beta phase the Service is provided without an uptime guarantee or service-level agreement.
Plan for the failure case. Your firewall's behavior when a feed is unreachable is determined by your firewall configuration, not by us. Before depending on Allowist for access to critical systems, configure and test your equipment's behavior for an unavailable or empty feed, and maintain an independent, break-glass access method that does not depend on the Service. You are responsible for the configuration of your own network equipment.
We own the Service, its software, and everything about it other than Customer Data. If you send us feedback or suggestions, you grant us a perpetual, irrevocable, royalty-free license to use them without obligation to you.
The Service interoperates with third parties you choose to use — payment processing by PayPal, sign-in by Google, Microsoft, or your SAML identity provider, and similar. Their services are governed by their own terms, and we are not responsible for them.
You may stop using the Service and delete your organization at any time from Organization Settings. We may suspend or terminate the Service for material breach of these Terms, for legal compliance, or for non-payment, with notice where practicable. Upon termination or deletion, your feeds stop being served and agents can no longer report — plan your firewall configuration accordingly — and Customer Data is deleted as described in our Privacy Policy. Sections 3, 8, and 11 through 15 survive termination.
THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE." TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR THAT IT WILL PREVENT UNAUTHORIZED ACCESS TO YOUR SYSTEMS. AN IP ALLOW LIST IS ONE LAYER OF A DEFENSE-IN-DEPTH STRATEGY, NOT A COMPLETE SECURITY SOLUTION.
TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, DATA, OR BUSINESS INTERRUPTION, EVEN IF ADVISED OF THE POSSIBILITY. OUR TOTAL LIABILITY ARISING OUT OF OR RELATING TO THE SERVICE WILL NOT EXCEED THE AMOUNTS YOU PAID US FOR THE SERVICE IN THE TWELVE MONTHS BEFORE THE EVENT GIVING RISE TO LIABILITY (OR ONE HUNDRED U.S. DOLLARS IF YOU HAVE PAID NOTHING). SOME JURISDICTIONS DO NOT ALLOW CERTAIN LIMITATIONS, SO SOME OF THE ABOVE MAY NOT APPLY TO YOU.
You will defend and indemnify Default Deny LLC against third-party claims arising from your Customer Data, your violation of these Terms, or your use of the Service in violation of law — including any claim that you used the Service to manage networks or collect IP addresses without authorization.
We may improve or modify the Service over time. If we make material changes to these Terms, we will post the updated Terms, update the effective date, and notify administrators through the Service or by email at least 14 days before they take effect. Continued use after the effective date constitutes acceptance.
These Terms are governed by the laws of the State of Oregon, without regard to conflict-of-laws rules, and any dispute will be resolved in the state or federal courts located in Multnomah County, Oregon, to whose jurisdiction both parties consent. If any provision is unenforceable, the remainder stays in effect. You may not assign these Terms without our consent; we may assign them in connection with a merger, acquisition, or sale of assets. These Terms and the Privacy Policy are the entire agreement between us regarding the Service.
Default Deny LLC — Allowist Portland, Oregon, United States [email protected]