Northstar / Leviathan Platform
Last updated: 2026
Northstar is one person — Erlend C. Hårsaker, based in Trondheim, Norway — not a company with a legal team. These terms describe plainly what you're agreeing to when you buy or use a Northstar product. If anything here is unclear, ask through the contact page before you buy, not after.
Each Northstar product (Leviathan Platform, MCP Gateway, Decoy Kit, Agent Guardrails, Probe Kit, Bait-Mask, Amber-Freeze, All-Stop, and any other product listed on this site) is sold as a self-hosted software license, not a hosted service. You run it on infrastructure you own or are authorized to use. Nothing here is delivered as SaaS, and nothing phones home to us — see the privacy policy for what that means in practice.
A license is per organization, not per seat, for the term stated on the product's pricing page (annual, unless stated otherwise). It covers the software, the CLI, and updates released during that term. It does not include implementation services, a support SLA, or any guarantee of specific outcomes — what's included and what isn't is stated honestly on each product's own page, and that page is the actual scope of what you're buying, not this paragraph.
Every product on this site states its real, current test count and what's verified versus what isn't — that's the actual evidence of quality, and it's kept honest on purpose. But this software is provided as-is, without warranty of any kind, express or implied, including without limitation warranties of merchantability, fitness for a particular purpose, or non-infringement. Security software reduces risk; it does not eliminate it, and no product here is described as doing so.
To the maximum extent permitted by Norwegian law, Northstar and Erlend C. Hårsaker are not liable for indirect, incidental, special, or consequential damages arising from use of any product, including damages resulting from a security incident that occurs on infrastructure you control. You are responsible for how you deploy, configure, and operate the software, and for the decisions and consequences that follow from that deployment — the same principle stated on every product's own trust-and-scope section.
Northstar's products are defensive tools. You agree to use them only against systems you own or are explicitly authorized to test or protect — never against systems, accounts, or data belonging to someone else without their permission. This mirrors the boundary already stated on the site itself: everything here either analyzes systems you're authorized to test, or reacts to inbound traffic on infrastructure you own.
Self-serve purchases are processed through Stripe; Northstar does not see or store your card details. A license is issued to the email address used at checkout. Reselling, sublicensing, or redistributing a license outside your own organization isn't permitted without asking first through the contact page.
See the refund policy for the specifics — summarized here: if a product genuinely doesn't work as described, ask, and it'll be made right. This isn't a loophole-hunting policy in either direction.
If these terms change in a way that matters, this page and the date above will be updated. Continued use of a product after a material change means you've accepted the update.
These terms are governed by the laws of Norway. Any dispute that can't be resolved directly is subject to the jurisdiction of Norwegian courts.
Use the contact page and ask — it reaches us directly.