BoarNet ("we", "us") operates a passive threat-intelligence network. By signing up, running a sensor, or calling our API, you agree to these terms. This is a plain- language summary of our obligations to you and yours to us. It is not legal advice and does not supersede applicable law.
What BoarNet collects
Attacker-side metadata from honeypots: source IP, source/dest ports, timestamps, TLS handshake bytes (JA3/JA4), SSH auth attempts, and captured commands / payloads. We do not collect content from your network, files on your host, or identifiers beyond what an attacker voluntarily sends to an exposed service.
On the operator side (you), we store your email, sensor metadata, and the hashed tokens you mint. See Privacy Policy for the full list.
Acceptable use
By using the service you agree not to:
- Submit fabricated events or events you did not observe.
- Deploy sensors inside networks you do not control or have permission to operate a honeypot on.
- Use our API to harass, dox, or target individuals. Threat-intel data is provided for defensive purposes — blocking, scoring, alerting — not for offensive action against the sources.
- Attempt to enumerate our sensor fleet, fingerprint individual sensors, or evade our ingest-path security.
- Exceed the rate limits for your tier, including by rotating accounts or forging client IP headers.
We reserve the right to suspend or terminate accounts that violate these terms or that are used to harm the integrity of the network.
Sensor operation
Running a BoarNet sensor on a host means that host will be probed by internet scanners — that's the point. You are responsible for the host's own security: keep the host patched, don't run our honeypot on a box that handles production traffic, and follow your network provider's terms of service.
The honeypot is low-interaction by design: no shell is ever granted, no real credentials accepted, no payload executed. Attacker data we capture never leaves your box as anything other than the encrypted envelopes we spec in our docs.
Tiers, billing, and changes
Observer tier is free and always will be. Participant tier is free as long as you run at least one reporting sensor. Paid tiers (Personal Pro, Commercial Pro, Enterprise) are month-to-month; cancel any time from your dashboard.
We may change rate limits, tier capabilities, or pricing with notice. Material changes are announced at least 14 days in advance via email.
Warranty disclaimer
BoarNet is provided "as is". We do not guarantee that a given IP will be present in our dataset, that lookups will always succeed, or that our enrichment data is accurate for any specific purpose. Do not block production traffic solely on our verdict without your own operator review.
Limitation of liability
To the maximum extent permitted by law, our aggregate liability is capped at the amount you paid us in the twelve months preceding the claim (or zero for free-tier users). We are not liable for indirect, incidental, or consequential damages.
Changes to these terms
We'll update this page when the terms change and bump the Last updated date. Continuing to use the service after a change constitutes acceptance.
Contact
Questions? boarthreatintelligence@proton.me. For abuse reports about BoarNet traffic, see Abuse.