Sakura ยท Product information
Terms of service
Workspace accounts
Sakura is offered to invited customers and their authorized team members. A workspace holds your audits, findings and artifacts. You must provide accurate account information, protect credentials and API keys, and promptly report suspected compromise. Every invited member currently holds full authority over the workspace, including deletion of its data.
Authorization to test
Sakura investigates the material you submit and attempts to reproduce vulnerabilities against it in isolated environments. You warrant that, for every target you submit, you own it or hold explicit authorization from its owner to have it tested. That warranty is the sole basis on which the audit runs.
You are responsible for targets you submit without authority, and you indemnify Shinrasec, operated by Martin Mielke against third-party claims arising from them. We act on your declaration and do not independently verify ownership of submitted material. Your authorization covers only the material you submit; it does not authorize testing Sakura infrastructure, other customers, or any system we did not receive from you.
Findings and verification
Sakura separates independently verified findings from candidates. A verified finding is one an isolated replay reproduced against a bound check; a candidate is a promising result that did not clear that bar. Candidates are not assertions that a vulnerability exists, and neither result is a warranty that your material is free of vulnerabilities we did not find. Coverage depends on the supported audit profiles current at the time of your audit.
Service operation
We may enforce workspace credit limits, source size limits, capacity limits and expiry; suspend access to contain abuse or a security incident; and perform maintenance. Preview features may change. Contractual service levels, credits and support commitments apply only when stated in a signed agreement. Paid commitments apply only when agreed in writing.
Your material and results
You retain rights in the material you submit, and you grant us permission to process it to deliver, secure and improve the service. Do not submit secrets or personal data an audit does not require. Uploaded source archives are retained for a limited working period and then deleted; see the privacy notice.
Ending access
You may stop using Sakura at any time and may erase your workspace data from the product. We may suspend or terminate access for material breach, unsafe activity, non-payment where applicable, or risk to the service or others. Provisions that by their nature should survive termination continue to apply.
Responsibility
The results, techniques and artifacts Sakura produces are intended solely for authorized security work within legal boundaries. Shinrasec, operated by Martin Mielke is not responsible for unauthorized or unlawful use of information, proofs of concept or tooling obtained through the service.
Law and contact
These terms are governed by the laws of Japan, subject to mandatory law and any signed agreement. A signed agreement controls where it conflicts with these terms. The commercial disclosure supplies operator and transaction details. Questions may be sent to martin@shinrasec.com.