Last updated: 14 August 2026
These terms cover your use of the DecoyNest plugin, this website, and the services behind the paid tiers. They are operated by MB G4T, registered in Lithuania.
Installing the plugin or buying a licence means you accept these terms.
What DecoyNest is
A WordPress security plugin that detects attacks using decoys, hardens common weak points, adds modern authentication, and — in paid tiers — makes encrypted backups and forwards events to your SIEM.
What DecoyNest is not
Being clear about this matters more than sounding impressive:
- Not a firewall at the edge. It runs inside WordPress. Traffic reaches your server before the plugin sees it.
- Not a guarantee. No security product can promise a site will not be compromised, and we do not make that promise. DecoyNest improves your odds and gives you evidence when something happens.
- Not a replacement for keeping software updated. It will tell you what is out of date. Updating is still your job.
Licence for the code
The plugin is licensed under the GNU General Public License v2 or later, the same licence as WordPress. Nothing in these terms restricts the rights the GPL gives you over the code.
What you pay for in the paid tiers is access to the services behind them — licence validation, vulnerability data, updates, and support — not permission to use the software.
Paid licences
A licence covers the number of sites stated when you bought it. A staging or development copy of a site you have already licensed does not count against that number.
Licences are annual and do not renew automatically unless you choose a subscription at checkout. You can move a licence between sites at any time by deactivating it on the old one first.
When a licence expires, the free features carry on working. Paid features stop and updates stop. We do not delete your data, disable your site, or nag you into renewing.
Your responsibilities
- Use the plugin only on sites you own or are authorised to administer.
- Do not use anything the plugin gives you — data, access, or functionality — to attack, scan, or test systems you do not have written permission to test.
- Keep your licence key and account credentials to yourself.
- Comply with data protection law in how you handle the data the plugin collects on your site. You are the controller of that data; we are not.
Backups are your responsibility to verify
Backup archives are encrypted with a passphrase you set. If you lose that passphrase and your WordPress authentication keys, the archives cannot be recovered — not by you, and not by us. There is no recovery mechanism and no back door, which is the point of encrypting them.
Keep a copy of the passphrase somewhere separate from the site, and test a restore before you need one. An untested backup is a hope, not a plan.
Service availability
We do not offer an uptime guarantee. If our licensing service is unreachable, paid features continue for 72 hours after the last successful check, so a problem on our side does not immediately become a problem on yours.
Detection, authentication, and firewall features run entirely on your server and are unaffected by our availability.
Refunds
Fourteen days from purchase, no questions asked. You have this right under EU consumer law for digital products in any case, so there is no sense writing anything more restrictive.
No warranty
The plugin and services are provided “as is”, without warranty of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the plugin will detect every attack, prevent any compromise, or run without interruption or error.
Limitation of liability
To the maximum extent permitted by law, we are not liable for indirect, incidental, special, consequential, or punitive damages, or for loss of data, profits, or revenue, arising from your use of or inability to use the plugin or services.
Nothing here excludes liability that cannot lawfully be excluded, including for death or personal injury caused by negligence, or for fraud. If you are a consumer, your statutory rights are unaffected.
Suspension
We may suspend access to the paid services if a licence is used in breach of these terms — in particular, using the product to attack systems you do not own. This does not affect your GPL rights to the plugin code itself, which you can continue to use independently.
Changes to these terms
We may update these terms. Material changes will be announced in the plugin’s admin screen or by email to licence holders before they take effect. Continuing to use the services after that means you accept the change.
Governing law
These terms are governed by the law of the Republic of Lithuania, and disputes fall to the courts of Lithuania — except where mandatory consumer protection law gives you the right to bring proceedings elsewhere in the EU.
Contact
MB G4T, Lithuania
legal@decoynest.com
See also our Privacy Policy.