Terms of use

The terms for this website and for the Halligan software.

Effective 20 August 2026 · Foxxception LLC

The short version

The software is Apache-2.0 and free, with no paid tier. Your rights to use, modify and redistribute it come from that licence, and nothing here takes them away. These terms cover the rest: the website, the trademarks, and the two things that actually matter.

Those two: only point Halligan at a system you own or have written permission to test, and a passing score is not a safety certificate — it means the probes we shipped did not break your guardrails, which is not the same as your guardrails being sound.

1. These terms

These terms are an agreement between you and Foxxception LLC (“we”, “us”), a Florida limited liability company. They apply when you use the website at halligan.dev, and they supplement — but never override — the software licence described in section 2. If you do not accept them, do not use the site.

2. The software licence

The Halligan software, including its probe suites, is licensed under the Apache License, Version 2.0. That licence, not this page, governs your use, modification and redistribution of the code.

Where anything on this page conflicts with the Apache-2.0 licence as it applies to the software, the licence wins. Nothing here is intended to add a condition to it, and no part of these terms should be read as restricting a right the licence grants you.

3. The website

The site is provided for information. We may change, move or withdraw any part of it at any time, and we do not promise it will be available uninterrupted. Do not attempt to disrupt it, or to access any part of it you have not been given access to.

Site content other than the software — the written pages, the sample report, and the Halligan brand assets — remains our copyright, except where a page says otherwise.

4. Authorised testing only

Halligan is a red-team tool. It exists to attack guardrails deliberately, and it is effective enough that pointing it in the wrong direction has real consequences. You agree to run it only against:

  • a system you own or operate; or
  • a system whose owner has given you documented permission to test; or
  • a model endpoint you are authorised to send this traffic to under the provider's own terms of service.

You must not use Halligan to attack, degrade or extract data from a third-party service without that authorisation, to generate content that is unlawful where you are, or to build a product whose purpose is to defeat another party's safety systems in production. Automated adversarial traffic is a violation of most providers' terms unless you have arranged otherwise — that arrangement is yours to make, not ours.

5. Your responsibilities

You are responsible for your own configuration and for everything that follows from a run. In particular:

  • Cost. Runs consume paid API tokens at your provider, and repeat counts multiply them. Halligan ships --estimate so you can price a suite before it executes; any bill you incur is yours.
  • Credentials. Keys stay in your environment. Protecting them, and rotating them if they leak, is on you.
  • Artifacts. Reports may contain transcript text from adversarial conversations. Review one before you circulate it.
  • Compliance. Your use must comply with the terms of every model provider you point at, and with the law that applies to you.

6. Not a certification

A Halligan score describes how a specific model, on a specific day, under a specific configuration, answered the probes in the suite you ran. It is evidence, and it is meant to be useful evidence. It is not a guarantee, an audit, a certification, or a statement that a system is safe, aligned, compliant or fit for any purpose.

Nothing produced by Halligan — score, report, or pack result — is legal, medical, theological or professional advice, and it must not be presented to a regulator, customer or user as a warranty of safety by us. A suite that passes has failed to find a problem, which is not the same thing as there being none.

7. Probe content

The probe suites deliberately contain adversarial material: jailbreak attempts, emotional-coercion framings, and arguments for positions this project rejects. They are test inputs, not endorsements, and they are published so that failures are reproducible.

Probes are data and are never executed. The runner does not replay a model's output into another model except as text to be graded. If you redistribute a suite, keep it in a context where that is clear.

8. Trademarks

Halligan™ and the Halligan logo are trademarks of Foxxception LLC. The Apache-2.0 licence covers the code, not the marks. Nominative use — saying truthfully that your project uses or tests with Halligan — is fine; using the name or logo in a way that suggests we endorse, sponsor or maintain your fork is not. The trademark policy sets out the detail, including how to name a fork.

9. Contributions

Contributions you submit to the project are licensed under Apache-2.0 in accordance with section 5 of that licence, and you confirm you have the right to submit them. The contributing guide covers how, and the code of conduct applies to project spaces.

10. No warranty

The site and the software are provided “as is” and “as available”, without warranty of any kind, express or implied, including any implied warranty of merchantability, fitness for a particular purpose, accuracy, or non-infringement. This mirrors section 7 of the Apache-2.0 licence, which is the operative disclaimer for the software.

Model behaviour is not deterministic. A suite that passes today may fail tomorrow against the same model, and Halligan's flake detection exists precisely because that is normal rather than exceptional.

11. Limitation of liability

To the fullest extent permitted by law, we are not liable for any indirect, incidental, special, consequential or exemplary damages, or for lost profits, lost data, API charges, business interruption, reputational harm, or the behaviour of any model you test — whether or not we were advised such damages were possible.

Our total aggregate liability arising out of the site or the software is limited to one hundred United States dollars (US$100). This is free software given away without charge, and the limit reflects that. Nothing here excludes liability that cannot lawfully be excluded, including for fraud or for death or personal injury caused by negligence.

12. Indemnity

You agree to indemnify us against claims, losses and reasonable legal costs arising from your use of Halligan in breach of section 4 — that is, from pointing it at a system you were not authorised to test.

13. Changes

We may update these terms. The effective date at the top changes when we do, and every revision is visible in the public commit history of this page. Continuing to use the site after a change means you accept the revised terms; a version of the software you already hold stays licensed under the Apache-2.0 terms it came with.

14. Governing law

These terms are governed by the laws of the State of Florida, United States, without regard to its conflict of law rules. The state and federal courts located in Florida have exclusive jurisdiction over any dispute arising from them, and you consent to venue there. If any provision is held unenforceable, the rest stays in force.

15. Contact

Legal notices: legal@foxxception.com
Everything else: support@foxxception.com
Foxxception LLC, Florida, United States

See also the privacy policy and the security policy.