Terms of service
These terms cover use of this website. Security testing engagements are governed by the separate statement of work and non-disclosure agreement signed for that engagement, which take precedence over anything on this page.
Website use
This website is provided for information. Nothing on it constitutes a binding offer, a warranty, or professional advice on which you should rely without taking your own view.
You may not use this website to attempt unauthorised access, to disrupt its availability, or to test it in ways that degrade service for others. Good-faith security research is welcome and explicitly authorised under the terms set out in our security.txt and on our security page.
Content on this site is our copyright unless otherwise stated. Third-party names and marks shown on this site belong to their respective owners and are used for identification only; their appearance does not imply any endorsement of us by them, or any client relationship.
Engagements
Security testing is provided only under a signed statement of work that defines scope, timing, price and rules of engagement, and only after a non-disclosure agreement is in place.
You must be authorised to request testing of the systems in scope. If you do not own the systems, you must hold written authorisation from the owner before testing begins. We will ask for it. Testing systems without authorisation is a criminal offence in most jurisdictions and we will not do it.
Every engagement includes one full retest of the findings within 90 days of report delivery at no additional cost, and a signed attestation letter recording scope, methodology, dates and outcome.
What we commit to
- An NDA signed before any scope detail is exchanged
- A fixed price agreed in writing before work starts, which does not move
- Written rules of engagement including windows, limits and a kill switch
- Critical findings reported the same day they are confirmed
- No destructive or denial-of-service testing without explicit written approval
- Real customer data is never exfiltrated as proof of a finding
- All engagement data destroyed on request at the end of the work
- Honest reporting — including telling you when we found nothing
Limitations
A penetration test is a point-in-time assessment of a defined scope. It cannot prove the absence of vulnerabilities, and a clean report is not a guarantee that a system is secure. Systems change, new vulnerability classes emerge, and anything outside the agreed scope is by definition untested.
Except where liability cannot lawfully be excluded, our total liability arising from an engagement is limited to the fees paid for that engagement. Liability for fraud, wilful misconduct, or death or personal injury caused by negligence is not excluded.
These terms are governed by the laws of India, and the courts of Patna, Bihar have jurisdiction, unless a signed statement of work specifies otherwise.
Changes
These terms were last updated on 12 August 2026.
Next step
Find out what an attacker would find.
Tell us what you have built. You get a reply within one business day, an NDA, and a free 30-minute scoping call with the person who will do the testing.