TERMS OF
service.

1. Acceptance.

By accessing cybersecplus.com or entering into a written engagement with CyberSecPlus (“we”, “us”), you accept these Terms of Service. A signed Statement of Work supersedes the parts of these Terms that conflict with it.

2. Website use.

The website is provided for informational purposes only and does not constitute legal, technical, or compliance advice. You may not scrape, copy, or reverse-engineer the site for commercial purposes without written permission.

3. Engagements & authorization.

Penetration testing engagements are performed only against assets you own or have written authorization to test. Before any active testing we require:

• A signed Statement of Work defining scope, timeline, and deliverables.
• A signed Letter of Authorization listing in-scope IPs, domains, and accounts.
• A mutual Non-Disclosure Agreement.

Testing outside the agreed scope is prohibited. We will not test third-party systems without their owner’s explicit consent.

4. Fees & payment.

Fees are agreed in the Statement of Work. Standard payment terms are net 30 days from invoice. We reserve the right to suspend services on overdue accounts.

5. Deliverables & IP.

On full payment, you receive a non-exclusive, perpetual, worldwide licence to use the deliverables internally and to share them with auditors and regulators. We retain ownership of methodologies, tooling, and any reusable intellectual property created during the engagement.

6. Confidentiality.

We treat all client information, findings, and engagement materials as confidential. We will not disclose them except as required by law or with your written consent. Anonymised case studies require your sign-off before publication.

7. Warranties & liability.

We perform services with reasonable care and skill, in line with industry standards (OWASP, PTES, NIST SP 800-115). To the maximum extent permitted by law, our aggregate liability for any engagement is capped at the fees paid for that engagement. We are not liable for indirect, consequential, or loss-of-profits damages.

8. Acceptable use of findings.

Findings, exploits, and proof-of-concept code are provided for your defensive use. You may not use them to attack third-party systems, to extort or threaten any party, or to circumvent law enforcement.

9. Termination.

Either party may terminate an engagement for material breach not cured within 14 days of written notice. Fees for work completed before termination remain payable.

10. Governing law.

These Terms are governed by the laws of England and Wales. Disputes are subject to the exclusive jurisdiction of the English courts.

11. Contact.

Questions about these Terms: pentest@cybersecplus.com