Terms of Service

1. About these terms

2. Use of this website

You may read this website, and print or download extracts for your own reference or to share internally when evaluating our services. You may not republish our content as your own, present it as originating from another party, or use it to imply any endorsement or relationship that does not exist.

You must not attempt to compromise this website or the infrastructure it runs on. If you believe you have found a vulnerability, the disclosure route is set out in our Authorized Testing Policy, and we would rather hear from you than not.

3. Information on this website is general

The content here is provided for general information. It describes our services and our approach, and it is not security advice for your specific circumstances. Nothing on this website should be relied upon as a substitute for a scoped engagement, and no statement here forms a warranty about the security of any system.

Any commercial figures, ranges, or indications shown on this website are indicative only. Fees for an engagement are those stated in the signed engagement documents.

Our sample report is a fictional illustration. It does not represent a real client, product, engagement, or vulnerability.

4. How engagements are formed

Nothing on this website is an offer capable of acceptance. Submitting an enquiry or a scope review request does not create a contract, does not oblige either party to proceed, and does not authorize any testing of any system.

An engagement begins only when:

the scope, approach, deliverables, timescales, and fees are agreed in writing;
you have provided written authorization for each in-scope asset, from a person entitled to grant it;
rules of engagement have been agreed and signed by both parties.

The requirements in our Authorized Testing Policy apply to every engagement and cannot be waived by commercial arrangement, including success-based engagements.

5. Client responsibilities

Client responsibilities, required permissions and access arrangements are governed by the signed engagement documents and applicable law. The Company must not test without valid written authorisation and an agreed scope.

6. Service obligations

Engagement-specific deliverables, methods, communications and other service obligations are defined in the signed engagement documents, subject to applicable law.

7. No guarantee of security

Security testing is an examination of a defined scope during a defined period. It cannot prove the absence of vulnerabilities.

We do not warrant that any system is secure, that all vulnerabilities have been identified, or that a system is compliant with any standard or regulation. We do not issue certificates, seals, or accreditation, and no deliverable we provide should be presented as one.

8. Confidentiality

Engagement information, findings, reports and evidence are confidential and subject to the signed engagement agreement and applicable law. The Company will not publish or reference them, or identify a client publicly, without the client’s written permission.

Disclosures required by applicable law are permitted only to the extent required. This provision does not otherwise reduce confidentiality obligations under a signed engagement agreement.

9. Intellectual property

Intellectual property ownership and rights to use engagement deliverables are governed by the signed engagement agreement and applicable law. These website terms do not grant a licence to engagement deliverables or transfer intellectual property rights. Permissions to use website content remain as stated in Section 2.

10. Fees and payment

Fees, payment terms, currency, and any applicable taxes are stated in the engagement documents. Where an engagement is on a success basis, the criteria that trigger payment are recorded in writing before testing begins, as described on our No Hack, No Pay page.

Cancellation and refund arrangements are set out in our Refund and Cancellation Policy.

11. Liability

Nothing in these terms excludes or limits liability where it cannot lawfully be excluded or limited, including liability for death or personal injury caused by negligence, or for fraud or fraudulent misrepresentation.

Subject to that, and to the extent permitted by law, we are not liable for indirect or consequential loss, loss of profit, loss of revenue, loss of anticipated savings, loss of business opportunity, or loss of or damage to data arising from your use of this website.

Liability arising from an engagement is governed by the limitation of liability agreed in the engagement documents for that engagement. Where you require a specific liability position or evidence of insurance, raise it during scoping so it can be addressed before the engagement begins.

12. Links to other websites

Where we link to external resources, we do so because we consider them useful. We do not control them and are not responsible for their content, their availability, or their handling of your data.

13. Changes

The Company may update this website policy. Changes to this website policy do not retrospectively amend existing signed engagement agreements.

14. Governing law

These website terms and any dispute or claim arising out of or in connection with them, including non-contractual disputes or claims, are governed by the law of England and Wales. Subject to any mandatory law or jurisdiction rule that cannot lawfully be excluded, the courts of England and Wales have exclusive jurisdiction over such disputes or claims. A services engagement is governed by its signed engagement documents, including any separately agreed governing-law and jurisdiction terms.

15. Contact

Questions about these terms can be sent to info@cybercache.cc.