Terms of Service

By accessing or using our website and services, you acknowledge that you have read, understood, and agree to be bound by these Terms. If you are using our services on behalf of an organisation, you represent that you have the authority to bind that organisation to these Terms.

We reserve the right to modify these Terms at any time. We will notify you of material changes by posting the updated Terms on our website and updating the "Last updated" date. Your continued use of our website and services after such changes constitutes acceptance of the modified Terms.

RawSecLabs provides the following services:

• Penetration Testing: Web application, network, API, cloud, and mobile security assessments
• Adversary Simulation: Red team exercises and threat emulation services
• Blockchain & Web3 Security: Smart contract audits and protocol security assessments
• Compliance & Audit: ISO 27001, PCI DSS, SOC 2, DORA, and regulatory compliance services
• Incident Response: Rapid response to security incidents and forensic investigations
• Security Advisory: Strategic consulting and security program development

Specific deliverables, scope, timelines, and fees for professional services are governed by separate Statements of Work or Master Services Agreement.

As a user of our services, you agree to:

• Provide accurate, complete, and current information during engagement scoping
• Obtain all necessary authorisations for testing of systems you do not own
• Maintain appropriate backup procedures before testing begins
• Designate appropriate technical contacts for coordination during testing
• Notify us immediately of any unintended consequences during testing
• Pay all fees in accordance with agreed payment terms
• Comply with all applicable laws and regulations

You may not use our services to:

• Test systems without explicit written authorisation from the system owner
• Conduct denial of service attacks or any testing that could cause service disruption
• Access, modify, or destroy data beyond the agreed scope
• Use our services for any illegal or unauthorised purpose
• Violate any applicable local, state, national, or international law
• Infringe upon the intellectual property rights of others
• Transmit malicious code, viruses, or harmful content
• Attempt to gain unauthorised access to our systems or third-party systems

Violation of this Acceptable Use Policy may result in immediate termination of services and reporting to appropriate authorities.

Both parties agree to maintain the confidentiality of all non-public information disclosed during the course of our engagement. This includes, but is not limited to, technical information, business processes, security findings, and any other proprietary information.

Our standard engagement includes a mutual Non-Disclosure Agreement (NDA). Specific confidentiality obligations are detailed in the service-specific agreement. We implement appropriate technical and organisational measures to protect your confidential information.

Either party may terminate the engagement with written notice. Termination provisions, including notice periods and termination fees, are specified in the service-specific agreement.

Upon termination, you shall pay all fees for work performed and expenses incurred. We will return or destroy your confidential information as agreed. Survival clauses, including confidentiality, intellectual property, and limitation of liability, shall continue after termination.

OUR SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED. WE DISCLAIM ALL WARRANTIES, INCLUDING BUT NOT LIMITED TO:

• MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
• NON-INFRINGEMENT OF THIRD-PARTY RIGHTS
• ACCURACY, COMPLETENESS, OR RELIABILITY OF SERVICES
• UNINTERRUPTED OR ERROR-FREE OPERATION
• SECURITY OF INFORMATION TRANSMITTED TO US

Security testing cannot guarantee absolute security. Our services assess security posture at a point in time and do not guarantee protection against all threats.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, RAWSECLABS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, DATA, BUSINESS INTERRUPTION, OR OTHER LOSSES, ARISING FROM OR RELATING TO OUR SERVICES.

OUR TOTAL LIABILITY FOR ANY CLAIM SHALL BE LIMITED TO THE FEES PAID BY YOU FOR THE SPECIFIC SERVICE GIVING RISE TO THE CLAIM. THIS LIMITATION APPLIES TO THE MAXIMUM EXTENT PERMITTED BY LAW AND MAY NOT APPLY IN CERTAIN JURISDICTIONS.

You agree to indemnify, defend, and hold harmless RawSecLabs, its officers, directors, employees, and agents from any claims, damages, losses, liabilities, and expenses (including reasonable legal fees) arising from:

• Your use of our services
• Your violation of these Terms
• Your violation of any third-party rights
• Any unauthorised testing activities

These Terms are governed by and construed in accordance with the laws of England and Wales. Any disputes arising from these Terms shall be subject to the exclusive jurisdiction of the courts of England and Wales.

In the event of a dispute, we encourage good faith negotiation to resolve the issue. If negotiation fails, disputes may be resolved through mediation or arbitration as specified in the service-specific agreement. Litigation shall be a last resort.

• Entire Agreement: These Terms, together with any service-specific agreements, constitute the entire agreement between us.
• Severability: If any provision is found invalid, the remaining provisions shall continue in full force.
• Waiver: Failure to enforce any provision does not constitute a waiver of that provision.
• Assignment: You may not assign your rights under these Terms without our written consent.
• Force Majeure: We are not liable for delays or failures due to circumstances beyond our reasonable control.