Terms & conditions

1. These terms

These terms apply to use of this website and, unless a separate signed agreement says otherwise, to the services we provide. Where you have signed an engagement letter, master services agreement or statement of work with us, that document takes precedence over these terms to the extent of any conflict.

2. Our services

We provide penetration testing, vulnerability assessment, data theft prevention, malware protection, network and cloud security, ransomware recovery and emergency incident response. The precise services, scope, timing and deliverables for your engagement are set out in writing before work begins.

3. Authorisation and scope

Security testing is only lawful with the authorisation of the system owner. Before any testing starts:

• You must confirm in writing that you own the systems in scope, or that you are authorised by the owner to have them tested
• We agree written rules of engagement covering targets, testing windows, excluded systems, prohibited techniques and escalation contacts
• Where systems are hosted by a third party, you are responsible for obtaining that provider's permission where their terms require it

We will not test any system outside the agreed scope. If you ask us to test systems you do not own or are not authorised to test, we will decline the work.

4. Your responsibilities

• Provide accurate information about your environment and any fragile or business-critical systems
• Provide access, credentials or documentation where the engagement requires them
• Maintain current backups before testing begins
• Nominate a contact who can be reached during the testing window
• Act on critical findings we escalate to you during an engagement

5. Fees and payment

• Fees are confirmed in writing before work begins and do not change mid-engagement unless the scope changes and you agree in writing
• Prices published on this website are indicative starting points and depend on final scope
• Invoicing terms are set out in your engagement documentation
• Invoices are payable within 30 days unless stated otherwise on the invoice
• Emergency incident response is quoted separately, and containment work may begin before commercial terms are finalised
• Late payment may attract statutory interest

6. Reports, retests and deliverables

You receive a findings report with reproduction steps, CVSS scoring, business impact and remediation guidance, plus an executive summary. One retest of the original findings is included at no extra cost, to be used within the period stated in your engagement documentation.

A report reflects the state of the tested environment during the testing window only. Changes made afterwards are outside its scope.

7. Emergency incident response

For active incidents we prioritise containment and recovery. You acknowledge that:

• Outcomes depend heavily on factors outside our control, including the attacker, the strain involved and the availability of usable backups
• We cannot guarantee recovery of encrypted or destroyed data
• Decisions about ransom payment, regulatory notification and law enforcement contact are yours; we provide information and support, not legal advice
• Delay or partial information from you may materially affect the outcome

8. Confidentiality

We treat your systems, findings and business information as confidential and will sign your NDA before scoping where you require one. We do not disclose that you are a client, or any detail of your engagement, without your written permission. This obligation survives the end of the engagement.

9. Intellectual property

You own the report and findings produced for your engagement. We retain ownership of our methodologies, tooling, templates and general know-how, including any generic knowledge or techniques developed during the work, provided these contain nothing confidential to you.

Website content, branding and materials are owned by Secure Cyber Future Ltd. Third-party trademarks shown on this site remain the property of their respective owners.

10. No guarantee of absolute security

Security testing identifies weaknesses that are discoverable within the agreed scope, timeframe and access level. It cannot prove that no vulnerabilities exist. We do not warrant that your systems will be free from compromise following an engagement, and we are not responsible for vulnerabilities introduced after testing concludes.

11. Limitation of liability

Nothing in these terms excludes liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot lawfully be excluded.

Subject to that, our total liability arising out of an engagement is limited to the fees paid for that engagement. We are not liable for indirect or consequential loss, loss of profit, loss of business, loss of goodwill, or loss or corruption of data, except where caused by our negligence in breach of the agreed rules of engagement.

12. Term and termination

Either party may terminate an engagement in writing. Where you terminate after work has begun, fees are payable for work completed up to that point. We may suspend or terminate work if we are asked to act outside the agreed scope, unlawfully, or contrary to professional ethics.

13. Website use

• Content on this site is provided for general information and is not professional or legal advice
• You may not attempt to test, scan or attack this website without our prior written permission
• If you believe you have found a security issue with this website, contact us before testing further
• We may change or withdraw website content at any time

14. Governing law

These terms are governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction, unless your signed engagement agreement specifies otherwise. Where services are delivered by our US or India entity, the governing law stated in that entity's engagement documentation applies.

Questions about these terms? Email contact@securecyberfuture.com.