Terms of Service

These Terms of Service ("Terms") govern your access to and use of the CyfroSec platform, including all associated products, APIs, and services ("Services"). By accessing or using the Services you agree to be bound by these Terms.

1. Acceptance of Terms

By creating an account or using the Services, you represent that you are authorised to enter into this agreement on behalf of yourself or your organisation.

2. Use of the Services

Permitted use

You may use the Services only for lawful purposes and in accordance with these Terms. Permitted use includes:

• Vulnerability scanning of environments you own or are authorised to test
• Risk analysis, reporting, and remediation planning within your organisation
• Integration with your authorised toolchain via CyfroSec APIs

Prohibited use

You must not:

• Use the Services to scan systems you are not authorised to test
• Attempt to gain unauthorised access to the platform or third-party systems
• Reverse-engineer, decompile, or modify the platform software
• Sell, resell, or sublicense the Services without our written permission
• Use the Services in a way that violates applicable laws or regulations

3. Accounts and Security

You are responsible for maintaining the confidentiality of your account credentials. Notify us immediately at security@cyfrosec.com if you suspect any unauthorised access to your account. CyfroSec will not be liable for any loss arising from unauthorised use of your account.

4. Subscription and Payment

Access to paid tiers of the Services is subject to payment of applicable fees as described in your order or subscription agreement. Fees are billed in advance and are non-refundable except as expressly stated. We reserve the right to modify pricing with 30 days notice.

5. Intellectual Property

CyfroSec retains all intellectual property rights in the platform, software, and content. You retain ownership of all data you upload to the Services. You grant CyfroSec a limited licence to process your data solely for the purpose of providing the Services.

6. Confidentiality

Each party agrees to protect the other's confidential information with at least the same degree of care it uses for its own confidential information and not to disclose it to third parties without prior written consent, except as required by law.

7. Data Processing

Our handling of personal data is described in our Privacy Policy. Where CyfroSec processes personal data on your behalf, the parties will execute a Data Processing Agreement as required under applicable data protection law.

8. Disclaimers

The Services are provided "as is" without warranties of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, or non-infringement. CyfroSec does not warrant that the Services will be uninterrupted or error-free.

9. Limitation of Liability

To the maximum extent permitted by law, CyfroSec will not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of the Services, even if CyfroSec has been advised of the possibility of such damages. CyfroSec's total liability will not exceed the fees paid by you in the 12 months preceding the claim.

10. Termination

Either party may terminate this agreement with 30 days written notice. CyfroSec may suspend or terminate access immediately for material breach of these Terms, including unauthorised use of the Services. Upon termination, your right to use the Services ceases and data will be handled per our retention policy.

11. Governing Law

These Terms are governed by the laws of the European Union and the jurisdiction in which CyfroSec is incorporated, without regard to conflict of law provisions.

12. Changes to These Terms

We may update these Terms from time to time. We will provide at least 30 days notice of material changes. Continued use of the Services after the effective date constitutes acceptance of the updated Terms.

13. Contact

For questions about these Terms, contact us at legal@cyfrosec.com or via our contact form.