Terms & Conditions
Last updated: November 15, 2024
1. Acceptance of Terms
By accessing or using OraSec's services, website, or platforms, you agree to be bound by these Terms and Conditions. If you do not agree to all terms, you may not access or use our services.
2. Services Description
OraSec provides offensive security services including penetration testing, red team assessments, vulnerability assessments, and related security consulting services. The specific scope of services is defined in individual engagement agreements.
3. Authorization and Scope
All security testing activities require written authorization from the asset owner. Testing will be conducted only within the agreed-upon scope. Clients are responsible for ensuring they have proper authorization for all systems included in the assessment scope.
4. Confidentiality
OraSec treats all client information, findings, and communications as strictly confidential. We will not disclose assessment results to any third party without written authorization, except as required by law.
5. Limitation of Liability
OraSec's liability is limited to the fees paid for the specific engagement. We are not liable for any indirect, incidental, special, consequential, or punitive damages arising from our services.
6. Client Responsibilities
Clients agree to:
- Provide accurate authorization documentation
- Ensure necessary access for testing activities
- Notify relevant stakeholders of planned testing
- Have appropriate backup and recovery procedures
- Review and respond to findings in a timely manner
7. Intellectual Property
OraSec retains intellectual property rights to our methodologies, tools, and frameworks. Clients receive a non-exclusive license to use deliverables for their internal security purposes.
8. Payment Terms
Payment terms are specified in individual engagement agreements. Invoices are due within 30 days unless otherwise specified.
9. Termination
Either party may terminate services with 30 days written notice. In case of material breach, termination may be effective immediately. Upon termination, clients retain access to findings and reports.
10. Governing Law
These Terms are governed by the laws of the State of California, USA. Any disputes will be resolved in the courts of San Francisco County, California.
11. Contact Information
For questions about these Terms, please contact us through our main contact channels.