01. Scope of Work & Authorization
All offensive security audits, penetration testing engagements, and automated security scans conducted by Securofy are performed strictly under verified mutual authorization and defined Statements of Work (SOW).
- Proof of Ownership: Clients represent and warrant that they possess legitimate ownership or explicit written authorization over all target IP addresses, domains, and cloud environments provided for scoping.
- Exclusions: Testing shall not be directed against third-party shared hosting providers, external microservices, or interconnected vendor APIs without separate written authorization.
- Reconnaissance Windows: Security tests are scheduled within mutual time windows to guarantee real-time communication between Securofy engineers and client infrastructure leads.
02. Safe Harbor & Ethical Hacking Standards
Securofy operatives conduct vulnerability discovery under internationally recognized frameworks (OWASP Top 10, NIST SP 800-115, PTES). When assessing targets within authorized scopes:
- Ethical Conduct: Tests are executed in good faith to identify exploitable attack vectors before malicious adversaries can leverage them.
- Non-Disruptive Testing: We employ controlled payload thresholds to prevent service degradation, denial of service (DoS), or database corruption during scanning and exploitation validation.
- Data Protection: Any sensitive data or credentials encountered during privilege escalation will not be exfiltrated or retained beyond the minimal evidence needed for proof-of-concept verification.
03. Confidentiality & Non-Disclosure
Client confidentiality is absolute. Securofy treats all engagement data, vulnerability findings, and code telemetry with enterprise-grade operational security:
- Mutual Non-Disclosure: Discovered vulnerabilities, penetration testing reports, and remediation roadmaps are strictly confidential between Securofy and the client.
- Zero Public Disclosure: We never publicly disclose vulnerabilities or client identities without explicit written consent.
- Data Destruction: Upon conclusion of the verification and re-testing cycle, raw engagement artifacts and packet captures are securely erased.
04. Retainers, Deliverables & Retesting Window
Securofy provides upfront pricing, including introductory evaluations and comprehensive custom penetration testing tiers:
- Deliverables: Every completed engagement includes an Executive Summary for stakeholders and a Technical Vulnerability Report with reproduction steps and remediation patches.
- Retesting Period: To assist your engineering team, we provide complimentary verification testing within thirty (30) days of preliminary report delivery.
- Payment Terms: Retainers are allocated directly to certified security engineers and dedicated scanning compute upon confirmation of engagement scope.
05. Limitation of Liability & Warranties
Cybersecurity is an evolving field with continuously changing threat dynamics. While Securofy delivers meticulous manual and automated audits, no audit can guarantee permanent immunity against future zero-day exploits or internal employee compromises.
- Reports reflect the security posture of evaluated targets at the time of testing.
- Securofy shall not be liable for indirect, consequential, or third-party damages resulting from breaches outside the authorized testing scope or occurring subsequent to report delivery.
06. Dashboard Access & Credential Safety
Clients are granted authenticated portal access to inspect active engagement statuses and report summaries:
- Clients are solely responsible for securing their account passwords, multi-factor keys, and session tokens.
- Securofy reserves the right to terminate access if malicious automation or credential misuse is detected from an account.
07. Governing Law & Jurisdiction
These Terms and Conditions shall be governed by and interpreted in accordance with the laws of India. Any legal disputes or claims arising out of these terms shall be subject to the exclusive jurisdiction of the competent courts of New Delhi, India.
08. Direct Legal & Operational Inquiries
For inquiries regarding Statements of Work, vendor onboarding forms, or Master Services Agreements:
- Legal Desk: info@securofy.in
- Company: Securofy Cybersecurity Solutions, India