Terms of service

1. Using this website

You may use this website to learn about our services, read our content, and contact us. By using it, you agree to these terms. If you do not agree, please discontinue use.

Use the website lawfully. Do not interfere with its operation, attempt unauthorized access, impersonate another person, or submit malicious or misleading content. Nothing on this website authorizes security testing of this website or any other system.

2. Website information

Our articles and other resources provide general information. They are not a security assessment of your organization, legal advice, an audit opinion, or a guarantee that a system is secure or compliant.

Security practices and threats change. We aim to keep our content useful, but we do not promise that every item is complete, current, or suitable for a particular environment. Apply guidance with appropriate expertise and authorization.

References to SOC 2 and ISO/IEC 27001 describe the principles that inform our security practices and framework alignment.

3. Security testing engagements

A website inquiry is a request for a conversation. Submitting information, preparing an email, or receiving a response does not create a security testing engagement or authorize us to access your systems.

Services begin only after the parties agree to an appropriate written engagement. That agreement defines the contracting parties, scope, deliverables, fees, scheduling, confidentiality, data handling, liability, and other service terms. It takes precedence over these website terms for the services it covers.

Descriptions on this website are general. Specific coverage, access requirements, timelines, and retesting arrangements must be agreed for each engagement.

4. Authorization and scope

Testing requires explicit written authorization from a party entitled to grant it. The engagement must identify approved assets, environments, permitted activities, restrictions, and rules of engagement. Permission to use a third-party service does not necessarily include permission to test it.

Assessments are bounded by their scope, configuration, access, and testing window. A test cannot establish that every possible vulnerability has been found, and a retest addresses the findings and conditions agreed for verification.

5. Confidentiality and sensitive information

Do not send credentials, private customer data, exploit evidence, or other sensitive material through the website inquiry form or unsolicited email. We can agree on a suitable channel before exchanging assessment information.

Confidentiality and the handling of client assessment data are governed by the applicable engagement agreement. Personal information connected with website use and inquiries is described in our privacy policy.

6. Intellectual property

Our branding, original website content, and design are owned by Lyrata Security or their respective rights holders. You may read and share links to our public content and make reasonable internal use of it. Do not reproduce or distribute substantial portions commercially without permission.

Third-party names and frameworks belong to their respective owners. Their appearance does not imply affiliation, endorsement, membership, or certification.

7. External links

We link to external resources for context and further reading. Their content, availability, and privacy practices are controlled by their operators. Review their terms and policies when you visit them.

8. Availability and responsibility

The website and its general information are provided as available. To the extent permitted by applicable law, we do not provide warranties of uninterrupted availability, error-free content, or fitness for a particular purpose.

To the extent permitted by applicable law, we are not responsible for indirect losses resulting from reliance on general website content or inability to access the website. Nothing in these terms excludes rights or responsibilities that applicable law does not allow to be excluded. Liability for contracted services is addressed in the applicable service agreement.

9. Changes to these terms

We may update these terms as the website or our practices change. The updated version will appear on this page with its effective date. Changes to an existing service engagement follow that engagement’s agreement.

10. Contact

For questions about these terms, contact [email protected].