Terms of Service

1. Acceptance of Terms

These Terms of Service ("Terms") constitute a legally binding agreement between you ("Client," "you," or "your") and Faltrox Security ("Faltrox Security," "we," "us," or "our") governing your use of our website and cybersecurity services including penetration testing, vulnerability assessments, red team operations, security consulting, and related professional services.

By accessing our website, requesting a consultation, or executing a Statement of Work (SOW), you acknowledge that you have read, understood, and agree to be bound by these Terms.

2. Services Description

2.1 Professional Services

Faltrox Security provides expert cybersecurity services including:

• Penetration Testing (Web, API, Cloud, Mobile)
• Vulnerability Assessment and Penetration Testing (VAPT)
• Red Team Operations and Adversary Simulation
• Security Compliance Assessments (PCI-DSS, SOC 2, ISO 27001)

3. Client Obligations

3.1 Authorization

Client represents and warrants that they have full legal authority to authorize testing on all in-scope systems. You must obtain necessary approvals from hosting providers and third parties before testing begins.

3.2 Responsibilities

• Access: Provide timely access and credentials.
• Backups: Perform full backups before testing (Faltrox is not liable for data loss).
• Change Freeze: Avoid major system changes during active testing.

4. Confidentiality

Both parties agree to maintain strict confidentiality of assessment findings, vulnerabilities, and proprietary methodologies. Findings may only be shared with authorized personnel under NDA.

5. Fees and Payment

• Fees: Fees, payment schedules, and currency are specified in the applicable SOW, quote, or invoice.
• Taxes: Fees are exclusive of applicable taxes (including GST for clients in India), which will be charged as required by law.
• Late Payment: Overdue invoices may accrue interest at 1.5% per month (or the maximum permitted by law) and may result in suspension of services after notice.
• Cancellation: Cancellation or rescheduling terms for booked engagements are set out in the applicable SOW.

6. Intellectual Property

Faltrox Security retains all rights to its proprietary methodologies, tools, frameworks, templates, and pre-existing materials. Upon full payment, the Client receives a non-exclusive, non-transferable license to use deliverables (e.g., assessment reports) for internal business purposes. Website content, branding, and materials are protected under applicable copyright and trademark laws, including the Copyright Act, 1957 (India), and may not be reproduced without written permission.

7. Acceptable Use

You agree not to misuse our website or services, including by: attempting unauthorized access to our systems; interfering with site availability; scraping or harvesting data without permission; submitting false, misleading, or unlawful content; or using our deliverables, tools, or findings to attack systems you are not authorized to test. Any unlawful use of our services or deliverables, including offences under the Information Technology Act, 2000, is solely your responsibility.

8. Limitation of Liability

To the maximum extent permitted by law, Faltrox Security's total aggregate liability for all claims arising from or related to the services shall not exceed the fees paid by Client for the specific engagement giving rise to the liability. We are not liable for indirect, incidental, special, punitive, or consequential damages, loss of profits, loss of data, or business interruption.

Security assessments reflect the state of in-scope systems at the time of testing. No assessment can guarantee the discovery of every vulnerability or the prevention of all future incidents, and our services do not constitute a warranty or insurance against breaches.

Nothing in these Terms limits liability that cannot be limited under applicable law, including liability for fraud or wilful misconduct.

9. Indemnification

Client shall indemnify and hold harmless Faltrox Security from claims, damages, and expenses arising from: (a) testing performed in reliance on Client's representation of authority over in-scope systems that proves inaccurate; (b) Client's breach of these Terms; or (c) Client's misuse of deliverables.

10. Term, Suspension and Termination

Either party may terminate an engagement for material breach not cured within 30 days of written notice. We may suspend or terminate website access immediately for violation of these Terms. Upon termination, Client shall pay for services rendered up to the effective date of termination. Sections relating to confidentiality, intellectual property, limitation of liability, indemnification, and governing law survive termination.

11. Governing Law and Dispute Resolution

These Terms are governed by and construed in accordance with the laws of India, without regard to conflict-of-law principles. Any dispute arising out of or in connection with these Terms or our services shall first be attempted to be resolved amicably through good-faith negotiations within 30 days.

Failing amicable resolution, disputes shall be referred to arbitration under the Arbitration and Conciliation Act, 1996, by a sole arbitrator mutually appointed by the parties. The seat and venue of arbitration shall be Bangalore, Karnataka, India, and proceedings shall be conducted in English. Subject to the foregoing, the courts at Bangalore, Karnataka shall have exclusive jurisdiction.

For clients outside India, mandatory consumer protections of your country of residence remain unaffected where they apply by law.

12. General

• Force Majeure: Neither party is liable for delays caused by events beyond reasonable control.
• Severability: If any provision is held unenforceable, the remainder of these Terms remains in effect.
• Assignment: Client may not assign these Terms without our written consent.
• Entire Agreement: These Terms together with the applicable SOW constitute the entire agreement; in case of conflict, the SOW prevails for that engagement.
• Changes: We may update these Terms; material changes will be posted on this page with a revised "Last updated" date. Continued use after changes constitutes acceptance.