Terms of Service

We provide cloud security consulting services, including but not limited to:

We develop and maintain open-source security tools, including Kite, which are made available under their respective open-source licenses (MIT License unless otherwise specified).

Our website provides information about our services, documentation, and access to our tools and resources.

Specific consulting engagements will be governed by separate Service Agreements or Statements of Work ("SOW") that incorporate these Terms by reference. In case of conflict between these Terms and a Service Agreement, the Service Agreement shall take precedence for that specific engagement.

All consulting services will be performed according to the agreed scope of work. Changes to scope require written agreement and may result in additional fees.

For AWS security assessments, Client agrees to:

Service timelines and deliverables will be specified in individual Service Agreements. We will make reasonable efforts to meet agreed timelines, subject to Client's cooperation and external factors beyond our control.

Client shall:

Client is responsible for:

Client agrees to cooperate reasonably with our personnel and provide necessary support to enable effective service delivery.

Client retains all rights, title, and interest in their data, systems, and pre-existing intellectual property. We claim no ownership rights over Client's confidential information or systems.

We retain all rights to our proprietary methodologies, tools (except open-source tools), processes, and any intellectual property developed independently of Client engagements.

Our open-source tools, including Kite, are licensed under the MIT License or other specified open-source licenses. Use of these tools is subject to the terms of their respective licenses.

Unless otherwise specified in a Service Agreement:

Both parties acknowledge they may receive confidential information and agree to:

Confidentiality obligations do not apply to information that:

Client shall reimburse reasonable out-of-pocket expenses incurred in providing services, subject to prior approval where specified in Service Agreements.

Payment disputes must be raised within 30 days of invoice receipt. Undisputed portions of invoices remain due as scheduled.

We warrant that our services will be performed in a professional and workmanlike manner in accordance with industry standards.

EXCEPT AS EXPRESSLY SET FORTH HEREIN, WE MAKE NO WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.

We do not guarantee specific security outcomes, compliance achievements, or that all security vulnerabilities will be identified. Our assessments reflect conditions at the time of review.

OPEN-SOURCE TOOLS ARE PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. USE AT YOUR OWN RISK.

IN NO EVENT SHALL WE BE LIABLE FOR:

OUR TOTAL LIABILITY FOR ANY CLAIM SHALL NOT EXCEED THE TOTAL FEES PAID BY CLIENT FOR THE SPECIFIC SERVICES GIVING RISE TO THE CLAIM IN THE 12 MONTHS PRECEDING THE CLAIM.

Claims must be brought within one (1) year after the cause of action accrues.

Client agrees to mitigate damages and notify us promptly of any potential claims.

Each party agrees to indemnify and hold the other harmless from claims arising from:

Client shall indemnify us against claims arising from:

We will process Client data in accordance with our Privacy Policy and applicable data protection laws.

We implement appropriate technical and organizational measures to protect Client data, including encryption, access controls, and regular security assessments.

We will notify Client promptly of any known or suspected unauthorized access to Client data.

Upon completion of services and expiration of retention periods, we will securely delete or return Client data as requested.

Either party may terminate these Terms or specific Service Agreements:

Upon termination:

The following sections survive termination: Intellectual Property, Confidentiality, Payment Terms, Warranties and Disclaimers, Limitation of Liability, Indemnification, and Governing Law.

Client represents that their AWS usage complies with AWS terms of service and applicable laws. We are not responsible for Client's AWS compliance obligations.

Use of our open-source tools is subject to their respective open-source licenses. Users must comply with all license terms.

Contributions to our open-source projects are governed by the contribution guidelines and license terms specified in each repository.

Open-source tools are provided on a community support basis. Commercial support may be available under separate agreements.

These Terms are governed by the laws of England and Wales without regard to conflict of law principles.

Any disputes shall be resolved through binding arbitration in Sheffield, England under the rules of the Chartered Institute of Arbitrators, except that either party may seek injunctive relief in court for breaches of confidentiality or intellectual property rights.

These Terms, together with applicable Service Agreements and our Privacy Policy, constitute the entire agreement between the parties and supersede all prior agreements and understandings.

These Terms may only be modified by written agreement signed by both parties, except that we may update these Terms by providing 30 days' notice.

If any provision of these Terms is found to be unenforceable, the remaining provisions shall remain in full force and effect.

These Terms may not be assigned by either party without the other party's written consent, except that we may assign these Terms in connection with a merger, acquisition, or sale of substantially all our assets.

Neither party shall be liable for delays or failures in performance due to causes beyond their reasonable control, including acts of God, natural disasters, war, terrorism, or government actions.

All notices must be in writing and delivered to the addresses specified in the applicable Service Agreement or these Terms.

The parties are independent contractors. These Terms do not create a partnership, joint venture, or agency relationship.