Terms

Terms of Service for Cyber Security Portal

Effective Date: October 12, 2025

1. Acceptance of Terms

These Terms of Service ("Terms") govern your access to and use of the Cyber Security Portal website, services, consulting, managed detection, assessment, and any related offerings (collectively, "Services"). By accessing or using our Services, you agree to be bound by these Terms. If you are entering into these Terms on behalf of an organization, you represent and warrant that you have the authority to bind that organization.

2. Services and Scope

Cyber Security Portal provides cyber security services including but not limited to vulnerability assessments, penetration testing, managed detection and response (MDR), incident response, security advisory, and crypto custody reviews. Scope, deliverables, timelines, and fees for any engagement will be set out in a separate statement of work ("SOW") or service agreement, which, together with these Terms, forms the full agreement between you and Cyber Security Portal.

3. Client Responsibilities

You shall provide timely access to personnel, systems, and information reasonably required for Cyber Security Portal to perform the Services. Clients must obtain and maintain necessary consents and permissions for any testing or monitoring activities. Unauthorized testing on third-party systems is strictly prohibited. Clients are responsible for ensuring backups and for the integrity of their production environments prior to testing.

4. Fees and Payment

Fees for Services will be specified in the applicable SOW. Unless otherwise stated, fees are due within the terms on the invoice. Late payments may accrue interest and may result in suspension of Services. Clients are responsible for any taxes associated with the Services, other than taxes on Cyber Security Portal’s net income.

5. Confidentiality

Both parties agree to maintain the confidentiality of proprietary or confidential information disclosed during the course of the engagement. Confidential information includes technical data, security findings, system configurations, business information, and any information designated as confidential. Confidential information does not include information that is publicly available through no breach by the receiving party, or independently developed without use of the disclosing party's confidential information.

6. Data Handling and Privacy

During engagements, Cyber Security Portal may process personal data and technical information necessary to perform Services. Handling of personal data is governed by our Privacy Policy dated October 12, 2025, which is incorporated herein by reference. Cyber Security Portal implements industry-standard technical and organizational measures to protect data, but cannot guarantee absolute security.

7. Use of Findings and Recommendations

Cyber Security Portal will provide findings, reports, and recommendations based on testing and analysis. Clients acknowledge that security testing can uncover vulnerabilities and that implementing recommendations is the Client’s responsibility. Cyber Security Portal is not liable for residual risk resulting from the Client’s failure to implement recommendations or otherwise remediate identified issues.

8. Intellectual Property

Cyber Security Portal retains ownership of its pre-existing intellectual property, proprietary tools, methodologies, and know-how used to deliver Services. Client retains ownership of its data and other materials provided to Cyber Security Portal. Deliverables produced specifically for the Client as part of the engagement will be the intellectual property of the Client upon full payment, except for any underlying tools, templates, or methodologies that remain the property of Cyber Security Portal.

9. Warranties and Disclaimers

Cyber Security Portal warrants that it will perform Services with reasonable skill and care consistent with industry standards. Except for this limited warranty, Services are provided "as is" and Cyber Security Portal disclaims all other warranties, express or implied, including merchantability, fitness for a particular purpose, and non-infringement.

10. Limitation of Liability

To the maximum extent permitted by law, Cyber Security Portal's total liability for claims arising from or related to the Services shall not exceed the fees paid by the Client to Cyber Security Portal for the specific Services giving rise to the claim in the twelve (12) months preceding the claim. In no event shall Cyber Security Portal be liable for lost profits, loss of data, special, incidental, consequential, or punitive damages, even if advised of the possibility of such damages.

11. Indemnification

Client agrees to defend, indemnify, and hold harmless Cyber Security Portal, its affiliates, and personnel from and against any third-party claims arising from Client’s misuse of Services, failure to follow recommendations, unauthorized activities, or breach of these Terms. Cyber Security Portal will indemnify Client against claims that our deliverables infringe third-party intellectual property rights, provided Client promptly notifies Cyber Security Portal and cooperates in defense.

12. Termination

Either party may terminate the engagement for material breach if the other party fails to cure such breach within a specified cure period following written notice. Cyber Security Portal may suspend Services for non-payment. Upon termination, Client must pay for Services performed through the effective date of termination and for any non-cancelable commitments incurred on Client's behalf.

13. Governing Law and Dispute Resolution

These Terms shall be governed by the laws of the jurisdiction specified in the SOW or, if not specified, the laws most closely connected to Cyber Security Portal’s primary place of business. Parties will attempt to resolve disputes in good faith through negotiation. If unresolved, disputes may proceed to mediation and, if necessary, binding arbitration or litigation as specified in an agreement between the parties.

14. Export Controls and Compliance

Client shall comply with applicable export control laws and regulations. Client represents that neither it nor its personnel are subject to trade or economic sanctions that would prohibit the provision or receipt of Services.

15. Security and Responsible Disclosure

If during the course of Services, vulnerabilities are identified that could materially impact third parties, Cyber Security Portal will coordinate responsible disclosure with the Client. Public disclosure of findings will occur only with Client consent or as required by law.

16. Changes to Terms

Cyber Security Portal may update these Terms from time to time. Material changes will be communicated to existing clients. Continued use of Services after posted changes constitutes acceptance of the updated Terms.

17. Miscellaneous

These Terms, together with any SOWs, constitute the entire agreement between the parties and supersede prior agreements. If any provision is found invalid, the remaining provisions will remain in full force and effect. Neither party may assign its rights under this agreement without the other party’s prior written consent, except in cases of corporate merger or sale of substantially all assets.

By engaging Cyber Security Portal, you acknowledge that you have read these Terms and agree to be bound by them as of the Effective Date shown above.