Terms of Engagement

Template notice: This starter text is not legal advice and should be reviewed by qualified counsel before production use.

All services are delivered under written scope and authorisation. No security testing is carried out without documented client approval and defined rules of engagement.

Service scope

Deliverables, timelines, assumptions, and exclusions are defined per statement of work.

Client responsibilities

• Provide accurate scope information and authorisation proof.
• Review findings and remediation guidance promptly.
• Use delivered materials lawfully and responsibly.

Liability and limitations

Consulting outcomes are based on agreed scope and available evidence. No absolute guarantee is made that all vulnerabilities can be identified in every environment.

Confidentiality

Sensitive materials are handled under confidentiality obligations and, where required, separate NDA arrangements.