Terms of Service

01Acceptance of These Terms

These Terms of Service (the “Terms”) govern your access to and use of the website at sec.co and any content, functionality, and informational materials offered on or through it (the “Site”), operated by SEC.co (“SEC.co,” “we,” “us,” or “our”). By accessing or using the Site, you agree to be bound by these Terms and our Privacy Policy. If you do not agree, do not use the Site.

02The Services; No Engagement Created

The Site provides general information about SEC.co’s cybersecurity advisory, managed-security, incident-response, compliance, and testing services. Information on the Site is provided for general purposes only and does not constitute professional, security, legal, or compliance advice, and it does not create a client relationship.

No engagement exists, and no Services will be performed, until SEC.co and the client have executed a written MSA and SOW defining scope, deliverables, fees, authorization, and rules of engagement. Nothing on the Site is an offer capable of acceptance to perform Services.

03Authorization for Security Testing

SEC.co performs offensive security testing (including penetration testing and red-team assessments) onlyunder written authorization specifying the in-scope targets, testing windows, and rules of engagement. You represent and warrant that, for any system you ask us to test, you own the system or are fully authorized to grant access and authorize testing, and that such authorization does not violate any third party’s rights or any law. You agree to obtain any consents required from hosting providers or other third parties. Unauthorized access to computer systems is unlawful, and SEC.co does not perform testing absent proper authorization.

04Acceptable Use of the Site

You agree not to:

• Use the Site in violation of any applicable law or regulation;
• Attempt to gain unauthorized access to the Site, related systems, or networks, except as expressly permitted by our Responsible Disclosure Policy;
• Interfere with or disrupt the integrity or performance of the Site;
• Introduce malware or any code of a destructive or malicious nature, or conduct denial- of-service activity;
• Scrape, harvest, or collect information about other users;
• Reverse engineer or copy any portion of the Site except as permitted by law;
• Use the Site to develop a competing product or to benchmark for a competitor without our written consent.

05Intellectual Property

The Site and all content, design, text, graphics, logos, the SEC.co name and shield mark, and the selection and arrangement thereof are owned by SEC.co or its licensors and are protected by intellectual-property laws. We grant you a limited, revocable, non-exclusive, non-transferable license to access and use the Site for your internal, non-commercial informational purposes. All rights not expressly granted are reserved.

Downloadable resources (such as checklists and templates) are provided for your internal use; you may not resell or redistribute them as your own work product.

06Confidentiality

Information you submit through the Site’s contact forms is handled in accordance with our Privacy Policy. Please do not transmit confidential, regulated, or sensitive technical details (such as live credentials, vulnerability specifics, or system architecture) through the Site. Confidential information exchanged in the course of an engagement is governed by the confidentiality and non-disclosure terms of the applicable MSA. If you believe you have discovered a security issue, follow our Responsible Disclosure Policy rather than posting details publicly.

07Third-Party Content and Links

The Site may reference or link to third-party websites, products, and services, and may name third-party technologies we work with. Such references are for convenience and do not constitute endorsement. We are not responsible for third-party content, products, or practices, and your dealings with third parties are solely between you and them.

08Disclaimers

THE SITE AND ALL CONTENT ARE PROVIDED “AS IS” AND “AS AVAILABLE” WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WITHOUT LIMITATION IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. SEC.co DOES NOT WARRANT THAT THE SITE WILL BE UNINTERRUPTED, ERROR-FREE, OR FREE OF HARMFUL COMPONENTS, OR THAT INFORMATION ON THE SITE IS ACCURATE, COMPLETE, OR CURRENT.

Cybersecurity is inherently probabilistic. Nothing on the Site, and no engagement, is a guarantee that systems will be free from vulnerability, compromise, or breach. Any assessment reflects conditions at a point in time within a defined scope. Security outcomes depend on factors outside our control, including your own actions, third-party systems, and the evolving threat landscape.

09Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT WILL SEC.co OR ITS OFFICERS, DIRECTORS, EMPLOYEES, OR AGENTS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, DATA, GOODWILL, OR BUSINESS INTERRUPTION, ARISING OUT OF OR RELATED TO YOUR USE OF — OR INABILITY TO USE — THE SITE, WHETHER BASED ON WARRANTY, CONTRACT, TORT, OR ANY OTHER LEGAL THEORY, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, SEC.co’S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO YOUR USE OF THE SITE WILL NOT EXCEED ONE HUNDRED U.S. DOLLARS (US $100). Liability arising from paid Services is addressed exclusively in the applicable MSA. Some jurisdictions do not allow certain limitations, so some of the above may not apply to you.

10Indemnification

You agree to indemnify, defend, and hold harmless SEC.co and its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or related to your misuse of the Site, your violation of these Terms, or your violation of any law or the rights of a third party.

11Suspension and Termination

We may suspend or terminate your access to the Site at any time, with or without notice, for any reason, including if we believe you have violated these Terms. Provisions that by their nature should survive termination — including intellectual property, disclaimers, limitation of liability, indemnification, and governing law — will survive.

12Governing Law and Dispute Resolution

These Terms are governed by the laws of the State of Washington, United States, without regard to its conflict-of-laws principles. Subject to the arbitration provision below, the state and federal courts located in King County, Washington will have exclusive jurisdiction over any dispute not subject to arbitration, and you consent to personal jurisdiction there.

Any dispute arising out of or relating to these Terms or the Site that cannot be resolved informally will be finally resolved by binding arbitration administered under the rules of a recognized arbitration body, on an individual basis. You and SEC.co waive any right to a jury trial and to participate in a class action. Either party may seek injunctive relief in court for actual or threatened infringement or misuse of intellectual property or confidential information.

13Force Majeure

SEC.co will not be liable for any failure or delay in performance resulting from causes beyond its reasonable control, including acts of God, natural disasters, war, terrorism, civil unrest, labor disputes, governmental action, utility or internet failures, or large-scale cyberattacks affecting infrastructure not under our control.

14General

These Terms, together with the Privacy Policy and any agreement governing the Services, constitute the entire agreement between you and SEC.co regarding the Site. If any provision is held unenforceable, the remaining provisions remain in effect. Our failure to enforce a provision is not a waiver. You may not assign these Terms without our consent; we may assign them in connection with a merger, acquisition, or sale of assets.

We may revise these Terms at any time by posting an updated version with a new “Last updated” date. Your continued use of the Site after changes take effect constitutes acceptance of the revised Terms.