Create Your Account

1. Authorisation & scope

You confirm you are authorised to commission security testing of the domain(s) and assets you register, and that you own them or have explicit written permission to test them. Testing is confined to assets you have verified in your inventory - nothing out of scope is ever touched.

2. Nature of testing

Scans and validation may include active probing, authentication attempts, and safe exploitation of identified weaknesses. While we use non-destructive techniques by default, intrusive testing carries inherent risk to availability and data integrity. You accept this risk for in-scope assets.

3. Timing & safe-guards

You are responsible for notifying your own monitoring/SOC and hosting providers as needed, and for taking backups of in-scope systems. You may pause or revoke testing at any time from your portal or by contacting support.

4. Data handling

Findings, evidence, and any data incidentally accessed during testing are stored encrypted, retained per your plan's retention period, and handled under our Privacy Policy and Data Processing terms.

5. Lawful use

You agree to use the platform only for lawful, authorised security testing. Unauthorised testing of third-party systems is strictly prohibited and may be unlawful.

The full Rules of Engagement, including the per-engagement form you will complete in your portal, are set out on the Rules of Engagement page.