Terms of Service

Terms and conditions for using Cyber Syndicate's penetration testing services

Last updated: January 2025

Acceptance of Terms

By accessing and using Cyber Syndicate’s services, you accept and agree to be bound by the terms and provision of this agreement. If you do not agree to abide by the above, please do not use this service.

Service Description

Cyber Syndicate provides penetration testing as a service (PTaaS) through a retainer-based model. Our services include:

  • Web application penetration testing
  • Network security assessments
  • Mobile application security testing
  • Comprehensive security reporting
  • Access to additional security platforms (depending on plan)

Subscription and Payment

Retainer Model:

  • Services are provided on a monthly retainer basis
  • Payment is due in advance of each billing cycle
  • No long-term contracts required
  • Cancellation allowed with 30 days notice

Service Levels:

  • Penetration Testing Plan: One active test request at a time
  • Full Suite Plan: Unlimited concurrent requests plus access to portfolio services

Client Responsibilities

As a client, you agree to:

  • Provide accurate and complete information about systems to be tested
  • Obtain all necessary permissions and authorizations before testing
  • Ensure you have legal authority to request testing on specified systems
  • Promptly address any critical security findings we discover
  • Not use our services for illegal activities or unauthorized system access
  • Maintain confidentiality of our testing methodologies and tools

Scope and Limitations

Testing Scope:

  • Testing is limited to systems and applications explicitly authorized by client
  • We will not test third-party systems without explicit permission
  • Social engineering and physical security testing require separate authorization

Service Limitations:

  • We cannot guarantee discovery of all vulnerabilities
  • Testing timeframes depend on system complexity and scope
  • We reserve the right to refuse testing of certain systems for safety reasons

Confidentiality and Data Protection

Mutual Confidentiality: Both parties agree to maintain strict confidentiality of all information shared during the engagement.

  • All client data is encrypted and stored securely
  • Testing data is deleted within 90 days after report delivery
  • Our team members sign comprehensive confidentiality agreements
  • We comply with applicable data protection regulations (GDPR, CCPA, etc.)

Liability and Disclaimers

Professional Liability:

  • Our liability is limited to the fees paid for the specific engagement
  • We maintain professional liability insurance
  • We are not responsible for business interruption during authorized testing

Disclaimers:

  • Services are provided “as is” without warranties
  • We disclaim liability for consequential or indirect damages
  • Client assumes responsibility for implementing recommended security measures

Intellectual Property

  • Client retains ownership of their systems and data
  • Cyber Syndicate retains ownership of our methodologies, tools, and processes
  • Security reports and findings belong to the client
  • We may use anonymized findings for research and service improvement

Termination

Either party may terminate the service agreement:

  • With 30 days written notice for convenience
  • Immediately for material breach of terms
  • Upon insolvency or bankruptcy of either party

Upon termination, we will complete any testing in progress and provide final reports within 30 days, after which all client data will be securely deleted.

Governing Law

These terms shall be governed by and construed in accordance with the laws of Pennsylvania, USA. Any disputes arising from these terms shall be resolved through binding arbitration in Pittsburgh, PA.

Contact Information

For questions about these Terms of Service, please contact us:

Email: legal@cybersyndicate.com

Address: Cyber Syndicate, LLC, Pittsburgh, PA

Phone: Available upon engagement

Changes to Terms

We reserve the right to modify these terms at any time. Material changes will be communicated to clients with 30 days advance notice. Continued use of our services after changes take effect constitutes acceptance of the modified terms.