Terms & Conditions

1. Scope

These Terms govern use of the 8X Securities website and purchase of cybersecurity services including website security audits, vulnerability assessments, VAPT/penetration testing, WordPress security, API security testing and security hardening. A quotation, Statement of Work (SOW), work order or engagement letter may contain service-specific terms and will prevail over these Terms where they conflict.

2. Authorisation and Rules of Engagement

• The customer must own the target or have documented authority to test it.
• Testing is limited to assets and methods expressly included in the agreed scope.
• Third-party hosting, cloud, SaaS or other provider permissions are the customer's responsibility where required.
• We may pause testing if authority, scope or safety becomes unclear.

3. Customer Responsibilities

• Provide accurate scope, access and project information.
• Maintain appropriate backups and business continuity arrangements for production testing.
• Provide required approvals and authorised contacts.
• Use reports and findings lawfully and protect confidential deliverables.

4. Deliverables

Deliverables are those stated in the applicable SOW. Security assessments are point-in-time assessments and cannot guarantee that every vulnerability or future security issue will be identified.

5. Payment

Fees, taxes and payment milestones are stated in the applicable quotation, checkout or invoice. Online payments may be processed by Razorpay. We do not ask customers to provide full card numbers, CVV, UPI PINs or banking passwords to 8X Securities.

6. Confidentiality

Non-public customer information, technical data, credentials, source code, findings and reports received for an engagement will be handled as confidential, subject to legal requirements and authorised service providers.

7. Intellectual Property

Each party retains its pre-existing intellectual property. Subject to full payment, the customer may use its final commissioned reports and agreed deliverables for its internal business and compliance purposes. Our reusable methodologies, templates, tools and general know-how remain ours unless otherwise agreed.

8. Prohibited Use

The website and services must not be used to facilitate unauthorised access, fraud, credential theft, malware distribution, disruption or other unlawful activity. Offensive-security work requires appropriate authorisation and scope.

9. Service Limitations

Cybersecurity testing can involve controlled intrusive activity and may have unexpected effects. We will use reasonable professional care within the agreed scope, but are not responsible for issues caused by inaccurate scope, undisclosed dependencies, client changes, third-party systems or client instructions.

10. No Security Guarantee

No audit, report, certificate or remediation recommendation guarantees that a system is secure, free of vulnerabilities, or compliant with every applicable requirement.

11. Suspension and Termination

Services may be paused or terminated where required authority is absent, continued testing presents a material safety/security risk, payment remains overdue, or the customer materially breaches the applicable terms.

12. Governing Law

These Terms are governed by the laws of India. Disputes will first be addressed in good faith and otherwise through the courts having jurisdiction under applicable law.

13. Contact

Email: support@8xsecurities.com.