Legal
Terms of service
These terms govern your use of the Spyandhack website and any authorized security services we provide. By using the site or engaging us, you agree to these terms.
Last updated: January 15, 2026
1. Acceptance of terms
By accessing this website or requesting services, you confirm you are authorized to bind yourself or your organization to these terms. If you do not agree, do not use the site or our services.
2. Services
We provide authorized security testing, cyber investigations, incident response, defensive assessments and ethical hacking education. Each engagement is defined by a statement of work covering scope, timeline, deliverables and fees.
3. Eligibility
You must be of legal age and capacity to contract. Services are provided to businesses and individuals for lawful, defensive purposes only.
4. Authorization requirement
You represent and warrant that you own or have explicit, written authorization to test every system, network, application and dataset in scope. We may request proof of ownership or authorization before work begins. Without it, we will not proceed. See our Acceptable Use & Authorization policy.
5. Acceptable use
You agree not to use the website or our services for any unlawful purpose, including accessing systems, accounts or devices belonging to third parties without consent. We refuse and report requests that involve illegal activity.
6. Client responsibilities
You agree to provide accurate scope information, timely access, backups where appropriate, and a point of contact during the engagement. You are responsible for remediation of findings after delivery unless we agree otherwise in writing.
7. Fees & payment
Fees, payment schedule and any expenses are set out in the statement of work. Invoices are payable within the stated terms. Approved out-of-scope work is billed at the agreed rate.
8. Intellectual property
Unless agreed otherwise, deliverables produced for you become your property upon full payment. We retain ownership of our pre-existing tools, methodologies and know-how, and grant you a license to use them as needed for the deliverables.
9. Confidentiality
We treat engagement data, findings and your business information as confidential and will not disclose them except as required by law or with your written consent.
10. Disclaimers
Security testing improves your posture but cannot guarantee that a system is free of vulnerabilities or immune to attack. Services are provided "as is" without warranty beyond what the statement of work and applicable law specify.
11. Limitation of liability
To the maximum extent permitted by law, our total liability arising from an engagement is limited to the fees paid for that engagement. We are not liable for indirect, incidental or consequential damages.
12. Indemnification
You agree to indemnify and hold us harmless from claims arising out of your use of our services on systems you do not own or are not authorized to test, or from your breach of these terms.
13. Termination
Either party may terminate per the statement of work. We may suspend or terminate immediately if we discover unauthorized scope, illegal activity, or a material breach. Fees for work performed remain due.
14. Governing law
These terms are governed by the laws of the jurisdiction stated in your statement of work, without regard to conflict-of-law principles. Disputes will be resolved in the agreed forum.
15. Changes & contact
We may update these terms; the "last updated" date reflects the latest revision. For questions, contact us through our contact page.
Template notice. These terms are a starting point, not legal advice. Have a qualified attorney review and adapt them to your jurisdiction, services and risk profile before publishing.