Terms & Conditions

Acceptance of Terms

By engaging OFFCEPT for security services or accessing this website, you agree to be bound by these Terms and Conditions. If you are entering into these terms on behalf of an organisation, you represent that you have authority to bind that organisation.

These terms are supplemented by, and should be read alongside, any specific engagement contract or statement of work agreed between you and OFFCEPT.

Services

OFFCEPT provides offensive security services including penetration testing, red team operations, social engineering assessments, adversary simulation, threat intelligence, and vulnerability research.

All services are delivered under a signed engagement agreement that defines scope, rules of engagement, authorised targets, and delivery timelines. No testing activity commences without a fully executed agreement.

OFFCEPT reserves the right to refuse or terminate any engagement where continued activity would create legal, ethical, or safety concerns.

Authorisation & Legal Compliance

The client represents and warrants that it has full legal authority to authorise testing against all systems, networks, and data specified in the engagement scope.

The client indemnifies OFFCEPT against any claims, losses, or liabilities arising from testing conducted in good faith within the agreed scope where the client did not hold the necessary authority.

OFFCEPT operates in compliance with applicable laws. All engagements require written authorisation and are conducted within agreed boundaries. OFFCEPT will not conduct testing that it has reason to believe is unlawful.

Confidentiality

OFFCEPT treats all client information, engagement data, and findings as strictly confidential. Deliverables are not shared with third parties without express written consent.

Clients agree to treat OFFCEPT's methodologies, tools, and proprietary processes as confidential and not to disclose them to third parties.

Confidentiality obligations survive termination of the engagement for a period of five years, or indefinitely with respect to trade secrets.

Intellectual Property

Engagement deliverables — reports, findings, and recommendations — are owned by the client upon full payment of fees.

OFFCEPT retains ownership of all tools, scripts, methodologies, and frameworks used in the delivery of services. No licence to OFFCEPT's proprietary tooling is granted.

Proof-of-concept exploit code developed specifically for an engagement is delivered to the client and must be handled under the data classification requirements set out in the engagement agreement.

Limitation of Liability

OFFCEPT's liability for any claim arising from the performance of services is limited to the total fees paid by the client for the specific engagement giving rise to the claim.

OFFCEPT is not liable for indirect, consequential, incidental, or punitive damages, including but not limited to loss of revenue, loss of data, or business interruption.

Nothing in these terms limits liability for fraud, gross negligence, or any liability that cannot be limited by applicable law.

Payment

Fees are set out in the engagement agreement. Invoices are due within 30 days of issue unless otherwise agreed.

OFFCEPT reserves the right to suspend services for accounts overdue by more than 30 days.

All fees are exclusive of applicable taxes, which are the client's responsibility.

Termination

Either party may terminate an engagement for material breach upon 14 days written notice, where the breach has not been remedied within that period.

OFFCEPT may terminate immediately if the client breaches authorisation or legal compliance obligations.

Upon termination, the client is liable for fees corresponding to work completed to the date of termination.

Governing Law

These terms are governed by applicable law. Any disputes will be resolved through good-faith negotiation in the first instance, followed by mediation if necessary.

Contact

For questions about these terms, contact us at contact@offcept.com.