Last updated: [DATE]
These Terms of Service ("Terms") govern your access to and use of the Bastionize service (the "Service") provided by [Company Legal Name] ("Bastionize", "we", "us"). By creating an account or using the Service, you agree to these Terms and to our Acceptable Use Policy and Privacy Policy.
Bastionize provides non-intrusive web application security assessment and reporting. We may update, improve, or modify features over time. Availability targets, if any, are set out in an applicable order or SLA.
You may only use the Service against systems you own or are expressly authorized to test. You represent and warrant that, for every target you submit, you have all necessary rights and authorizations. You must complete our attestation and, for active-tier testing, ownership verification. You are solely responsible for the legality of your testing. See the Acceptable Use Policy.
You are responsible for your account, credentials, and the acts of users under your account. Provide accurate information and keep it current.
Paid plans are billed as described at purchase. Fees are non-refundable except as required by law or expressly stated. We may change pricing prospectively with notice.
You retain ownership of the data and targets you submit ("Customer Data"). You grant us a limited license to process Customer Data to provide the Service. We retain all rights in the Service, software, and documentation. Reports we generate for you are yours to use within your organisation and with your clients.
Your use must comply with the Acceptable Use Policy. We may suspend or terminate access for violations, suspected abuse, or unauthorized testing.
The Service may interact with third-party systems (e.g. Certificate Transparency logs, DNS). Your use of the Service in connection with third parties is at your own risk and subject to their terms.
THE SERVICE IS PROVIDED "AS IS" WITHOUT WARRANTIES OF ANY KIND. A security assessment is a point-in-time, best-effort analysis and does not guarantee that all vulnerabilities are identified or that your systems are secure. You remain responsible for your own security.
TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY IS LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, OR CONSEQUENTIAL DAMAGES, AND OUR TOTAL LIABILITY IS LIMITED TO THE FEES YOU PAID IN THE [12] MONTHS BEFORE THE CLAIM. [Adjust to your risk posture and law.]
You will indemnify us against claims arising from your use of the Service in breach of these Terms or the Acceptable Use Policy, including testing conducted without authorization.
You may stop using the Service at any time. We may suspend or terminate for breach. On termination, your right to use the Service ends; we will make Customer Data available for export for [30] days, then delete it per our Privacy Policy.
These Terms are governed by the laws of [JURISDICTION], and disputes are subject to the courts / arbitration of [VENUE].
We may update these Terms; material changes will be notified through the Service or by email. Questions: hello@bastionize.com.