Terms of Service

Last updated: June 2025

1. Engagement Scope

All penetration testing and security assessment engagements are conducted under a signed Statement of Work (SoW) and Rules of Engagement (RoE). Testing is limited strictly to the systems, applications, and networks defined in the SoW.

2. Authorization

By engaging Aritaro, you confirm that you have legal authority to authorize security testing of the specified systems. Aritaro will not test any systems without explicit written authorization.

3. Confidentiality

All engagement data, findings, and reports are treated as strictly confidential. Aritaro signs NDAs as standard practice. Reports are encrypted and transmitted via secure channels.

4. Liability

While Aritaro uses non-destructive testing techniques, security testing inherently carries risk. Aritaro liability is limited to the total engagement fee. We recommend testing in staging environments where possible.

5. Deliverables

Standard deliverables include an Executive Summary, Full Technical Report with CVSS scoring, Remediation Tracker, and Developer Fix Guide. One free re-test for critical and high severity findings is included.

6. Payment Terms

50% advance payment is required before engagement starts. Remaining 50% is due upon delivery of the final report. Payment terms are net-15 days.

7. Intellectual Property

All proprietary testing tools, methodologies, and frameworks remain the intellectual property of Aritaro. The client owns all deliverables and reports produced for their engagement.

8. Governing Law

These terms are governed by the laws of India. Any disputes shall be resolved through arbitration in accordance with the Arbitration and Conciliation Act, 1996.