Legal

Terms of Service

Last updated: December 21, 2024

Read Before You Proceed

These terms govern your use of RootRecon's services. All testing is conducted only with explicit written authorization. By engaging our services, you confirm you have legal authority over all systems in scope.

1. Acceptance of Terms

By accessing or using RootRecon's website and services, you agree to be bound by these Terms of Service. If you do not agree to these terms, please do not use our services.

2. Services

RootRecon provides offensive security and penetration testing services, including but not limited to:

  • Web Application Penetration Testing
  • Network Security Assessments
  • Mobile Application Security Testing
  • Cloud Infrastructure Security Reviews
  • Security Consultation and Advisory

3. Authorized Testing Only

All penetration testing and security assessments conducted by RootRecon are performed exclusively on systems and applications for which the client has provided explicit written authorization. Any engagement requires a signed Statement of Work (SOW) and Rules of Engagement (ROE) before testing begins. RootRecon does not perform unauthorized testing under any circumstances.

4. Client Responsibilities

As a client, you agree to:

  • Provide accurate and complete information about the systems to be tested.
  • Ensure you have legal authority over all systems included in the scope of work.
  • Obtain any necessary approvals from third-party providers (e.g., cloud hosting providers) before testing.
  • Notify relevant internal teams to prevent false alarms during testing.
  • Keep all findings and reports confidential unless otherwise agreed in writing.

5. Confidentiality

RootRecon treats all client information, findings, and reports as strictly confidential. We will not disclose any information related to your engagement to third parties without your explicit written consent, except as required by law.

6. Payment Terms

Payment terms are outlined in the individual Statement of Work for each engagement. Unless otherwise agreed:

  • A deposit may be required before work commences.
  • Final payment is due upon delivery of the report.
  • Late payments may incur additional fees as specified in the SOW.

7. Limitation of Liability

RootRecon's liability is limited to the total fees paid for the specific engagement in question. We are not liable for any indirect, incidental, or consequential damages arising from the use of our services or findings contained in our reports. Security testing inherently carries risk, and while we take every precaution, the client accepts responsibility for any unintended disruptions to systems within the agreed scope.

8. Intellectual Property

All methodologies, tools, and processes used by RootRecon remain the intellectual property of RootRecon. Final reports delivered to the client are licensed for the client's internal use only and may not be redistributed or resold without written consent.

9. Disclaimers

Our services are provided on an "as-is" basis. A penetration test represents a point-in-time assessment and does not guarantee that a system is free from all vulnerabilities. New vulnerabilities may emerge after the engagement concludes, and RootRecon is not responsible for issues discovered after the agreed testing period.

10. Governing Law

These Terms of Service shall be governed by and construed in accordance with applicable laws. Any disputes arising from these terms or our services shall be resolved through good-faith negotiation, and if necessary, binding arbitration.

11. Changes to Terms

RootRecon reserves the right to update these Terms of Service at any time. Changes will be posted on this page with an updated date. Continued use of our services after changes constitutes acceptance of the revised terms.

12. Contact Us

If you have any questions about these Terms of Service, please contact us at support@rootrecon.com