Terms ofService

1. Scope of Services

HasafSec provides cybersecurity consulting and advisory services, including:

• Web and API vulnerability assessments
• Application-layer penetration testing
• Secure code review and secure design advisory
• Security policy and compliance readiness support
• Incident response advisory and security guidance
• External exposure management for public web assets

The exact scope, duration, and deliverables of services shall be defined in a written agreement, proposal, or statement of work ("SOW").

2. Authorized Testing Requirement

All security testing and scanning activities are conducted strictly on systems, applications, or environments that the client owns or has explicit authorization to test.

3. Client Responsibilities

• Provide accurate technical and business information
• Ensure availability of authorized systems during testing
• Review and act upon security recommendations at their discretion
• Maintain backup copies of all systems before testing begins
• Notify relevant stakeholders of scheduled testing activities

4. No Warranty or Guarantee

Cybersecurity testing reduces risk but does not eliminate it. HasafSec does not guarantee that all vulnerabilities or security threats will be identified or prevented. Security is an ongoing process, and new vulnerabilities may emerge after testing is completed.

5. Confidentiality

All client information, security findings, and reports are treated as confidential and shall not be disclosed to third parties without written consent, except where required by law or regulatory obligations.

6. Limitation of Liability

To the maximum extent permitted by applicable law, HasafSec shall not be liable for indirect, incidental, special, or consequential damages, including loss of business, profits, or data. Our total liability shall not exceed the fees paid for the specific service giving rise to the claim.

7. Intellectual Property

All methodologies, tools, templates, and reports remain the intellectual property of HasafSec unless otherwise agreed in writing. Clients receive a non-exclusive license to use reports for their internal security improvement purposes.

8. Governing Law

These Terms shall be governed by and construed in accordance with the laws of the Republic of Kenya. Any disputes shall be resolved through arbitration in Nairobi, Kenya, before resorting to litigation.