Terms of Service

1. Introduction

Welcome to Haxact.com and the Haxact platform (collectively, "our Services"). These Terms of Service ("Terms") govern your use of our Services operated by Haxact ("we," "us," or "our").

By accessing or using our Services, you agree to be bound by these Terms. If you disagree with any part of the Terms, you do not have permission to access or use our Services.

2. Definitions

For the purpose of these Terms:

• "Account" means the unique credentials and associated profile created by you to access our Services.
• "Content" means any information, data, text, software, graphics, or other materials uploaded, downloaded, or appearing on our Services.
• "User", "You", and "Your" refer to the person or entity accessing or using our Services.
• "Services" refers to the Haxact.com website and the Haxact platform, including all content, features, and functionality offered through these platforms.
• "Target" means any asset, system, application, network, host, or other resource that you submit, designate, or otherwise make available to us for the purpose of security testing.
• "Findings" means any vulnerabilities, weaknesses, misconfigurations, or other security issues discovered by our Services in connection with a Target.

3. Account Registration and Security

3.1 Account Creation

To use certain features of our Services, you may be required to create an account. You must provide accurate, current, and complete information during the registration process and keep your account information updated.

3.2 Account Security

You are responsible for safeguarding your account credentials and for all activities that occur under your account. You agree to notify us immediately of any unauthorized use of your account or any other breach of security.

3.3 Age and Capacity Requirement

Our Services are not intended for users under the age of 18. By creating an account, you represent and warrant that you are 18 years of age or older and have the legal authority to enter into these Terms on behalf of yourself or the entity you represent.

4. Authorization to Test — Target Ownership

4.1 Your Representations

Haxact performs active security testing against the Targets you submit. Such testing can include vulnerability discovery, exploitation, and validation activity that may, in some jurisdictions, constitute unauthorized access to computer systems if performed without consent. By submitting a Target to our Services, you represent and warrant that:

• You either own the Target, or you have obtained explicit written authorization from the owner(s) of the Target and from any other parties whose authorization is required, sufficient to permit Haxact to perform the testing activities described in these Terms;
• You have the authority to bind any organization on whose behalf you submit Targets;
• You will keep the in-scope definition for each Target accurate and up to date, and you will promptly remove Targets you no longer have authorization to test;
• You understand that any testing performed by Haxact pursuant to a Target you submit is performed at your direction and on your authority.

4.2 Indemnification for Unauthorized Targets

You agree to defend, indemnify, and hold Haxact harmless from and against any claims, liabilities, damages, judgments, awards, losses, costs, expenses, or fees (including reasonable attorneys' fees) arising out of or relating to any Target you submitted to our Services that you did not have authorization to submit.

4.3 Reasonable-Care Testing

Haxact's agents are designed to test for security weaknesses using reasonable care and commercially reasonable safeguards. Nevertheless, security testing inherently carries the risk of unintended consequences, including but not limited to service degradation, temporary unavailability, or incidental data exposure. You acknowledge and accept this risk in submitting Targets. Where appropriate, you should test on staging environments or coordinate with us on rate-limiting and scope.

4.4 Third-Party Components

If your Target relies on third-party infrastructure, services, or components (e.g., hosting providers, CDN providers, SaaS dependencies), you are responsible for ensuring that any testing of such components complies with the terms of those third parties. Haxact is not responsible for any consequence of testing third-party components for which you did not obtain appropriate authorization.

5. Subscription and Payment Terms

5.1 Subscription Plans

We offer various subscription plans and one-off audit engagements. The features, limits, and pricing of each are described on our website.

5.2 Payment Processing

All payments are processed through Stripe, a third-party payment processor. By providing payment information, you agree to the terms and privacy policy of Stripe.

5.3 Billing Cycle

Subscription fees are billed in advance on a recurring basis (monthly or annually, depending on your chosen plan). Your subscription will automatically renew at the end of each billing period unless you cancel it before the renewal date.

5.4 Refunds

Refunds may be provided at our sole discretion following an inquiry into the customer's account. Refunds are typically only considered in exceptional circumstances where we determine that the Services were grossly insufficient for their intended purpose. Refunds are generally not provided for change of mind, or where audits have already been initiated or completed against your Targets.

5.5 Price Changes

We reserve the right to change our subscription fees at any time. If we change the fees for your subscription, we will provide notice of the change on our website or via email at least 14 days before the change takes effect. The change will not take effect prior to the end of your current (at the time of the change) billing cycle.

6. User Responsibilities and Conduct

6.1 Acceptable Use

You agree to use our Services only for lawful purposes and in accordance with these Terms. You agree not to:

• Use our Services in any way that violates any applicable federal, state, local, or international law or regulation
• Submit as a Target any system, application, or network that you do not own or for which you do not have explicit written authorization to test
• Use our Services to conduct denial-of-service attacks, deliberately destructive testing, or any activity intended primarily to damage the availability or integrity of a system
• Use our Services to transmit or upload any material that contains viruses, Trojan horses, worms, or any other malicious code outside of legitimate authorized testing
• Attempt to gain unauthorized access to, interfere with, damage, or disrupt any parts of our Services or any server, computer, or database connected to our Services that you do not have permission to access
• Reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code or underlying logic of our agents, except to the extent expressly permitted by applicable law
• Use our Services to harass, abuse, or harm another person or entity, or to impersonate any person or entity
• Attempt to prompt-inject, manipulate, or otherwise subvert the AI agents or the platform's automated systems

6.2 Content Restrictions

You agree not to use our Services to upload, transmit, or distribute any content that:

• Infringes on any patent, trademark, trade secret, copyright, or other intellectual property rights
• Is illegal, harmful, threatening, abusive, harassing, tortious, defamatory, vulgar, obscene, libelous, or otherwise objectionable
• Contains sexually explicit or pornographic material
• Promotes unlawful violence or discrimination based on race, sex, religion, nationality, disability, sexual orientation, or age
• Is intended to deceive or mislead other users

6.3 Content Responsibility

You are solely responsible for all content, Targets, and scope information that you add, submit, post, or otherwise make available through our Services. We do not pre-screen content, but we have the right (though not the obligation) in our sole discretion to refuse, delete, or move any content, or to reject or terminate any Target, for any reason that violates these Terms.

6.4 Monitoring and Enforcement

We have the right to:

• Remove or refuse any content, or terminate any audit, that violates these Terms or is otherwise objectionable
• Terminate or suspend your access to all or part of our Services for any violation of these Terms
• Take appropriate legal action for any illegal or unauthorized use of our Services

7. Intellectual Property Rights

7.1 Our Intellectual Property

The Service and its original content, features, and functionality — including our agents, detection logic, reporting templates, and methodology — are and will remain the exclusive property of Haxact and its licensors. Our Services are protected by copyright, trademark, and other intellectual property laws.

7.2 Your Content and Findings

You retain ownership of any content you submit to our Services. Findings produced against your Targets are made available to you for your use in remediating those Targets. You represent and warrant that: (i) you own the content you submit or otherwise can represent the owner of the content, and (ii) the submission of your content does not violate the privacy rights, publicity rights, copyrights, contract rights, intellectual property rights, or any other rights of any person or entity.

7.3 Aggregated and Anonymized Data

You grant Haxact a non-exclusive, royalty-free license to use aggregated, anonymized data derived from your use of our Services (including aggregated finding patterns and performance metrics) to operate, improve, and evaluate our Services, provided that such data cannot reasonably be used to identify you, your organization, or your Targets.

7.4 Customer References

We reserve the right to list companies who use our Services as customers and to display their logos on our website, marketing materials, and other promotional channels. If you do not wish to be listed as a customer, please contact us at terms@haxact.com.

8. Third-Party Links and Services

Our Services may contain links to, or rely on, third-party websites or services that are not owned or controlled by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites or services. You acknowledge and agree that we shall not be responsible or liable for any damage or loss caused by or in connection with the use of any such third-party websites or services.

9. Limitation of Liability

9.1 Disclaimer of Warranties

Our Services are provided on an "as is" and "as available" basis, without any warranties of any kind, either express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, or non-infringement. We do not warrant that our Services will identify every vulnerability present in a Target, nor that any specific finding will be free of false positives. Security testing is inherently incomplete; no audit, whether automated or manual, can guarantee the absence of vulnerabilities.

9.2 Limitation of Liability

In no event shall we be liable for any direct, indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, data, use, goodwill, or other intangible losses, resulting from your access to or use of, or inability to access or use, our Services.

If, notwithstanding the other provisions of these Terms, we are found to be liable to you for any damage or loss which arises out of or is in any way connected with your use of our Services, our liability shall in no event exceed the lesser of (1) the total amount you have paid to us during the twelve (12) months prior to the event giving rise to the liability, or (2) one hundred Euros (€100.00). The existence of more than one claim will not enlarge this limit.

10. Indemnification

You agree to defend, indemnify, and hold us harmless from and against any claims, liabilities, damages, judgments, awards, losses, costs, expenses, or fees (including reasonable attorneys' fees) arising out of or relating to your violation of these Terms, your use of our Services, or any Target you submitted to our Services for which you did not have authorization.

11. Termination

11.1 Termination by You

You may terminate your account and discontinue use of our Services at any time by following the instructions in your account settings or by contacting us at terms@haxact.com. Please note that if you elect to terminate your account by contacting us via email, we may ask for additional proof to verify that you are the owner of the account.

11.2 Termination by Us

We reserve the right to terminate or suspend your account and access to our Services immediately, without prior notice or liability, if you breach these Terms — including but not limited to any breach of the authorization-to-test obligations in Section 4. Misuse of the platform — including any attempt to prompt-inject, manipulate, or otherwise subvert the AI agents or our automated systems — is grounds for immediate suspension or termination.

11.3 Effect of Termination

Upon termination, your right to use our Services will immediately cease. All provisions of the Terms which by their nature should survive termination shall survive, including, without limitation, ownership provisions, warranty disclaimers, indemnity, and limitations of liability.

12. Changes to Terms

We may modify these Terms from time to time to reflect changes in market conditions affecting our business, changes in our business, changes in payment methods, changes in technology, changes in relevant laws and regulatory requirements, and changes in our system. If we do so we will notify you by email to the email address you have provided us with, however we are not obliged to, and such modification shall be effective upon our posting of the revised Terms on the website. You agree to be bound by any changes to these Terms when you use our website and Services after any such modification is posted on the website. It is therefore important that you review these Terms regularly to ensure you are updated as to any changes.

13. Governing Law and Jurisdiction

These Terms shall be governed and construed in accordance with the laws of Cyprus, without regard to its conflict of law provisions. Any legal action or proceeding arising out of or relating to these Terms shall be brought exclusively in the courts of Cyprus, and you consent to the exclusive jurisdiction of such courts.

14. Severability

If any provision of these Terms is held to be unenforceable or invalid, such provision will be changed and interpreted to accomplish the objectives of such provision to the greatest extent possible under applicable law, and the remaining provisions will continue in full force and effect.

15. Entire Agreement

These Terms, together with our Privacy Policy, constitute the entire agreement between you and us regarding your use of our Services and supersede all prior and contemporaneous written or oral agreements between you and us.

16. Waiver

Our failure to enforce any right or provision of these Terms will not be considered a waiver of those rights. The waiver of any such right or provision will be effective only if in writing and signed by an authorized representative of our company.

17. Contact Us

If you have any questions about these Terms, please contact us at terms@haxact.com.