Terms of Service

All penetration testing and security assessment engagements are conducted strictly under a signed Statement of Work (SoW) and Rules of Engagement (RoE). Testing is limited to the systems, applications, and networks explicitly defined in the project scope.

By engaging Aritaro, the client warrants that they own or have the explicit legal authorization to permit security testing on the target infrastructure. We never engage in testing without verified written consent.

All vulnerabilities, network architectures, customer details, and final audit deliverables are treated as strictly confidential. Mutual NDAs are executed prior to scoping.

Aritaro employs industry-standard non-destructive testing methodologies. In no event shall Aritaro's aggregate liability exceed the total fee paid for the specific engagement.

Standard deliverables include a board-ready Executive Summary, CVSS 3.1 Technical Findings Report, and developer remediation checklists. A complimentary retest for critical and high findings is included.

Standard terms require a 50% milestone advance upon initiation and 50% upon delivery of the formal report, payable within Net-15 days unless customized in the SoW.

Proprietary testing scripts, methodologies, and internal research tools remain the property of Aritaro. The client retains full ownership of the custom vulnerability report and audit deliverables.

These terms are governed by the laws of India. Any disputes arising out of engagements shall be subject to arbitration under the Arbitration and Conciliation Act, 1996 in New Delhi, India.