Terms

These Terms and Conditions ("Terms") govern your use of the StrikeCyber website at strikecyber.au, our client portal and platform, and, where applicable, the provision of services by StrikeCyber Pty Ltd (ACN 677 052 041) ("StrikeCyber", "we", "us", "our"). By accessing this website or using our services, you agree to these Terms. If you do not agree, please do not use the site or services.

Where you engage us to perform services, those services are also governed by a separate written agreement, statement of work and rules of engagement. To the extent of any inconsistency relating to the services, that engagement documentation takes precedence over these Terms.

Use of the website and platform

You may use our website and platform for lawful purposes only. You must not use them in any way that:

• is unlawful, fraudulent, misleading or harmful;
• infringes the rights of any other person;
• impairs, disrupts or attempts to gain unauthorised access to any account, environment, system or data; or
• introduces malicious code or otherwise compromises the availability, integrity or security of the site or platform.

Access to the client portal is provided to authorised users only, and is subject to our Acceptable Use Policy.

Authorisation for security testing

StrikeCyber conducts penetration testing, red teaming, adversary simulation, vulnerability assessment, incident response exercises and related offensive security activities only against systems for which the client has provided prior written authorisation and has confirmed that it owns, or is otherwise entitled to authorise testing of, those systems.

Every engagement is governed by a written agreement, statement of work and rules of engagement that define the scope, targets, timing, permitted techniques and points of contact. You are responsible for ensuring that the authorisation you provide is valid and that all necessary third-party consents (for example, from cloud providers or landlords of shared systems) are in place.

Our platform and AI-assisted delivery

Our services are delivered using an AI-augmented offensive security platform. Automated and AI-assisted tooling supports reconnaissance, analysis and reporting, and all findings are reviewed and validated by our operators before delivery.

While we apply rigorous methodology, security testing is point-in-time and cannot guarantee the discovery of every vulnerability or the absence of risk. Reports describe the state of the tested environment at the time of testing and should be read together with the applicable engagement documentation. They are not a warranty that systems are secure.

Client responsibilities

If you engage us, you agree to provide accurate information, obtain and maintain the necessary authorisations, keep your portal credentials secure, and act reasonably on the findings we deliver. You remain responsible for your own systems, backups and business continuity during testing.

Intellectual property

Unless otherwise stated, StrikeCyber owns, or is licensed to use, the intellectual property rights in the website, platform and their content, and in our methodologies, tooling and know-how. Reports and deliverables provided as part of an engagement are licensed to the client on the terms set out in the applicable engagement agreement. You must not reproduce, resell, redistribute or create derivative works from our content, tooling or deliverables except as expressly permitted.

Third-party content

The website may include links to, or content from, third parties. We do not control and are not responsible for third-party sites or content, and a link does not imply endorsement.

No warranties

To the maximum extent permitted by law, the website and platform are provided on an "as is" and "as available" basis without warranties of any kind, express or implied. Nothing on this website constitutes professional, legal or security advice, and it should not be relied on as a substitute for a scoped engagement.

Limitation of liability

To the maximum extent permitted by law, StrikeCyber is not liable for any indirect, incidental, special or consequential loss, or for any loss of profits, revenue, data or goodwill, arising from your use of the website, platform or services.

Nothing in these Terms excludes, restricts or modifies any consumer guarantee, right or remedy that cannot be excluded under the Australian Consumer Law or other applicable law. Where our liability can be limited, it is limited, at our option, to re-supplying the relevant services or paying the cost of having them re-supplied.

Indemnity

You agree to indemnify StrikeCyber against any loss or liability arising from your breach of these Terms, your misuse of the website, platform or deliverables, or your failure to hold valid authorisation for any testing you request.

Confidentiality and privacy

Both parties may receive confidential information in connection with an engagement, and must protect it in accordance with the applicable engagement agreement. Your use of the website and platform is also governed by our Privacy Policy, which explains how we collect, use, secure and protect personal information.

Suspension and termination

We may suspend or terminate access to the website or platform where we reasonably believe these Terms or the Acceptable Use Policy have been breached, or where continued access poses a security or legal risk.

Changes to these Terms

We may update these Terms from time to time. The current version is always available on this page, and the "last updated" date above shows when they last changed. Continued use of the site or services after a change means you accept the updated Terms.

Governing law

These Terms are governed by the laws of Queensland, Australia. You submit to the non-exclusive jurisdiction of the courts of Queensland and the Commonwealth of Australia.

Contact

Questions about these Terms can be directed to info@strikecyber.au or 1300 654 898.