Terms of service
Last updated: 2026-07-01
1. Acceptance
By accessing the SecureBlock platform or engaging SecureBlock for penetration testing services, you agree to be bound by these Terms. If you are agreeing on behalf of an organisation, you represent that you have authority to bind that organisation.
2. Services
SecureBlock provides penetration testing services and access to the SecureBlock platform. The specific scope, deliverables, and testing window for each engagement are set out in an engagement letter countersigned by both parties.
3. Authorisation to test
By signing an engagement letter, you represent and warrant that you have the legal authority to authorise penetration testing of every asset in scope. You will not include assets in scope which you do not own or have express written authorisation to test.
4. Fees and payment
Fees are set out in the engagement letter and payable in accordance with its terms. A 25% deposit is typically required to confirm scheduling. Invoices are payable within 30 days unless otherwise agreed. Late payment carries statutory interest under Croatian law.
5. Deliverables and licences
On payment of all fees due, SecureBlock grants you a non-exclusive, perpetual, worldwide licence to use the deliverables produced under an engagement (reports, evidence packs) for your internal business and compliance purposes. You may share deliverables with auditors, regulators, and prospects under NDA.
6. Confidentiality
Both parties will treat information exchanged in the course of an engagement as confidential and will not disclose it except: (a) as required for the performance of the engagement; (b) as required by law; or (c) with the disclosing party's prior written consent. Testing findings are confidential to the client unless the client permits disclosure.
7. Data protection
Where SecureBlock processes personal data as a processor on your behalf, we will do so in accordance with the Data Processing Agreement available in your platform workspace, and in compliance with applicable data protection law.
8. Warranties
SecureBlock warrants that its services will be performed in a workmanlike manner in accordance with industry-standard methodology (OWASP WSTG, PTES, NIST SP 800-115). No pentest can guarantee identification of every vulnerability; SecureBlock does not warrant that its services will detect all vulnerabilities in scope.
9. Limitation of liability
Except for breach of confidentiality, indemnification obligations, or a party's gross negligence or wilful misconduct, each party's aggregate liability arising out of or related to these Terms and any engagement will not exceed the fees paid or payable by the client for the engagement giving rise to the claim.
10. Indemnities
Each party will indemnify the other against third-party claims arising from breach of its obligations under these Terms, subject to standard notice, cooperation, and control-of-defence procedures.
11. Termination
Either party may terminate an engagement for material breach not cured within 30 days of written notice. On termination for cause by the client, SecureBlock will refund fees paid for work not performed. On termination for cause by SecureBlock, the client will pay for all work performed to the date of termination.
12. Governing law
These Terms are governed by the laws of Croatia. The parties submit to the exclusive jurisdiction of the courts of Bjelovar, Croatia, in respect of any dispute arising out of these Terms.
13. Changes
SecureBlock may amend these Terms from time to time. Material changes will be announced by email or in-platform notice at least 30 days before they take effect. Continued use of the platform after the effective date constitutes acceptance.