Terms of service

01Acceptance of the terms

These Terms of Service (the "Terms") govern access to and use of the EasyHack platform and its associated services (the "Service"), provided by Infosec Technologies Esp. LLC ("EasyHack", "we"). By creating an account, purchasing a plan or using the Service, the user company (the "Customer") accepts these Terms in full. If you do not agree, do not use the Service.

If you accept on behalf of a company, you represent that you have authority to bind it.

02Description of the Service

EasyHack is an AI-assisted penetration testing platform that discovers, safely exploits and evidences vulnerabilities on the assets the Customer authorizes, and delivers reports with a remediation plan. It is offered as a subscription with credits, as credit packs, and as an on-demand pentest with an expert-signed report.

The Service evolves: we may add, change or remove features. Published features and prices are informational and are not a binding offer until a contract is formed.

03Account and organization

Access requires an account. Each company operates in its own space. The Customer is responsible for the accuracy of the data provided, for safeguarding its credentials and for the activity carried out under its account, and must notify us immediately of any unauthorized use.

04Testing authorization and scope

The Service performs offensive security testing. Accordingly, the Customer represents and warrants that:

• it owns the domains, systems and assets it submits to the Service, or holds express, valid, written authorization from their owner to have them tested;
• it authorizes EasyHack and its platform to run controlled tests —including exploitation of vulnerabilities— on those assets, within the scope the Customer defines;
• it will not submit third-party assets without permission, nor use the Service to access, damage or disrupt unauthorized systems.

05Acceptable use

The Customer agrees not to:

• use the Service against assets it does not own or is not authorized to test;
• use it for unlawful activity, to attack third parties or to exfiltrate other people data;
• resell, sublicense or grant access to the Service to third parties except where the plan expressly allows it;
• circumvent technical, credit or security limits, or interfere with the infrastructure.

Breach may lead to immediate suspension of the Service with no right to a refund.

06Plans, credits and billing

The Service is contracted as a subscription (monthly or annual), through credit packs or as a one-off on-demand pentest, at the prices in force. Each scan consumes credits according to its type. Unless stated otherwise, prices are in euros and exclude applicable taxes, which are added where relevant.

• Subscriptions renew automatically for equal periods unless cancelled before renewal.
• Credits included in a plan are consumed within the period and are non-transferable and non-refundable unless stated otherwise.
• Non-payment entitles EasyHack to suspend or cancel the Service.

07"Validated vulnerability" guarantee

For on-demand pentests we offer the "no charge if there is no validated, exploitable vulnerability" guarantee: if, after the work, no exploitable vulnerability is identified and reproduced within the agreed scope, the pentest fee is not charged. The guarantee applies to the on-demand pentest service over the agreed scope and does not cover credits already consumed or subscription services.

08Results and intellectual property

The platform, its software, its brand (EasyHack™) and its content are owned by Infosec Technologies Esp. LLC and protected by applicable law. The Customer is granted a non-exclusive, non-transferable right of use for the duration of the relationship.

The reports and findings generated on the Customer assets belong to the Customer, who may use them internally. EasyHack may process technical and aggregated data in anonymized form to improve the Service.

09Confidentiality and data protection

Findings, evidence and scan credentials are confidential information and are stored encrypted. The processing of personal data is governed by our privacy policy. Each party will protect the other confidential information with the same care as its own.

10Availability and support

We work to keep the Service available, but we do not guarantee uninterrupted or error-free operation. We may carry out maintenance and updates. The support level depends on the plan contracted.

11Limitation of liability

The Service is provided "as is". To the extent permitted by law, EasyHack is not liable for indirect damages, loss of profit or loss of data. EasyHack total liability for any claim related to the Service is limited to the amount actually paid by the Customer in the twelve months before the event giving rise to the claim.

Nothing in these Terms excludes liabilities that cannot be limited by law.

12Suspension and termination

The Customer may stop using the Service and cancel its subscription at any time, effective at the end of the current period. EasyHack may suspend or terminate the Service in the event of non-payment, misuse, security risk or breach of these Terms. On termination, access ceases; we will retain or delete data in line with the privacy policy and applicable law.

13Changes to the Service and the Terms

We may update these Terms. We will publish the version in force with its date and, if the change is material, we will notify it by reasonable means. Continued use of the Service after it takes effect means you accept the new version.

14Governing law and jurisdiction

These Terms are governed by the applicable law of the European Union and, for data protection, by Regulation (EU) 2016/679 (GDPR). For any dispute, the competent courts are those designated by the mandatory applicable rules, including those of the Customer's domicile where acting as a consumer.

15Contact

For anything about these Terms or the Service, write to [email protected].