Legal & Policies

Terms of Service

Last updated: January 2025

These Terms of Service ("Terms") govern your access to and use of the Grey Shield website at greyshield.in (the "Site"), and, where a signed engagement is in place, our professional cybersecurity services (the "Services"). By browsing the Site or engaging us for Services, you agree to be bound by these Terms. If you do not agree, please do not use the Site or engage our Services.

---

1. Definitions

"Client"

The individual or organisation that has signed a Master Services Agreement and/or Statement of Work with Grey Shield.

"Engagement"

A discrete piece of work — such as a penetration test, assessment, or advisory project — performed under an agreed scope.

"Deliverable"

Any report, finding, retest confirmation, or other output produced for a Client under an Engagement.

"You" / "User"

Anyone accessing or browsing the Site, whether or not they are a Client.

---

2. Our Services

Grey Shield provides offensive security services including penetration testing, vulnerability assessments, red team operations, and security advisory work. Every Engagement is governed by a separate Statement of Work ("SOW") and Master Services Agreement ("MSA"), both signed before any testing begins. Where these Terms and a signed SOW/MSA conflict on a matter specific to an Engagement, the SOW/MSA controls.

---

3. Authorisation & Scope

All security testing we perform is carried out exclusively under written, signed authorisation from the system owner. Before any Engagement begins, you warrant that:

• You own the systems in scope, or hold explicit written permission from the owner to have them tested;
• The scope you provide us is accurate, current, and complete;
• Grey Shield will not test anything outside the agreed scope without your prior written consent.

---

4. Acceptable Use of This Website

When using the Site, you agree not to:

• Probe, scan, or test our infrastructure without prior written authorisation — see our Responsible Disclosure Policy for the correct process;
• Scrape or systematically harvest content from the Site;
• Introduce malware, or attempt to gain unauthorised access to any part of the Site or our systems;
• Misrepresent your identity or affiliation when contacting us;
• Use the Site for any unlawful purpose or in violation of any applicable regulation.

---

5. Intellectual Property

All Site content, our methodology documents, tooling, and report templates remain the intellectual property of Grey Shield. Deliverables produced for a Client under a signed Engagement are licensed to that Client for internal use once the applicable invoice has been paid in full. Redistribution, resale, or publication of Deliverables requires our prior written consent.

---

6. Confidentiality

We treat all Client information, engagement details, and findings as strictly confidential. We will not disclose the existence of an Engagement, its findings, or a Client's identity without written consent — except where disclosure is required by law, regulation, or a valid court order, in which case we will, where legally permitted, give the Client reasonable notice first.

---

7. Disclaimer of Warranties

Security testing is inherently limited by the scope, time, and access agreed for a given Engagement. We do not warrant that an assessment will identify every vulnerability present, or that a system will remain secure after testing concludes — new vulnerabilities, misconfigurations, and threats can emerge at any time. Our conclusions reflect the information and access available to us at the time of testing. Except as expressly stated in a signed SOW/MSA, the Site and our Services are provided "as is" without warranties of any kind, whether express or implied.

---

8. Limitation of Liability

To the fullest extent permitted by law, Grey Shield's total liability arising out of or relating to an Engagement shall not exceed the fees actually paid by the Client for that specific Engagement. Neither party will be liable to the other for indirect, incidental, special, or consequential damages, including loss of profits or data, even if advised of the possibility of such damages. Nothing in these Terms limits liability that cannot lawfully be limited, such as liability for fraud or wilful misconduct.

---

9. Indemnification

You agree to indemnify and hold Grey Shield harmless from any claim, loss, or damage — including reasonable legal fees — arising from your breach of Section 3 (Authorisation & Scope), including any claim that you lacked the necessary authority to have a system tested.

---

10. Termination

Either party may terminate an Engagement in accordance with the notice and termination provisions set out in the applicable SOW/MSA. Grey Shield may suspend or restrict access to the Site for any user who violates Section 4 (Acceptable Use of This Website). Sections that by their nature should survive termination — including Confidentiality, Intellectual Property, Limitation of Liability, and Governing Law — will continue to apply after an Engagement or these Terms end.

---

11. Changes to These Terms

We may update these Terms from time to time to reflect changes in our services, legal requirements, or business practices. Material changes will be reflected in the "Last updated" date above; where a change is significant, we will make reasonable efforts to flag it on this page. Continued use of the Site after an update constitutes acceptance of the revised Terms.

---

12. Governing Law & Disputes

These Terms are governed by the laws of India. Subject to any dispute-resolution process specified in a signed SOW/MSA, disputes arising out of or relating to these Terms or the Site are subject to the exclusive jurisdiction of the courts of Haryana, India.

---

13. General

If any provision of these Terms is found unenforceable, the remaining provisions continue in full force. These Terms, together with any signed SOW/MSA, constitute the entire agreement between you and Grey Shield regarding the Site and Services, and supersede any prior understanding on the same subject. Our failure to enforce a provision is not a waiver of our right to do so later.

---

14. Contact