Terms of service

HackMoat performs the penetration test described in the package you order, within the scope and testing window recorded in the testing authorization. We deliver our work with professional care. A penetration test is a sample in time; it cannot guarantee that no other vulnerabilities exist.

Prices are fixed per package, in euros and excluding VAT. Payment is made in advance through Stripe. The agreement is concluded when payment is confirmed.

Testing only starts after you sign the testing authorization. You confirm that you own the systems in scope or have the right to have them tested, including systems hosted by third parties. You are responsible for informing those third parties where required.

You provide a contact person who can be reached during the testing window, accurate details of the systems in scope and, where the package requires it, a working network connection for the remote appliance. Delays caused by missing information may move the testing window.

You can reschedule the testing window free of charge up to five business days before it starts. If you cancel before testing begins, we refund the price minus costs already made. Once testing has started, the price is not refundable.

Both parties keep confidential all information received in the engagement. Reports are made available only in your private client portal. We do not disclose findings to third parties without your written consent, unless the law requires it.

We take care to avoid disruption, but testing carries some risk. Our total liability is limited to the price paid for the engagement, except in case of intent or gross negligence. We are not liable for indirect or consequential loss.

Where we process personal data on your behalf during testing, we do so as a processor under the data processing terms that form part of this agreement. Our privacy statement explains how we handle data as a controller.

These terms are governed by Dutch law. Disputes are submitted to the competent court in the Netherlands.