Terms of Service

By accessing or using our website and services, you acknowledge that you have read, understood, and agree to be bound by these Terms. If you do not agree, please do not use them.

Zeroday provides cybersecurity services for businesses, which currently include:

• Security exposure and dark-web monitoring
• Vulnerability scanning
• Penetration testing, including one-time, fixed-scope engagements
• Security awareness training

Specific engagements are provided under separate written agreements — for example, our Rules of Engagement for penetration tests and our Scan Authorization Terms — which govern that work and control over these general Terms to the extent they conflict. Training may be delivered through Zeroday Academy under its own terms.

We perform vulnerability scanning, penetration testing, and other active security testing only against systems you own or are legally authorized to test, and only under a written authorization you provide (such as our Scan Authorization Terms or Rules of Engagement). You represent that you hold that authority. We will not test any system without it.

When using our website and services, you agree to:

• Provide accurate and complete information
• Use our website and services only for lawful purposes
• Not interfere with, disrupt, or attempt to gain unauthorized access to our website or systems
• Keep confidential any access credentials we issue you, such as to a client portal
• Comply with all applicable laws and regulations

All content, materials, and intellectual property on our website and in our services are owned by Zeroday Technology, LLC. You may not copy, modify, distribute, or use them without our prior written consent. Reports and deliverables we provide are licensed to you for your internal use as set out in the applicable service agreement.

We treat client information as confidential and will not disclose it to third parties without your consent, except as required by law or as necessary to provide our services through the providers named in our Privacy Policy.

Our website and services are provided on an “as is” and “as available” basis. Security services reduce risk but cannot guarantee that any system is or will remain free of vulnerabilities or immune to attack, and no assessment, scan, or test is a certification of security. To the maximum extent permitted by law, we disclaim all implied warranties, including merchantability and fitness for a particular purpose.

To the fullest extent permitted by law, Zeroday Technology, LLC shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of our website or services. Any liability cap in an applicable service agreement also applies.

You agree to indemnify and hold harmless Zeroday Technology, LLC from any claims, damages, or expenses arising from your use of our services, your breach of these Terms, or your authorization of testing you were not entitled to authorize.

We may modify these Terms at any time. Changes take effect when posted, and we will update the “Last Updated” date. Your continued use after a change constitutes acceptance of the modified Terms.

These general Terms are governed by the laws of the State of Delaware, United States. Specific service agreements — such as our Rules of Engagement and Scan Authorization Terms — may specify a different governing law and dispute-resolution forum, including the courts of the Dubai International Financial Centre (DIFC) or DIAC arbitration, which control for those engagements.

If any provision of these Terms is held unenforceable, the remaining provisions stay in effect. Our failure to enforce a right is not a waiver of it. You may not assign these Terms without our consent; we may assign them to an affiliate or successor. These Terms, together with any applicable service agreement and our Privacy Policy, are the entire agreement between you and us on their subject matter.

For questions about these Terms, contact us at legal@zeroday.group.