Terms & Conditions

1. About these Terms

These Terms govern your use of the Event Horizon Security website and any enquiry, estimate, proposal, or preliminary discussion made through it. They do not by themselves create a consulting engagement. Paid work begins only when scope, fees, authorization, and any engagement-specific terms are agreed in writing.

2. Website information and estimates

Website content is general information only and is not legal, regulatory, financial, or compliance advice. Any price, duration, or effort estimate shown on the website is indicative and may change depending on project complexity, access, environment, dependencies, scheduling, risk, and the final agreed scope. An estimate is not an offer or guarantee.

3. Security services and authorization

Security assessments, API testing, technical testing, and related work are performed only within an expressly agreed scope and only where the client has the legal authority to authorize the work. The client is responsible for identifying systems, applications, accounts, networks, data, third-party assets, and environments that are in scope and for obtaining any third-party permissions required before testing begins.

We may refuse, pause, or stop work if authorization is unclear, if the requested activity appears unlawful or unsafe, if scope boundaries are disputed, or if continued testing could create disproportionate operational risk.

4. Client responsibilities

Clients must provide accurate project information, suitable points of contact, agreed access, and timely notice of operational constraints. Clients remain responsible for backups, business continuity, change management, remediation decisions, and the safe operation of their systems. Unless specifically agreed otherwise, production testing may carry operational risk and should be planned accordingly.

5. No security guarantee

Cybersecurity work reduces uncertainty and helps identify risk; it cannot establish that a system is completely secure, vulnerability-free, compliant in all respects, or protected from future compromise. Findings reflect the agreed scope, testing methods, access provided, information available, and conditions observed during the engagement. A finding-free assessment is not a certification or warranty of security.

6. Deliverables and reliance

Unless agreed otherwise in writing, reports, recommendations, and other deliverables are prepared for the commissioning client and the agreed purpose only. Third parties should not rely on them without written permission. Deliverables do not constitute legal advice, regulatory approval, certification, or a promise that every vulnerability or control weakness has been identified.

7. Confidentiality

We treat non-public client information received for an engagement as confidential and use it only as reasonably necessary to evaluate, perform, document, or administer the work, subject to any separate confidentiality agreement. Clients should not send passwords, private keys, production credentials, or highly sensitive data through the public website contact form. Secure exchange methods can be arranged for an engagement.

8. Intellectual property

Each party retains ownership of its pre-existing materials, tools, methods, know-how, templates, and intellectual property. Unless an engagement agreement states otherwise, once all applicable fees are paid the client may use engagement-specific deliverables internally for the agreed business purpose. General techniques, reusable tooling, experience, and know-how remain ours provided we do not disclose the client's confidential information.

9. Fees, scheduling, and cancellation

Final fees, payment terms, delivery windows, rescheduling terms, and cancellation arrangements are set out in the applicable proposal, statement of work, or other written engagement confirmation. Website estimates are subject to change. Because capacity is limited, dates are not reserved until the engagement is confirmed.

10. Limitation of liability

To the maximum extent permitted by applicable law, Event Horizon Security will not be liable for indirect, incidental, special, exemplary, punitive, or consequential losses, or for loss of profits, revenue, goodwill, business opportunity, or data, arising from use of the website or a service engagement. For a paid engagement, and to the maximum extent permitted by law, our aggregate liability arising out of that engagement will not exceed the fees actually paid to us for that specific engagement.

Nothing in these Terms excludes or limits liability that cannot lawfully be excluded or limited, including liability resulting from fraud, wilful misconduct, or any other liability for which exclusion is prohibited by applicable law.

11. Client indemnity for unauthorized instructions

To the maximum extent permitted by law, the client is responsible for claims, losses, or costs arising from materially inaccurate statements about its authority to authorize testing, or from instructions that require access to systems or data the client was not entitled to authorize, except to the extent caused by our own unlawful conduct.

12. Website availability and external services

The website is provided on an “as available” basis. We may change, suspend, or remove website content without notice. We are not responsible for third-party websites, hosting providers, email clients, or other services merely because the website links to or relies on them.

13. Privacy

Personal data submitted through the website is handled in accordance with our Privacy Policy. Please review it before sending an enquiry.

14. Governing law and disputes

These Terms are governed by the laws of the Hashemite Kingdom of Jordan. Subject to any mandatory rule of applicable law and any different dispute provision agreed for a specific engagement, the courts of Amman, Jordan will have jurisdiction over disputes arising from these Terms or use of the website.

15. Changes and contact

We may update these Terms from time to time by publishing a revised version on this website. For questions about these Terms, use the contact section on the main website.