The rules we work under.
These terms cover the website itself and our security engagements. The actual statement of work for any engagement is signed separately and overrides anything here.
Who we are
"We" means WEHACKITBEFORETHEYDO LTD, a Delaware corporation. "You" means the person or company we're working with. "The service" means the offensive-security engagements we sell — Scan and Runtime — plus this website.
The website
You can read this site, link to it, and screenshot it. You can quote it with attribution. Don't try to break it, mass-scrape it, or pretend to be us. The brand and copy are ours.
Engagements
- Every engagement starts with a written scope (the statement of work). It says what's in bounds, what isn't, and how long the test runs.
- We test only what's in scope. If we find something out-of-scope by accident, we stop and tell you.
- You give us authorisation to perform the agreed-on testing. Without that authorisation, we can't start.
- Findings are confidential. We share them with you and no one else.
Payment
- Scan: a flat fee, invoiced before kick-off, due within 14 days.
- Runtime: monthly, invoiced at the start of each month.
- If you cancel a Scan after kick-off, we keep what's earned to that point. Unstarted work is refunded.
Disclaimers
A security engagement is a snapshot of what we found in the time we had, with the access we were given. We can't guarantee we found everything. We can't guarantee a system is "secure" — no one can. We can only tell you what we got into and how to close it.
The service is provided "as is." To the extent permitted by law, our total liability for any engagement is capped at what you paid us for that engagement.
Responsible disclosure of issues with us
If you find a security issue in this website or our infrastructure, please report it through our responsible disclosure policy. We won't pursue legal action against good-faith researchers who follow it.
Governing law
These terms are governed by the laws of the State of Delaware, USA. Disputes are resolved in the courts of Delaware unless your engagement contract says otherwise.
Changes
If we update these terms, the date at the top of this page changes. For active customers, material changes don't take effect until the next renewal of your engagement.
Contact
Questions about these terms: legal@wehackitbeforetheydo.com.