Terms of Service

These Terms of Service ("Terms") govern your use of the NetLaabs website (netlaabs.com) and any offensive security, penetration testing, or consulting services ("Services") provided by NetLaabs ("we," "us," or "our"), a cybersecurity firm based in Pune, Maharashtra, India.

By accessing our website or engaging our Services, you agree to be bound by these Terms. If you are engaging our Services on behalf of an organization, you represent and warrant that you have the authority to bind that organization to these Terms.

NetLaabs provides professional offensive security services including, but not limited to:

• Web application and API penetration testing.
• Mobile application security assessments.
• Cloud infrastructure and configuration reviews.
• Network and infrastructure penetration testing.
• Red team operations and adversary simulation.
• Source code security reviews.
• AI/LLM security assessments.
• Vulnerability disclosure coordination and advisory services.

All engagements are performed under a mutually agreed-upon scope of work and governed by separate engagement agreements or statements of work (SOW) where applicable.

By engaging our penetration testing or security assessment Services, you explicitly confirm that:

• You are the lawful owner of, or have written authorization from the owner of, the systems, applications, or infrastructure to be tested.
• The scope of testing has been clearly defined and agreed upon in writing prior to commencement.
• You understand that penetration testing involves simulated attacks, which may include attempts to exploit vulnerabilities, escalate privileges, or access sensitive data within the agreed scope.
• Any testing performed outside the agreed scope is strictly prohibited, and both parties will adhere to the boundaries established in the engagement agreement.

NetLaabs will not perform testing on any system or asset for which we have not received explicit written authorization.

As a client, you agree to:

• Provide accurate and complete information about the systems and assets within the testing scope.
• Ensure all necessary internal approvals and authorizations are obtained before testing begins.
• Designate a primary point of contact who is available during the engagement for coordination and emergency communications.
• Notify us promptly of any changes to the testing environment, scope, or timeline.
• Maintain adequate backups of systems and data within the testing scope prior to engagement start.
• Compensate NetLaabs as agreed in the engagement terms and within the specified payment timeline.

Both parties agree to maintain strict confidentiality regarding all information exchanged during an engagement. This includes, but is not limited to:

• Vulnerability findings, exploit details, and proof-of-concept materials.
• System architectures, configurations, credentials, and internal documentation.
• Security reports and remediation recommendations.
• Business information, pricing, and engagement details.

We execute Non-Disclosure Agreements (NDAs) for all engagements. Our team members are individually bound by confidentiality obligations. Engagement data is securely destroyed upon project completion as outlined in our Privacy Policy.

All methodologies, tools, frameworks, and proprietary techniques used by NetLaabs remain our intellectual property. Upon delivery and payment in full:

• The client receives full ownership of the deliverable security reports and findings specific to their engagement.
• Custom scripts, proof-of-concept exploits, or tools developed specifically for the client's engagement are licensed to the client for internal use only.
• General testing methodologies, reusable tooling, and internal knowledge remain the property of Nexus Security.

Website content, branding, design, and code on netlaabs.com are the property of NetLaabs and may not be reproduced, distributed, or used without prior written consent.

Penetration testing and security assessments involve inherent risks. While we take every precaution to minimize impact:

• NetLaabs shall not be held liable for any system downtime, data loss, or service disruption that occurs as a result of testing performed within the agreed scope, provided reasonable professional standards were followed.
• Our total liability for any claim arising from an engagement shall not exceed the total fees paid by the client for that specific engagement.
• We are not liable for damages arising from the client's failure to remediate identified vulnerabilities.
• We do not guarantee that all vulnerabilities will be discovered during an assessment. Security testing provides a point-in-time evaluation, not absolute assurance.

Our Services are provided "as is" and "as available." We make no warranties, express or implied, regarding:

• The completeness of vulnerability discovery during any assessment.
• The suitability of our recommendations for every environment or use case.
• Uninterrupted or error-free operation of our website.

Information published on our website (including blog posts, advisories, and educational content) is provided for informational purposes only and does not constitute professional security advice for your specific environment.

Payment terms are specified in individual engagement agreements. General terms include:

• A non-refundable deposit may be required before engagement commencement, as specified in the SOW.
• Final payment is due upon delivery of the security report, unless alternate milestones are agreed upon.
• Late payments may incur a fee of 1.5% per month on outstanding balances after the due date.
• All prices are quoted in the currency specified in the engagement agreement and are exclusive of applicable taxes unless stated otherwise.

Either party may terminate an engagement under the following conditions:

• By the client — with written notice at any time. Fees for work completed up to the termination date remain payable.
• By NetLaabs — if we determine that continuing the engagement would violate applicable law, ethical standards, or if the client breaches these Terms or the engagement agreement.
• By mutual agreement — both parties may agree to terminate and settle outstanding obligations.

Upon termination, all confidentiality obligations survive and all engagement data is handled per our data destruction protocols.

These Terms are governed by and construed in accordance with the laws of India. Any disputes arising from or related to these Terms or our Services shall be resolved as follows:

• Negotiation — the parties will first attempt to resolve disputes through good-faith negotiation within 30 days of written notice.
• Mediation — if negotiation fails, the dispute shall be submitted to mediation under the rules of the Indian Council of Arbitration.
• Jurisdiction — if mediation is unsuccessful, the courts of Pune, Maharashtra, India shall have exclusive jurisdiction.

We reserve the right to update or modify these Terms at any time. Changes will be effective upon posting the revised Terms on this page with an updated "Last updated" date. For active engagements, modifications will not retroactively alter the terms of an existing engagement agreement without mutual written consent.

Your continued use of our website after changes are posted constitutes acceptance of the revised Terms.

If any provision of these Terms is found to be unenforceable or invalid by a court of competent jurisdiction, the remaining provisions shall continue in full force and effect. The unenforceable provision will be modified to the minimum extent necessary to make it enforceable while preserving its original intent.

For questions about these Terms of Service, to discuss an engagement, or to report a concern, please contact us: