1. Acceptance of Terms
By accessing and using StrictPath Audit's website, services, mobile applications, or any related platforms ("Services"), you accept and agree to be bound by the terms and provisions of this agreement ("Terms of Service" or "Terms"). If you do not agree to abide by these terms, please do not use our Services.
These Terms constitute a legally binding agreement between you ("User," "you," or "your") and StrictPath Audit ("Company," "we," "our," or "us"). Your use of our Services is also governed by our Privacy Policy, which is incorporated by reference into these Terms.
2. Description of Service
StrictPath Audit provides comprehensive web security auditing services designed to help organizations implement and maintain robust security measures. Our Services include but are not limited to:
- DNSSEC Validation: Complete domain-level security checks including DS records verification, signing status analysis, and full chain of trust validation.
- HSTS Configuration Analysis: HTTP Strict Transport Security header scanning, preload readiness assessment, and compliance verification.
- HTTPS Enforcement Auditing: SSL/TLS certificate chain review, mixed content detection, and redirect policy testing.
- Security Monitoring: Continuous monitoring services for ongoing security posture assessment and alerting.
- Implementation Guidance: Step-by-step playbooks and technical support for security measure implementation.
- Reporting and Analytics: Detailed security reports, risk assessments, and compliance documentation.
- API Access: Programmatic access to our scanning and monitoring capabilities for enterprise users.
- Educational Resources: Documentation, guides, and training materials related to web security best practices.
3. User Accounts and Registration
To access certain features of our Services, you may be required to create an account. You agree to:
- Accurate Information: Provide accurate, current, and complete information during the registration process and maintain the accuracy of such information.
- Account Security: Maintain the security and confidentiality of your password and account credentials, and accept responsibility for all activities that occur under your account.
- Authorized Use: Ensure that only authorized individuals have access to your account and that all use complies with these Terms.
- Prompt Notification: Notify us immediately of any unauthorized use of your account or any other breach of security.
- Account Responsibility: Accept full responsibility for all activities, transactions, and communications that occur under your account.
- Age Requirements: Confirm that you are at least 18 years old or have reached the age of majority in your jurisdiction.
- Corporate Accounts: If registering on behalf of an organization, confirm that you have the authority to bind that organization to these Terms.
4. Acceptable Use Policy
You agree to use our Services only for lawful purposes and in accordance with these Terms. You agree not to:
- Legal Violations: Violate any applicable local, state, national, or international laws or regulations.
- Unauthorized Access: Attempt to gain unauthorized access to our systems, networks, or other users' accounts.
- Service Disruption: Interfere with or disrupt the Services or servers or networks connected to the Services.
- Malicious Activities: Use the Services to transmit viruses, malware, or other harmful code.
- False Information: Submit false, misleading, or fraudulent information or impersonate any person or entity.
- Intellectual Property Infringement: Infringe upon the intellectual property rights of others.
- Harassment: Harass, abuse, or harm other users or our personnel.
- Commercial Misuse: Use the Services for unauthorized commercial purposes or resell access without permission.
- Data Mining: Use automated systems to extract data from our Services without authorization.
- Reverse Engineering: Attempt to reverse engineer, decompile, or disassemble any part of our Services.
- Security Testing: Conduct security testing or vulnerability assessments on our infrastructure without prior written consent.
5. Service Availability and Modifications
We strive to maintain high service availability and reliability, but we do not guarantee uninterrupted access. We reserve the right to:
- Service Modifications: Modify, suspend, or discontinue any aspect of the Services at any time, with or without notice.
- Maintenance Windows: Implement scheduled maintenance windows and service updates that may temporarily affect availability.
- Methodology Updates: Update our security scanning methodologies, reporting formats, and analysis techniques to reflect current best practices.
- Feature Changes: Add, remove, or modify features and functionality based on user feedback and technological developments.
- Capacity Management: Implement usage limits or restrictions to ensure fair access and optimal performance for all users.
- Emergency Actions: Take immediate action to address security threats, technical issues, or legal requirements.
- Third-Party Dependencies: Make changes necessitated by third-party service providers or technology partners.
6. Payment Terms and Billing
For paid Services, the following terms apply:
- Payment Due: Payment is due in advance for subscription services and upon completion for one-time services.
- Billing Cycles: Subscription fees are billed according to your selected billing cycle (monthly, annually, etc.).
- Price Changes: We reserve the right to change pricing with 30 days' advance notice to existing customers.
- Refund Policy: All fees are non-refundable unless otherwise specified in writing or required by applicable law.
- Late Payments: Failure to pay may result in service suspension or termination after appropriate notice.
- Taxes: You are responsible for all applicable taxes, duties, and governmental charges.
- Payment Methods: We accept payment methods as specified on our website and may update accepted methods at our discretion.
- Auto-Renewal: Subscription services automatically renew unless cancelled before the renewal date.
- Disputed Charges: Any billing disputes must be reported within 60 days of the charge date.
7. Intellectual Property Rights
The Services and all original content, features, and functionality are owned by StrictPath Audit and are protected by international copyright, trademark, patent, trade secret, and other intellectual property laws. This includes:
- Proprietary Technology: Our scanning engines, analysis algorithms, and security methodologies.
- Content and Materials: All text, graphics, logos, images, and software used in our Services.
- Trademarks: Our company name, logos, and service marks.
- Reports and Analysis: The format, structure, and presentation of our security reports and recommendations.
- User License: We grant you a limited, non-exclusive, non-transferable license to use our Services for your internal business purposes.
8. Data Ownership and Privacy
Your privacy and data ownership rights are important to us:
- Your Data: You retain ownership of all data you provide to us, including domain information and configuration details.
- Privacy Protection: Our collection and use of personal information is governed by our Privacy Policy.
- Data Security: We implement industry-standard security measures to protect your data.
- Data Portability: You may export your data in standard formats upon request.
- Data Retention: We retain your data only as long as necessary to provide Services and comply with legal obligations.
- Third-Party Data: We may collect publicly available information about domains and security configurations as part of our Services.
9. Limitation of Liability
To the fullest extent permitted by applicable law, StrictPath Audit shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including without limitation:
- Loss of profits, data, use, goodwill, or other intangible losses
- Business interruption or loss of business opportunities
- Costs of procurement of substitute goods or services
- Any damages resulting from your use or inability to use the Services
- Any damages resulting from unauthorized access to or alteration of your data
- Any damages resulting from third-party conduct or content on the Services
Our total liability for all claims related to the Services shall not exceed the amount you paid us in the twelve months preceding the claim.
10. Disclaimers and Warranties
The Services are provided on an "as is" and "as available" basis. We make no warranties, expressed or implied, and hereby disclaim all other warranties including:
- Merchantability: We do not warrant that the Services will meet your specific requirements.
- Fitness for Purpose: We do not guarantee that the Services are suitable for any particular purpose.
- Non-Infringement: We do not warrant that the Services will not infringe third-party rights.
- Accuracy: While we strive for accuracy, we do not guarantee that all information provided is error-free.
- Availability: We do not guarantee uninterrupted or error-free operation of the Services.
- Security: While we implement security measures, we cannot guarantee absolute security.
11. Indemnification
You agree to defend, indemnify, and hold harmless StrictPath Audit, its officers, directors, employees, agents, and affiliates from and against any and all claims, damages, obligations, losses, liabilities, costs, or debt, and expenses (including attorney's fees) arising from:
- Your use of the Services
- Your violation of these Terms
- Your violation of any third-party rights
- Any content you submit or transmit through the Services
- Your negligent or wrongful conduct
12. Termination
We may terminate or suspend your account and access to the Services immediately, without prior notice or liability, under our sole discretion, for any reason whatsoever, including without limitation if you breach these Terms. Upon termination:
- Your right to use the Services will cease immediately
- You will lose access to your account and any data stored therein
- We may delete your account and data after a reasonable notice period
- You remain liable for all charges incurred prior to termination
- Provisions that by their nature should survive termination will remain in effect
13. Governing Law and Dispute Resolution
These Terms shall be interpreted and governed by the laws of the State of Ohio, United States, without regard to its conflict of law provisions. Any disputes arising from these Terms or your use of the Services shall be resolved through:
- Informal Resolution: Good faith negotiations between the parties
- Mediation: Non-binding mediation if informal resolution fails
- Arbitration: Binding arbitration under the rules of the American Arbitration Association
- Jurisdiction: Courts of competent jurisdiction in Columbus, Ohio for matters not subject to arbitration
14. Changes to Terms
We reserve the right to modify or replace these Terms at any time. If a revision is material, we will provide at least 30 days' notice prior to any new terms taking effect. Material changes include:
- Changes to pricing or payment terms
- Modifications to core service functionality
- Changes to data handling practices
- Alterations to dispute resolution procedures
15. Contact Information
If you have any questions about these Terms of Service, please contact us:
