Terms

These terms apply when you use vigilant-cyber.com, including the free website check and the proposal tool (together, "the site"). "Vigilant", "we" and "us" mean Vigilant Cybersecurity LLC. By using the site, you agree to these terms and to our Privacy Policy. If you use the site for a company, you confirm you are allowed to accept these terms for it.

Penetration testing and our other services are covered by a separate written agreement that we both sign (the "services agreement"). If the services agreement and these terms ever disagree, the services agreement wins.

When you type in a website, we look only at information that is already public, or that any visitor's browser receives when it loads the site. We load its home page once, the way a browser does, and read a few standard files sites publish for this purpose, such as /robots.txt, /.well-known/security.txt and the files that link a site to its mobile apps. We read its public DNS records, and the list of its web addresses in public certificate logs, and look up where those addresses are hosted in public DNS.

From that, we note its security settings, the technology it appears to use and what its web addresses look like they are for. The check does not scan ports, try passwords, look for vulnerabilities, or visit any other page or any of the web addresses it finds. It is not a penetration test.

Only enter a website you own, work for, or have a genuine business reason to ask about. Do not use the check to gather information about other people's systems.

The results are a quick, automated snapshot. They may be incomplete or out of date, and they are not a statement that a site is secure or insecure.

A proposal is our best estimate of the work and its price, based only on the answers you give. It is not a binding offer or a contract, and it is valid for 30 days from the date on it. Work begins only under a signed services agreement.

We confirm the scope with you on the scope call. Where you answered "Not sure", the proposal says what we assumed, and we check it then. If what we learn on that call, or in any later conversation before you sign, changes the work, we may change the price, the scope or the timeline. That includes systems that are larger than your answers suggested, systems that were not mentioned, and testing that needs special handling. We will always tell you, and send an updated proposal, before you sign. You never have to accept it, and walking away costs you nothing.

The price becomes fixed when we both sign the services agreement. After that, it changes only if we both agree in writing to change the scope.

Each package includes what your proposal lists for it, and nothing more, unless the services agreement says otherwise. Payment terms are set out in the services agreement.

"Start within 1 week" means we aim to begin testing within 1 week of all three of these being in place: a signed services agreement, written permission to test, and the access we need. The exact start date is agreed on the scope call.

We only test systems that their owner has authorized in writing. Before testing, you must confirm that you own, or have written permission from the owner of, every system in scope. That includes systems run for you by cloud providers and other third parties, and you agree to follow their rules on testing.

We will pause or stop testing if that permission is withdrawn or comes into doubt.

A penetration test examines the systems in scope, during the agreed testing window, with skilled people and reasonable effort. No test can find every weakness. A test is not a guarantee that your systems are secure or will not be attacked.

Our reports and letters describe what we tested and what we found. They are not a certification of compliance. Whether you meet a framework or law, such as SOC 2 or HIPAA, is decided by your auditor or regulator.

You may use the site to learn about us and to get proposals for your own organization. You may not copy, resell or republish its content; use the site or the check to attack, overload or gather information about systems you are not authorized to assess; get around its rate limits or security controls; or use automated tools to pull proposals or data from it.

A proposal link lets anyone who has it open the proposal. Share it only with people you want to see it.

The site's text, design, logos and tools belong to Vigilant or its licensors. You are welcome to keep your proposal and share it inside your organization, and with your auditors and customers.

The site, the website check and the proposal tool are provided as they are. We work to keep them accurate and available, but we do not promise they will always be correct, complete or available.

As far as the law allows, Vigilant is not liable for any indirect or consequential loss arising from your use of the site, the website check or the proposal tool, and our total liability for your use of the site is limited to one hundred US dollars. Our liability for services is set out in the services agreement.

We may update these terms. The date at the top of this page shows the latest version, and changes apply from that date.

These terms are governed by the laws of the State of South Dakota, United States.