Terms of Service

These terms cover your use of this website and set the frame for our engagements. Any individual project is governed by its own statement of work, which takes precedence over anything here.

Services

SentryStack builds software — sites, web applications, APIs and the pipelines that deploy them — and carries out security work on software: penetration testing, audits, incident response and monitoring. Every engagement is scoped in writing, with a fixed fee agreed before work starts.

Testing authorisation

We do not test a system without written authorisation from someone entitled to give it. Scope, out-of-bounds systems, testing windows and an escalation contact are agreed in the statement of work before anything is touched. If you are not the owner of a system you are asking us to test, say so up front.

Use of this website

Do not attempt to gain unauthorised access to this site or the systems behind it, and do not use the contact form to send unsolicited commercial messages.

If you believe you have found a vulnerability in this site, email support@sentrystack.io with Security in the subject line. We will not pursue anyone who reports in good faith, stays within scope and gives us reasonable time to fix it.

Intellectual property

Content on this website belongs to SentryStack unless stated otherwise. Code, reports and deliverables produced under an engagement become yours on payment; the repository sits in your organisation from the first commit. We keep the right to reuse general techniques and non-client-specific tooling.

Confidentiality

Engagements are covered by an NDA. Findings and any data captured during testing are held under it and deleted on request at the end of the engagement. We do not publish client names or write up client systems without written permission.

Limitation of liability

Our liability for an engagement is limited to the fees paid for that engagement. We are not liable for indirect, incidental or consequential loss.

Security testing reduces risk; it does not eliminate it. An assessment reports what we found within the agreed scope and time, and is not a warranty that a system contains no other flaws.

Termination

Either party may end an engagement with 30 days' written notice unless the statement of work says otherwise. Work completed up to that point is payable.

Changes

We may update these terms. The date at the top of this page is the last revision.

Contact

Questions about these terms: support@sentrystack.io.