Terms & Conditions

1. Introduction

These Terms & Conditions govern access to the Medysec website and the use of our cybersecurity services, including penetration testing, vulnerability assessment, compliance assessment, consulting, training, and related offerings. By using our website or engaging Medysec, you accept these Terms. If you do not agree, please do not use the website or services.

2. Definitions

• Services: cybersecurity assessments, testing, consulting, training, and related work supplied by Medysec.
• Client: an individual or organisation that engages Medysec.
• Confidential Information: non-public business, technical, financial, operational, or security information shared by either party.
• Statement of Work: the written scope, schedule, deliverables, assumptions, and commercial terms for an engagement.

3. Use of Services

Services may only be used lawfully and in compliance with applicable requirements. You confirm that you have authority to request testing, provide complete and accurate scope information, and obtain the permissions needed for Medysec to assess the agreed systems, networks, and applications.

Security testing may affect system performance. You acknowledge and accept the inherent risks of authorised testing.

4. Service Engagement

Before work begins, Medysec will provide a proposal or Statement of Work that describes scope, timing, and cost. The Client must provide written authorisation, agreed credentials and access, and the information reasonably required for delivery. We aim to minimise disruption, but cannot guarantee that no interruption will occur.

5. Scope of Services

• Work is limited to the approved proposal, quotation, contract, or Statement of Work.
• Changes to scope, targets, schedules, deliverables, or requirements require written agreement by both parties.
• Additional work may incur additional fees.

6. Confidentiality

Medysec will protect Client Confidential Information and will not disclose proprietary or sensitive information without permission, except where disclosure is legally required. The Client must likewise protect Medysec's confidential methodologies, tools, and findings.

7. Client Responsibilities

• Supply accurate and complete information and required access credentials.
• Nominate authorised contacts and respond to reasonable information requests promptly.
• Maintain suitable backups before testing begins.
• Make agreed systems available during scheduled testing windows.

8. Limitation of Liability

Security assessments are not a guarantee that every vulnerability will be found or that all future incidents will be prevented. To the extent permitted by law, Medysec's aggregate liability for a specific service is limited to the fees paid for that service. Medysec is not liable for indirect, incidental, consequential, downtime, data-loss, or financial-loss claims arising from use of the services.

9. Data Protection and Privacy

Medysec processes information only as needed to deliver agreed services. Both parties must comply with applicable privacy, data-protection, and cybersecurity laws. Personal data is handled in accordance with the Medysec Privacy Policy.

10. Intellectual Property Rights

Medysec retains ownership of its methodologies, frameworks, tools, scripts, templates, testing procedures, and proprietary know-how. Once applicable fees are paid in full, the Client owns the final reports and deliverables prepared specifically for its environment.

11. Payment Terms

Service fees and payment terms are agreed in writing before work begins. A non-refundable deposit may be required. Unless agreed otherwise, payment is due on completion. Late payment may result in fees or suspension of ongoing work.

12. Security Assessment Disclaimer

Cybersecurity reviews are point-in-time assessments. They cannot ensure that systems will remain secure or that future attacks will be avoided. Ongoing monitoring, remediation, and improvement remain necessary.

13. Responsible Disclosure

Medysec shares findings only with authorised Client representatives. We do not publish vulnerabilities without written permission unless required by law.

14. Acceptable Use

Clients must not use Medysec services for unlawful or fraudulent activity, unauthorised access, malware deployment, cyber warfare, denial-of-service attacks, or other conduct that violates applicable law. Medysec may terminate services if prohibited activity is identified.

15. Website Usage

Users must not attempt unauthorised access, interfere with website operation, bypass security controls, introduce malicious code, scrape website content, or conduct automated attacks. Violations may lead to legal action.

16. Unauthorised Security Testing, Bug Hunting and Bug Bounty Activities

Medysec does not operate a public bug-bounty programme unless it formally announces one in writing. No person or organisation may scan, test, probe, exploit, reverse engineer, conduct reconnaissance against, or otherwise research Medysec digital assets without prior written authorisation.

Reporting or identifying a potential vulnerability does not authorise access, exploitation, testing, retention, copying, disclosure, or distribution of information obtained through unauthorised activity.

17. Publicity and Use of Name

Neither party may use the other party's name, logo, trademark, case study, or testimonial without prior written approval.

18. Indemnification

The Client agrees to indemnify and hold Medysec and its personnel harmless against claims arising from a breach of these Terms, unauthorised testing requests, legal violations, or misuse of services.

19. Force Majeure

Neither party is responsible for delay caused by events beyond reasonable control, including natural disasters, cyber incidents, internet outages, government action, pandemics, or labour disputes.

20. Termination

Either party may end an engagement by written notice for a material breach or upon completion of the agreed services. Outstanding fees become due upon termination. Medysec may suspend or discontinue work for non-payment or breach of these Terms.

21. Electronic Communications

Electronic approvals, contracts, invoices, notices, and other communications have the same effect as physical documents where permitted by law.

22. Governing Law and Jurisdiction

These Terms are governed by the laws of India. Disputes are subject to the exclusive jurisdiction of the courts in Bhubaneswar, Odisha, India.

23. Amendments

Medysec may update these Terms from time to time. Continued use of our website or services after publication of changes means you accept the updated Terms.

24. Contact Information

For legal notices, disputes, or compliance enquiries, please use the contact details above.