Terms of service

1. Who these terms are with

This website is operated by XECbuild("XECbuild", "we", "us"). By using https://xecbuild.com you accept these terms. If you do not, stop using the site.

2. What this website is

Marketing and research material, plus a form for making an enquiry. Nothing on it is an offer capable of acceptance, a quotation, or advice you should act on for your own systems without engaging us. We may change, move or withdraw any part of it at any time.

Research posts describe work we have done, generalised and with client details removed. They are published for interest, are accurate as at their date, and are not maintained afterwards.

3. Using the site

• Do not attempt to gain unauthorised access to any part of the site or the systems that serve it. We do not run a vulnerability disclosure programme and grant no permission to test - see our security page.
• Do not scrape, mirror, or use automated means to extract content beyond ordinary search engine indexing.
• Do not submit the enquiry form with false information, on behalf of someone who has not asked you to, or to send anything unsolicited.
• Do not put credentials, keys, tokens or other secrets into the enquiry form. It is not a secure channel and it is not meant to be one.

4. Intellectual property

The content, design, code and marks on this site belong to us or our licensors. You may read it, link to it, and quote it with attribution. You may not republish it wholesale or present it as your own. Third party names appearing on the site are the marks of their respective owners and are used descriptively - their appearance does not imply endorsement, partnership, or a current commercial relationship.

5. Engagements

Security testing and development work is carried out under a separate written agreement. Where that agreement and these terms conflict, the agreement wins. Every engagement will state at minimum:

• Scope. The exact systems, hosts and applications in scope, and everything explicitly out of it.
• Authorisation. Written confirmation from someone able to give it that you own or control the targets. We do not begin without this, and we will not take your word for a system you cannot demonstrate control of.
• Window. The dates and hours testing may occur, and named contacts on both sides for the duration.
• Handling. How findings are transmitted, who may see them, and what happens to our copies afterwards.

6. What a test is and is not

A penetration test is a time-boxed assessment of a defined scope at a point in time. It is evidence of what we found in that window - not proof that nothing else exists, not a certification, and not a guarantee of security. Systems change, and a clean report has a shelf life measured in releases.

Testing carries inherent risk. Active testing can degrade performance or affect data in the target environment. We work carefully and we agree rules of engagement in advance, but you are responsible for having current, tested backups before we start.

7. Confidentiality

Everything we learn about your systems is confidential and stays that way indefinitely. We publish nothing identifying a client without written permission. We expect the same in return for our methodology, tooling and report formats.

8. Liability

Nothing here limits liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot lawfully be limited. Subject to that, and to whatever the engagement agreement says:

• The website is provided as-is, without warranty of any kind, and we are not liable for any loss arising from your use of it.
• For engagements, our aggregate liability is capped at the fees paid for the engagement giving rise to the claim.
• Neither party is liable for indirect or consequential loss, loss of profit, revenue, goodwill or anticipated savings.

9. Governing law

These terms are governed by the laws of India, and the courts of India have exclusive jurisdiction. If you are a consumer resident in the UK or EEA, this does not deprive you of the protection of mandatory provisions of your local law.

10. Changes

We may revise these terms. The version in force is the one published here on the date you use the site, and the date at the top of this page tells you when it last changed.