Terms of Use

The website securitytest.team in all its language versions (the “Website”) is operated by Osaühing Ida Portal, a private limited company registered in the Commercial Register of the Republic of Estonia under registry code 10970449, registered office: Kivilinna tn 18-49, 20604 Narva, Ida-Viru maakond, Estonia (the “Operator”, “we”). The Operator provides its services under the name Security Test Team.

These Terms set out the rules for the use of the Website. A contract for a service is concluded only in the way the document governing that service provides.

These Terms do not govern the services of the Operator. The free website security check and the reports on it are provided under the Terms of the Free Website Security Check. The bug bounty platform is governed by its terms for owners and its terms for researchers. Every other service is provided under a separate written contract.

The services of the Operator are addressed to businesses: to legal persons and to natural persons who act in the course of their business or profession. The bug bounty platform is also open to security researchers.

The content of the Website describes the services and the methods of the Operator. It is an invitation to make offers and not an offer. A scope, a schedule, a price and a reward are binding only when they are stated in a contract, in a document issued under the terms of a service or in a program published on the bug bounty platform.

The content of the Website is not professional advice for a particular situation and does not replace an assessment of particular systems.

References to laws, regulations and standards are given for orientation and reflect their state on the date stated on the page. The text of the law, regulation or standard prevails.

The Operator keeps the content accurate and up to date and may change, supplement or remove it at any time without notice.

By sending a request you confirm that you are the owner of the systems named in it, or that the owner has authorised you to commission their security testing, and that the information in the request is accurate.

Sending a request creates no obligation to conclude a contract, either for you or for the Operator. The Operator may decline a request without stating reasons.

The Operator starts testing only after the owner of the systems has given a written authorisation. The Operator declines every request to test systems that the requester neither owns nor is authorised to test.

Do not send passwords, access keys, details of vulnerabilities or personal data of third parties through a form of the Website or by unencrypted email. A secure channel for such information is agreed after the first reply.

A security test reflects the condition of the systems in scope during the period of the test, at the agreed depth and by the agreed methods. It does not prove that no vulnerabilities exist and is not a guarantee that the systems cannot be compromised.

Testing is planned so as to keep its effect on the operation of the systems as small as possible. The risks, the safeguards and the conditions under which testing stops are agreed before the work starts.

When using the Website, you must not:

1. (a)disrupt the operation of the Website or place an unreasonable load on it;
2. (b)attempt to obtain access to data or to parts of the Website that are not public;
3. (c)send requests automatically or on behalf of persons who have not authorised you;
4. (d)send unlawful content, malicious code or information you are not entitled to disclose;
5. (e)pass yourself off as another person or as a representative of the Operator.

Research into the security of the Website is permitted within the Vulnerability Disclosure Policy. To the extent of any conflict, that policy prevails over this section.

Anyone may notify the Operator of information on the Website or on the bug bounty platform that they consider to be illegal content, under Article 16 of Regulation (EU) 2022/2065 (Digital Services Act). A notice is sent by email to info@securitytest.team.

A notice contains:

1. (a)a sufficiently substantiated explanation of the reasons why the information is considered to be illegal content;
2. (b)the exact electronic location of the information, such as the exact URL, and, where necessary, further information that enables it to be identified;
3. (c)the name and the email address of the person who sends the notice, except where the information is considered to involve one of the offences referred to in Articles 3 to 7 of Directive 2011/93/EU;
4. (d)a statement confirming the good faith belief of the person who sends the notice that the information and the allegations it contains are accurate and complete.

The Operator confirms the receipt of a notice without undue delay to the email address from which it was sent.

A person of the Operator examines every notice and decides on it in a timely, diligent, non-arbitrary and objective manner; no automated means are used. The Operator informs the person who sent the notice of the decision without undue delay and of the possibilities of redress against it: a request for review sent to the address named in this section, and recourse to a court.

Where the Operator removes information or restricts access to it on the basis of a notice, it informs the person who provided the information with a statement of reasons, as the terms for owners and the terms for researchers of the bug bounty platform describe.

Where the Operator becomes aware of information giving rise to a suspicion that a criminal offence involving a threat to the life or safety of a person or persons has taken place, is taking place or is likely to take place, it promptly informs the law enforcement or judicial authorities of the Member State or Member States concerned and provides all the relevant information available to it, under Article 18 of Regulation (EU) 2022/2065.

The texts, the graphics, the logo and the program code of the Website belong to the Operator or are used by it under licence. They may be used for personal information and quoted with a reference to the source. Every other use requires the prior written consent of the Operator.

The names of platforms, standards and products mentioned on the Website are trademarks of their owners and are used for identification only. Their mention implies no affiliation, partnership, certification or endorsement.

The Website contains links to websites of third parties. The Operator does not control those websites and is not responsible for their content or for the processing of data on them.

The Website is provided as it is. The Operator gives no warranty that the content is complete and free of errors or that the Website is available without interruption.

The Operator is not liable for damage caused through ordinary negligence that results from the use of the Website, from the impossibility of using it or from reliance on its content.

This does not limit the liability of the Operator for damage caused intentionally or through gross negligence, for death, bodily injury and damage to health, or any other liability that the law does not allow to be excluded or limited.

The liability of the Operator for its services is governed by the contract under which the service is provided.

These Terms and the use of the Website are governed by the law of the Republic of Estonia. If you are a consumer, this choice does not deprive you of the protection of the mandatory provisions of the law of the country of your habitual residence.

The parties seek to resolve a dispute by negotiation. A dispute with a business that is not resolved by negotiation is resolved by the court of the Republic of Estonia in whose jurisdiction the registered office of the Operator is located.

If you are a consumer, you may bring proceedings before the courts of the Republic of Estonia or before the courts of the country of your domicile, and the Operator may bring proceedings against you only before the courts of the country of your domicile.

The Operator may change these Terms. The version in force is the one published on this page, with the date from which it applies. A change applies to the use of the Website from that date.

If a provision of these Terms is invalid, the validity of the remaining provisions is not affected.

These Terms are drawn up in English and are published in translation. If a translation differs from the English text, the English text prevails.

Questions about these Terms are sent to info@securitytest.team.