XRATOR

Terms of Service

Last updated: July 2025

1. Agreement Overview

These Terms of Service govern your use of the XRATOR website, free services, and any future commercial services provided by XRATOR Pte. Ltd. (Singapore) and XRATOR SAS (France). This includes security assessments, platform demonstrations, educational content, and any subscription services or professional consulting you may purchase.

By using our website or services, you agree to these Terms.

2. Services Description

  • Website Services: Information about cybersecurity solutions, educational content, blog articles, case studies, and company information.
  • Free Services: 24-hour external security assessments, platform demonstrations, consultation requests, and downloadable resources.
  • Commercial Services: XRATOR Operator platform subscriptions, AutoComply compliance automation, CISO-as-a-Service consulting, penetration testing, red team services, and related professional services.

3. User Registration and Responsibilities

When requesting assessments, demonstrations, or future commercial services, you must provide accurate business information and use a valid business email address. You represent that you have authority to act on behalf of your organization and authorize any security scanning or platform access.

You're responsible for maintaining the confidentiality of any account credentials and notifying us immediately of unauthorized access. You may not use our services for illegal purposes, attempt to access other users' data, or reverse engineer our technology.

4. Security Assessments and Demonstrations

Our free security assessments scan only external-facing systems visible on the internet and don't access your internal networks or systems. You authorize us to perform these non-intrusive scans and understand that results are provided for evaluation purposes only.

Platform demonstrations may include sample data or controlled access to our technology. Demonstration access is temporary and solely for evaluation purposes.

5. Data Ownership and Processing

  • Your Data: You retain ownership of all business data and information you provide to us. This includes contact information, assessment targets, and any data processed through our platform.
  • Our Use of Data: We process your data to deliver requested services, communicate about our offerings, and improve our cybersecurity solutions. We may use anonymized, aggregated data for research and industry analysis without identifying your organization.
  • Data Security: We implement industry-standard security measures including encryption, access controls, and regular security audits to protect your information.
  • Data Retention: We retain data as necessary to provide services and comply with legal obligations. You may request deletion of your data subject to our legitimate business needs and legal requirements.

6. Commercial Terms

  • Subscriptions: Commercial platform access will be provided under separate subscription agreements with specific terms for scope, duration, and billing.
  • Professional Services: Consulting, testing, and advisory services will be governed by individual statements of work with project-specific terms and deliverables.
  • Payment Terms: Commercial services require payment according to agreed terms. Subscription services typically require advance payment with automatic renewal unless cancelled.

7. Intellectual Property Rights

  • XRATOR Property: We own all rights to our website content, platform technology, assessment methodologies, documentation, reports, and related intellectual property. This includes trademarks, copyrights, trade secrets, and proprietary methodologies.
  • Your License: We grant you a limited, non-exclusive license to use our website content for evaluation purposes and any purchased services according to your subscription or service agreement.
  • Restrictions: You may not copy, modify, distribute, or create derivative works from our technology or content without written permission. You may not remove proprietary notices or attempt to reverse engineer our platform.
  • Feedback: Any suggestions, feedback, or ideas you provide about our services become our property and may be used to improve our offerings without compensation.

8. Service Availability and Support

  • Free Services: Provided on a best-effort basis without guaranteed availability or response times. We may modify or discontinue free services at any time with notice.
  • Commercial Services: Subject to service level agreements specified in your subscription or professional services contract.
  • Support: We provide reasonable support for all services, with enhanced support available for commercial customers according to their service level.

9. Disclaimers and Warranties

  • Free Services: Provided "as is" for evaluation purposes without warranties of any kind.
  • Commercial Services: We warrant that commercial services will substantially conform to their documentation and agreed specifications.
  • Security Disclaimer: Our services help identify and manage security risks but don't guarantee complete protection against all threats. You remain responsible for implementing appropriate security measures for your organization.
  • Third-Party Services: We're not responsible for the performance or security of third-party tools or services that may integrate with our platform.

10. Limitation of Liability

Our total liability for any claims is limited to the fees paid for commercial services in the 12 months preceding the claim. For free services, our liability is limited to the fullest extent permitted by law.

We're not liable for indirect, consequential, or punitive damages including lost profits, business interruption, or data loss. These limitations don't apply to our confidentiality obligations, indemnification commitments, or cases of gross negligence.

11. Confidentiality

We treat your business information as confidential and don't share it with third parties except as necessary to provide services or as required by law. You agree to keep any proprietary information about our technology and methodologies confidential.

12. Indemnification

We'll defend you against claims that our services infringe third-party intellectual property rights.

You'll defend us against claims arising from your misuse of our services or breach of these Terms.

13. Term and Termination

These Terms remain effective until terminated. We may terminate for material breach with 30-day notice to cure, or immediately for violations of intellectual property restrictions or illegal use.

Upon termination, your access to services ends and we'll handle data according to our retention policies and any applicable commercial agreements.

14. General Provisions

These Terms are governed by Singapore law with disputes resolved in Singapore courts. We may assign this Agreement in connection with business transfers, but you may not assign without our consent.

We may modify these Terms with 30-day notice posted on our website. Continued use constitutes acceptance of changes.

This Agreement, together with any commercial service agreements and our Privacy Policy, constitutes the complete agreement between us.