These terms govern the use of naxxan.ai and NAXXAN verification services (the "Services"), provided by the NAXXAN team ("we", "us"). By using the Services you agree to these terms. If you have questions: engagements@naxxan.ai.
Our Services are offensive-security verification performed against systems you own or are explicitly authorized to test in writing. Every engagement requires a signed scope before any testing begins. We do not scan, probe, or test any target without that signed authorization; requesting our Services does not authorize anyone to test third-party systems.
You represent that you have the authority to commission testing against the targets in the signed scope, that the information you provide us is accurate, and that you will use our reports for defensive purposes only. You are responsible for compliance with the laws that apply to your systems.
Each engagement produces a report of findings validated by reproducible proof-of-concept evidence, and may include retests and certificates referencing the report's cryptographic fingerprint. A report describes the state of the in-scope systems at the time of testing. It is not a certification that systems are free of vulnerabilities beyond those tested, and no security assessment can promise that.
Engagement scopes, reports, and evidence are confidential. We treat your data per our privacy policy and our published data-handling commitments: engagement data is retained for the documented retention window and deleted on schedule.
Services are priced per engagement as agreed in writing before work begins. If we correct a delivered result under our corrections policy, any refund or re-run due is the one recorded in that policy — our public corrections page is part of our track record.
The Services are provided "as is". To the maximum extent permitted by law, our aggregate liability for any claim is limited to the fees paid for the engagement giving rise to the claim. We are not liable for indirect or consequential damages.
We may update these terms; the version published at this URL applies to new engagements from its publication date. Continued use of the Services after changes constitutes acceptance.
Effective date: 2026-09-16 · Contact: engagements@naxxan.ai