Terms of Service
Last updated: October 2026
1. Agreement to Terms
These Terms of Service ("Terms") govern your use of the Dex Security website (dexsecurity.com) and the provision of cybersecurity consulting services, penetration testing as a service (PTaaS), and attack surface monitoring provided by Dex Security ("Dex Security", "we", "us").
By accessing our website or engaging our services, you agree to be bound by these Terms and any mutually executed Statement of Work (SOW) or Rules of Engagement (ROE).
2. Authorization and Legal Scope
Strict Scope Requirement: Dex Security performs security testing, port scanning, web enumeration, and vulnerability assessment strictly and exclusively against internet-facing digital assets (domains, subdomains, IP ranges, and web applications) that you expressly authorize in writing.
You represent and warrant that you either own the in-scope assets or possess full legal authority and written consent from the asset owner and third-party hosting providers to authorize our security testing. Testing shall commence only after both parties have executed a formal Rules of Engagement document.
3. Safe and Responsible Testing Methodology
Dex Security employs industry-recognized testing standards (such as OWASP and PTES) designed to uncover technical vulnerabilities safely. We do not intentionally execute denial-of-service (DoS) attacks, corrupt production databases, or extract sensitive patient, personal, or financial records beyond what is necessary to validate proof of exploitability.
While we take extreme care to prevent disruption, security testing inherently involves interacting with systems in unintended ways. Where possible, testing against dedicated staging or testing environments is strongly encouraged.
4. Retainer Plans and Verification Retests
Monthly retainer plans provide continuous automated monitoring and scheduled hands-on testing according to the plan tier specified in your agreement. Retesting of fixed findings is included as part of active retainer engagements, subject to the scope limits of your tier.
5. Disclaimer of Absolute Protection
Cybersecurity is an evolving discipline. No external penetration test, vulnerability assessment, or continuous monitoring platform can guarantee complete detection of all vulnerabilities or absolute immunity from cyberattacks. Dex Security provides diligent adversarial evaluation to help you identify and reduce risk, but cannot guarantee that untested systems, undisclosed zero-day exploits, or targeted attacks will not occur.
6. Confidentiality and Data Protection
Dex Security treats all client findings, network topologies, vulnerability data, and business information as strictly confidential. Telemetry and reports are stored and transmitted using industry-standard encryption protocols.
7. Contact Information
For legal inquiries regarding these Terms, please contact Dex Security at hello@dexsecurity.com.