Terms of Engagement

1. Authorized Scope & Explicit Authorization

All offensive security testing, penetration testing, and attack surface audits conducted by Btpsec LTD ("BTPSEC") require explicit written authorization ("Rules of Engagement" / "Letter of Authorization") executed by an authorized representative of the target corporate entity.

Clients engaging BTPSEC guarantee that they possess full legal ownership, hosting authorization, or contractual rights over all target domain names, IP blocks, and cloud infrastructure submitted for security evaluation.

2. ExposurAI Passive Reconnaissance Boundaries

The ExposurAI SaaS platform performs strictly non-intrusive, 100% passive perimeter reconnaissance utilizing public OSINT, certificate transparency logs, public DNS endpoints, and threat intelligence feeds. ExposurAI does NOT perform intrusive exploitation, denial of service (DoS), or unauthorized payload execution during passive audits.

3. Limitation of Liability & Professional Standards

BTPSEC conducts security assessments in accordance with CREST, OWASP, and ISO 27001 auditing methodologies. While our security assessments identify high-risk vulnerabilities and exposure vectors, no automated security audit or penetration test can guarantee 100% immunity against future zero-day exploits or evolving threat actor techniques.

4. Intellectual Property & Deliverable Ownership

Upon full settlement of engagement invoices, clients receive full ownership rights to all customized executive PDF reports, technical finding briefs, and infrastructure fix playbooks provided by BTPSEC.