// Legal

Terms of Service

Last updated: Pending counsel review

Draft

This is placeholder text, not legal advice or a binding agreement. Final wording will be drafted and reviewed by counsel before launch.

These terms will govern your use of the Rift website and platform. Because Rift conducts authorized penetration testing, the authorization and scope terms carry unusual weight — they are what make the service lawful to operate.

01Authorization & scope

The core clause: you warrant that you own, or have explicit authority to authorize testing of, every asset you place in scope — and you grant Rift permission to test it within that defined scope. Testing assets you do not control is strictly prohibited.

02The service

What Rift provides, subscription and engagement models, and acceptable cadence of testing.

03Billing

How per-asset and per-application pricing is calculated and invoiced, including how surface growth is handled mid-term. See Pricing.

04Acceptable use

Explicit prohibition on directing Rift at systems you are not authorized to test, and other misuse.

05Warranties & liability

Service warranties, disclaimers, and limitation of liability — to be set by counsel.

06Data protection

Incorporates our Privacy Policy and Data Processing Addendum, with SLA terms annexed.

07Term & termination

How agreements start, renew, and end, and what happens to your data on offboarding.

Questions about this document? Email [email protected].