These Terms of Service are an agreement between you and Wardizon Technologies & Services Ltda, CNPJ 54.808.567/0001-18, São Paulo, SP, Brazil ("Wardizon"). By accessing or using the Wardizon platform (the "Service"), you agree to be bound by them. If you use the Service on behalf of an organization, you represent that you have the authority to bind that organization, and "you" means that organization.
The Service is offered to managed service providers (each a "Partner", or "you") to run authorized security testing for their own clients (each an "End Client"), and only against targets they are authorized to test. Unauthorized scanning is strictly prohibited and may result in immediate account termination and legal action.
No test may run through the Service until the End Client signs a Rules of Engagement (RoE) online. The Partner initiates each RoE, the End Client authorizes it, and Wardizon never authorizes or starts a test on its own. The platform checks for a signed RoE before a test starts. Tests are active: some checks send requests that can change data in the systems under test, such as submitting a test value to confirm a business-logic flaw. Circumventing the RoE requirement is a material breach of these Terms.
For every RoE you send, you represent and warrant that: (a) you have the authority, given by the End Client, to have each target in it tested, and the End Client owns each target or has the legal authority to authorize testing of it; (b) the person who signs the RoE is the End Client, or a representative with authority to authorize the test on its behalf, and the email address you enter for the End Client belongs to the End Client; and (c) the End Client has been informed of the scope, timing and risks of the test, including that some checks can change data.
You will defend, indemnify and hold Wardizon harmless from any claim, loss, damage, fine or expense, including reasonable legal fees, arising from (a) a test run against a target that you or the End Client were not authorized to test, (b) an RoE signed by someone without authority to sign it for the End Client, or (c) your breach of these Terms or of applicable law.
Subscriptions are billed monthly in advance, in USD, by card through Stripe. Plans are listed at wardizon.com/pricing, and prices are quoted on request.
If a payment fails, access may be suspended until it is resolved. No refunds are issued for partial months.
You shall not: (a) reverse-engineer the Service; (b) resell or sublicense the Service, except to provide services to your own End Clients under these Terms; (c) use the Service to test any target without authorization; (d) attempt to extract the Service's prompts, AI configuration or knowledge base; (e) circumvent rate limits, usage caps or the RoE requirement.
Wardizon retains all rights to the platform, the Pentest Intelligence Engine, its AI modules, knowledge base and report templates. You retain all rights to scan findings, remediation plans and the data you supply. AI-generated content in your results becomes yours upon generation.
The Service is not offered under an availability SLA, and no service credits apply. We announce planned maintenance in advance by email whenever possible.
Personal data is processed under the Wardizon Privacy Policy (wardizon.com/privacy). For account data, Wardizon is the controller. For data about the Partner's End Clients and their systems, the Partner (or the End Client) is the controller and Wardizon acts as processor or sub-processor. A Data Processing Agreement is available on request at contato@wardizon.com.
The Service is provided "as is". No automated tool, including Wardizon, can detect all vulnerabilities. You are solely responsible for the interpretation and remediation of findings. Wardizon makes no warranty that any specific vulnerability will be detected.
To the maximum extent permitted by law, Wardizon's aggregate liability shall not exceed the fees you paid in the 12 months preceding the claim.
You may cancel at any time; access continues until the end of the period you have paid for. After that, you can ask us to delete your data; signed authorizations and audit records are kept as legal records, as described in the Privacy Policy.
These Terms are governed by the laws of the Federative Republic of Brazil. Disputes will be resolved in the courts of São Paulo, SP. Nothing in these Terms limits rights that cannot be waived under the law that applies to you.
Legal, sales and general questions: contato@wardizon.com · Support: support@wardizon.com