Terms of Engagement
Engagement scope
All engagements are conducted against agreed targets only. Testing against systems not explicitly in-scope is strictly prohibited. A signed scope document is required before any testing begins.
Payment
A fixed-price quote is issued after the discovery call. Payment is due before testing begins. No refunds once testing has commenced.
6-Month Security Guarantee
The guarantee activates upon successful completion of the post-mitigation retest. It covers in-scope vulnerabilities for six calendar months from the retest date. It does not cover: new features added after the engagement, scope changes, third-party integrations not in-scope, or infrastructure outside the agreed boundary.
Free Retest Policy
One free retest is included per engagement, to be used within 90 days of report delivery. Subsequent retests or retests after 90 days are billed separately at a reduced rate.
Confidentiality
All engagement details, findings, and client data are treated as strictly confidential under mutual NDA. Raqib SecOps will not disclose engagement details or use findings for any purpose other than delivering the agreed report.
Responsible disclosure
Raqib SecOps follows responsible disclosure practices. Critical findings are communicated verbally within 24 hours of discovery, before the final report is delivered.
Last updated: August 2026