Terms & Conditions
Effective Date : 9 March 2026
1. Purpose of This Notice
This Cybersecurity Risk Warning Notice (“Notice”) is intended to inform users and clients about the inherent risks associated with digital technologies, online interactions, and cybersecurity practices.
Despite following industry best practices, no system can be guaranteed 100% secure.
By using our website, engaging with our content, or availing our services, you acknowledge and understand the risks described in this Notice.
2. No System Is Completely Secure
All digital systems — including websites, networks, cloud services, applications, and devices — are susceptible to:
• Cyberattacks
• Vulnerability exploitation
• Misconfigurations
• Unauthorized access
• Human errors
• Zero-day threats
• Third-party service failures
Even the most advanced cybersecurity solutions cannot eliminate all risks.
3. Inherent Cybersecurity Risks
You acknowledge that:
• Internet-based communication may be intercepted, modified, or lost
• Malware, phishing, ransomware, and social engineering threats are continuously evolving
• No VAPT or security assessment can detect every vulnerability
• Threat actors may exploit new vulnerabilities after assessments are completed
• Cloud and third-party platforms introduce shared-responsibility risks
• User behaviour, device hygiene, and weak passwords significantly impact security
4. Risks When Using Our Website
When using our website or digital platforms, risks may include:
• Data interception during transmission
• Unauthorized access attempts
• Downtime or disruption
• Tracking and analytics cookies (if consented)
• Possible technical vulnerabilities
We implement security controls, but risks cannot be fully eliminated.
5. Risks During Cybersecurity Services (VAPT, SOC, GRC, NOC)
5.1 VAPT (Vulnerability Assessment & Penetration Testing)
VAPT activities involve controlled testing and can sometimes lead to:
• Temporary service disruptions
• High resource utilization
• Triggering of security alerts
• System slowdowns
• False positives or negatives
Clients must ensure proper backups and maintenance windows before assessments.
5.2 SOC & Monitoring Services
Even with continuous monitoring:
• Zero-day threats may evade detection
• Alerts may be delayed due to third-party dependencies
• Log sources may fail or stop transmitting
• Client misconfigurations may cause monitoring gaps
5.3 GRC & Compliance Services
Compliance does not guarantee security.
ISO and industry standards reduce risk but cannot eliminate:
• Insider threats
• Human errors
• Unpatched vulnerabilities
• Attacks on third-party tools
5.4 Cloud & Infrastructure Risks
Using cloud services introduces risks such as:
• Multi-tenant vulnerabilities
• Shared responsibility gaps
• Data residency risks
• Provider-level outages
• Misconfigured storage buckets
6. Responsibilities of Users & Clients
To mitigate risks, users and clients are responsible for:
• Using strong, unique passwords
• Enabling Multi-Factor Authentication (MFA) wherever possible
• Maintaining updated systems and devices
• Following recommended security guidelines
• Ensuring proper backups before assessments
• Not sharing sensitive data unnecessarily
• Promptly reporting suspicious activity
Cybersecurity is a shared responsibility, not solely dependent on DefendX.
7. No Guarantee or Warranty
DefendX Cyber Services LLP does not guarantee:
• Complete security of systems or data
• Uninterrupted operations
• Detection of all vulnerabilities
• Immunity from threats
• Permanent compliance without continuous maintenance
Our services are based on best-effort methodologies, current threat intelligence, and industry standards.
8. Third-Party Dependencies
Cybersecurity may rely on tools or platforms provided by:
• Cloud providers
• Security vendors
• Analytics tools
• Communication platforms
We are not responsible for failures, breaches, or outages originating from third-party services.
9. Acceptance of Risk
By:
• Using this website
• Submitting personal data
• Engaging with our chatbot
• Availing DefendX cybersecurity services
you acknowledge and accept these inherent cybersecurity risks.
10. Contact Information
DefendX Cyber Services LLP
Ahmedabad, Gujarat, India
