Terms of Service

These Terms of Service ("Terms") constitute a legally binding agreement between you (whether individually or on behalf of an entity, "Client" or "User") and EonCyber ("Company", "we", "us", or "our"), regarding your access to and use of our website (eoncyber.in) and any associated cybersecurity services.

By accessing our platform or signing a Statement of Work (SOW), Master Services Agreement (MSA), or Service Order, you agree that you have read, understood, and agreed to be bound by all of these Terms. If you do not agree with all of these terms, you are expressly prohibited from using our services and must discontinue use immediately.

EonCyber delivers professional enterprise cybersecurity solutions, including but not limited to:

Each service engagement is specifically delimited by a dedicated Statement of Work (SOW) defining the target IP addresses, URLs, test windows, and methodology (Black Box, Grey Box, or White Box).

Under our Rules of Engagement:

• EonCyber ethical hackers will operate strictly within the defined scope, timing windows, and escalation paths agreed upon in the SOW.
• Unless explicitly contracted for stress/DDoS testing, our team uses commercially reasonable efforts to prevent service interruptions, disruption of business processes, or data loss.
• Should a critical, actively exploitable zero-day or existing breach be discovered during testing, EonCyber will immediately notify the designated emergency contact.

To enable effective security services, Client agrees to:

• Data Backups: Maintain full, verified, and restorable backups of all production systems, databases, and configurations prior to the commencement of any active security assessment.
• Emergency Contacts: Provide 24/7 reachable technical contacts with administrative access throughout the testing window.
• Whitelisting & Access: Coordinate firewall exceptions, IP whitelisting for EonCyber testing nodes, and test credentials where required by the scope.

Client Deliverables: Upon full payment of all contracted invoices, Client shall own all rights, title, and interest in the customized final Assessment Reports, executive summaries, and vulnerability findings prepared specifically for Client.

Company Intellectual Property: EonCyber retains sole ownership of all pre-existing methodologies, proprietary testing scripts, automated scanner tooling, custom threat intelligence feeds, report templates, and know-how utilized during the engagement.

Both parties agree that all information marked confidential or reasonably understood to be proprietary—including source code, vulnerability details, network diagrams, exploit demonstrations, and business strategies—shall be held in strict confidence.

Neither party shall disclose such confidential information to any third party without prior written consent, except to employees and contractors requiring knowledge for service delivery under identical confidentiality obligations.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT SHALL EONCYBER BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES (INCLUDING LOSS OF PROFITS, DATA LOSS, OR SYSTEM DOWNTIME). TOTAL AGGREGATE LIABILITY UNDER ANY CLAIM SHALL NOT EXCEED THE TOTAL FEES PAID BY CLIENT UNDER THE APPLICABLE STATEMENT OF WORK IN THE PRECEDING SIX (6) MONTHS.

Fees for services are set forth in the applicable proposal or SOW. Unless specified otherwise:

• Invoices are payable within fifteen (15) to thirty (30) days of the invoice date as specified in the agreement.
• All prices are exclusive of applicable Indian Goods and Services Tax (GST) or international withholding taxes, which shall be added at prevailing statutory rates.
• Late payments may result in immediate suspension of continuous SOC monitoring or re-testing deliverables until resolved.

Either party may terminate an engagement or MSA upon thirty (30) days written notice, or immediately if the other party commits a material breach and fails to cure within fourteen (14) days of written notice.

Upon termination, Client shall pay for all security services rendered up to the effective termination date, and all confidentiality provisions shall survive indefinitely.

These Terms shall be governed by and construed in accordance with the laws of the Republic of India and the Information Technology Act, 2000 (including relevant amendments).

Any disputes arising out of or in connection with these Terms or cybersecurity engagements shall be subject to the exclusive jurisdiction of the competent courts in Surat, Gujarat, India.