Terms of Service

By accessing keyrios.com, requesting a briefing, or entering into a service engagement with Keyrios, you agree to be bound by these Terms of Service (“Terms”) and our Privacy Policy. If you are accepting on behalf of a company or other legal entity, you represent that you have the authority to bind that entity.

These Terms apply alongside any specific engagement letter, statement of work, or master services agreement entered into between you and Keyrios. In the event of a conflict, the terms of a signed engagement agreement will take precedence.

Keyrios provides professional services across four disciplines:

• Crime & Threat Intelligence: city-level risk scoring, incident monitoring, analyst briefings, and threat feeds.
• Cybersecurity Operations: vulnerability assessment, penetration testing, incident response, security monitoring, and red team operations.
• Digital Forensics: device and memory forensics, network analysis, evidence preservation, chain of custody documentation, and expert witness services.
• Application Security: code review, static analysis (SAST), web and API penetration testing, DevSecOps integration, and mobile application security.

The specific scope, deliverables, timeline, and commercial terms for any engagement are set out in a separate engagement letter or statement of work agreed in writing between the parties.

Certain Keyrios services — including penetration testing, active incident response, and device forensics — require explicit written authorisation from the client prior to commencement. You represent and warrant that you have all necessary rights, permissions, and authorisations to request the services in scope, including in respect of any third-party systems, data, or infrastructure involved.

Keyrios will not conduct any offensive or intrusive security activity without a signed authorisation document. Any unauthorised scope extension or activity directed at third parties without prior written agreement is strictly outside the terms of any engagement.

Both parties agree to treat as confidential all non-public information shared in connection with an engagement (“Confidential Information”). Confidential Information includes — but is not limited to — engagement findings, client data, methodologies, pricing, and strategic information.

Confidentiality obligations survive termination of an engagement for a period of five (5) years, except where information enters the public domain through no fault of either party, or disclosure is required by applicable law or a valid legal process.

Keyrios will not disclose client identities or the existence of an engagement to any third party without prior written consent, except where required by law.

All methodologies, tools, frameworks, and pre-existing know-how used by Keyrios in delivering services remain the exclusive intellectual property of Keyrios. Nothing in these Terms or any engagement agreement transfers ownership of Keyrios proprietary tools or methodologies.

Deliverables produced specifically for a client — such as reports, forensic packages, briefing documents, and code remediation guidance — are assigned to the client upon receipt of full payment for the relevant engagement. Keyrios retains the right to use anonymised and aggregated insights from engagements to improve its services, subject always to confidentiality obligations.

As a client, you agree to:

• Provide accurate, complete, and timely information and access necessary for Keyrios to deliver the agreed services.
• Ensure all authorisations, consents, and permissions required for the engagement are obtained in advance.
• Use Keyrios deliverables — including reports, intelligence outputs, and findings — only for lawful purposes and in accordance with applicable law.
• Not distribute, publish, or disclose Keyrios deliverables to third parties without prior written agreement.
• Promptly notify Keyrios of any change in circumstances that may affect the scope or nature of the engagement.

Fees for services are set out in the relevant engagement letter or statement of work. Unless otherwise agreed, invoices are payable within 30 days of the invoice date. Late payments may incur interest at the rate applicable under the Late Payment of Commercial Debts legislation in the relevant jurisdiction.

Keyrios reserves the right to suspend services where invoices remain unpaid beyond 60 days, after providing written notice. All fees are exclusive of applicable taxes, which will be added where required by law.

To the fullest extent permitted by applicable law, Keyrios’s total liability arising from or in connection with any engagement — whether in contract, tort (including negligence), or otherwise — shall not exceed the total fees paid by you for the specific engagement giving rise to the claim in the twelve (12) months preceding the event.

Keyrios shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, loss of data, business interruption, or reputational harm, even if advised of the possibility of such damages.

Nothing in these Terms limits liability for death or personal injury caused by negligence, fraud, or any other liability that cannot be excluded by law.

Keyrios warrants that services will be delivered with reasonable skill and care by qualified professionals. Keyrios does not warrant that its services will identify all vulnerabilities, threats, or risks, or that deliverables will be free from error in all circumstances. The nature of security and intelligence work means that findings represent the state of assessed systems at the time of assessment.

Our website and publicly available content are provided “as is” without warranty of any kind. Keyrios does not guarantee the accuracy or completeness of any publicly available information on keyrios.com.

Either party may terminate an engagement for convenience with 30 days’ written notice, unless a shorter or longer notice period is specified in the engagement agreement. Keyrios may terminate immediately on written notice where: (a) the client has materially breached these Terms or the engagement agreement and failed to remedy the breach within 14 days of notice; (b) the client becomes insolvent; or (c) continuing the engagement would expose Keyrios to legal or regulatory risk.

On termination, the client will pay for all services rendered up to the termination date. Clauses relating to confidentiality, intellectual property, limitation of liability, and governing law survive termination.

These Terms and any disputes arising from them are governed by the laws of the jurisdiction in which Keyrios is incorporated, without regard to conflict of law principles. The parties agree to attempt in good faith to resolve any dispute through negotiation before resorting to formal dispute resolution.

For details of our registered jurisdiction, please contact us at contact@keyrios.com.

Keyrios may update these Terms from time to time. Material changes will be communicated via our website. Continued use of our services or website following notice of a material change constitutes acceptance of the revised Terms. For active engagements, the Terms in force at the time the engagement was agreed shall apply unless both parties agree in writing to the updated Terms.

For questions about these Terms, or to discuss an engagement, please contact:

Keyrios
contact@keyrios.com