[TERMS OF SERVICE]
These terms govern use of the HEXBOX website and customer workspace. By using the service, you agree to these conditions. A signed engagement or service agreement may set additional terms for your organization.
Provide accurate account and company information, keep access to your email secure, and invite only authorized team members. You are responsible for activity carried out through your account. Company-domain confirmation does not replace DNS ownership verification or authorization to test.
Only submit systems that you own or have explicit permission to assess. Before an assessment, complete the required ownership checks and approve its scope, exclusions, credentials, and operating limits. Permission for one domain or environment does not automatically authorize testing of another. You can request an emergency stop from the workspace.
Do not use HEXBOX to access systems without permission, disrupt services, steal information, distribute malicious software, or evade agreed safeguards. Do not upload credentials or personal data that you are not authorized to share. We may restrict access or stop an assessment when authorization is missing or activity violates these conditions.
Assessments provide evidence within the authorized scope and conditions at the time of testing. They cannot identify every vulnerability or guarantee security. Historical discoveries do not prove current exposure or ownership. You remain responsible for reviewing findings, remediation, backups, and operational decisions. Availability and assessment timing may vary; any service commitments are defined in your engagement agreement.
Our Privacy Policy explains website information handling. Assessment data, credentials, confidentiality, retention, and any data-processing requirements should be defined in the applicable engagement agreement before testing. Prices, payment terms, and country-specific billing details are agreed separately. Creating an account does not itself authorize a paid assessment.
You may stop using the workspace and contact us about closing your account. We may suspend access for misuse or loss of authorization. Any continuing obligations for assessment data or payment are governed by your engagement agreement and applicable law. Updates to these terms are published on this page. For questions or to resolve a concern, contact contact@hexbox.ma.