Acceptable Use Policy

1. Purpose

Syntrix provides security services strictly for lawful, defensive and authorised purposes. This policy applies to anyone who engages our services, receives our reports, or uses this website.

2. Permitted use

• commissioning testing of systems you own or are authorised to have tested;
• using our reports internally to understand and remediate security risks;
• sharing findings with your own staff, contractors or advisers on a need-to-know basis.

3. Prohibited use

You must not:

• request or attempt to obtain testing of systems you do not own or are not authorised to test;
• use our services, tools or reports to gain unauthorised access to any system, or to facilitate any unlawful activity;
• use information from our reports to attack, exploit or harm any person, organisation or system;
• misrepresent our findings, or present a report as a certification or guarantee of security;
• resell, republish or commercially exploit our deliverables without our written consent;
• attempt to disrupt, probe or compromise this website outside our Responsible Disclosure Policy.

4. Lawful and ethical conduct

All engagements are conducted in accordance with UK law, including the Computer Misuse Act 1990. We reserve the right to decline or terminate any engagement that would require unlawful activity, or where authorisation cannot be satisfactorily established.

5. Consequences of misuse

Breaching this policy may result in suspension or termination of services, and — where appropriate — referral to the relevant authorities. We will cooperate fully with lawful investigations into misuse of our services.

6. Reporting misuse

If you become aware of any misuse of our services or deliverables, please contact us immediately at syntrixkal@gmail.com.