Skip to content
Back to home

Authorisation Agreement

Security testing is only lawful with explicit permission. This page explains the authorisation that must be signed before any Syntrix engagement begins.

Last updated: 17 July 2026

1. Why authorisation is required

Under the Computer Misuse Act 1990, accessing or testing computer systems without authorisation is a criminal offence. To protect both you and us, Syntrix requires a signed authorisation agreement before any testing activity takes place. This is non-negotiable and applies to every engagement.

2. What the agreement confirms

By signing the authorisation, you confirm that:

  • you are the owner of the target network, system or application, or are duly authorised to permit testing of it on the owner's behalf;
  • you have obtained any necessary permissions from relevant third parties (for example, hosting providers, landlords or platform operators);
  • you consent to Syntrix performing the agreed testing activities within the defined scope;
  • you understand the nature of the testing and the inherent risks involved.

3. Scope of authorisation

The agreement records the precise scope: the assets in scope, any assets explicitly excluded, the testing window, permitted techniques, and points of contact. Syntrix will act strictly within this scope and will not test anything outside it.

4. Testing window and conduct

Testing is carried out during the agreed window using controlled, professional methods. We avoid destructive techniques and take care to minimise any impact on availability. If a critical issue is discovered that poses immediate risk, we will notify you promptly.

5. Emergency contact and stop conditions

The agreement includes an emergency contact and “stop” conditions. You may pause or halt testing at any time by contacting us, and we will cease activity as soon as reasonably possible.

6. Confidentiality

All information obtained during the engagement is treated as strictly confidential and handled in line with our Privacy Policy. Findings are shared only with you or your authorised representatives.

7. How it works

Once we've agreed your scope, we'll provide the authorisation agreement for signature. Testing begins only after it is signed and returned. To get started, email syntrixkal@gmail.com.