Terms of Service

Verilax is intended solely for lawful, authorized security testing. Users are responsible for obtaining written permission before testing any system, network, application, device, account, cloud environment, or third-party infrastructure. Unauthorized use is prohibited.

Your use of Verilax is governed by the Acceptable Use Policy, which is incorporated into these Terms by reference. Activity prohibited by the Acceptable Use Policy is also prohibited by these Terms.

You must be at least 18 years old and capable of forming a binding contract to create an account. You must provide accurate information and keep your credentials confidential. You are responsible for all activity that occurs under your account.

Verilax reserves the right to refuse or terminate accounts that present an unacceptable compliance, sanctions, or export-control risk.

You are solely responsible for ensuring that any system, network, asset, account, or third party you direct Verilax to test has authorized the testing in writing. Verilax does not verify or warrant the legitimacy of any individual engagement; that responsibility rests with you.

You will preserve evidence of authorization (rules of engagement, statements of work, internal change-management approvals) and make it available to Verilax on reasonable request in support of incident response.

The following activities are prohibited at all times, without exception:

• unauthorized access to any system, account, or data;
• credential theft outside an authorized engagement;
• deployment of malware, ransomware, or extortion payloads;
• botnet activity;
• destructive payloads;
• self-propagating payloads;
• unauthorized surveillance;
• data theft;
• attacks outside approved scope;
• service disruption of systems you do not control;
• use against systems for which you do not have written permission;
• use in violation of export-control, sanctions, or trade-compliance laws (see the Export Compliance Notice).

Verilax is offered free of charge during its beta period. Paid plans, when introduced, will be disclosed on the pricing page with at least 30 days of notice before any conversion to a paid tier.

Use of Verilax is also governed by the Privacy Policy, which describes what data is collected and how it is handled.

Verilax may suspend or terminate access immediately for any violation of these Terms, any reasonable suspicion of unlawful use, any deterioration in account or workspace standing, or any export-control /sanctions concern. Termination does not refund prepaid amounts where the termination follows a violation of these Terms.

Verilax is provided “as is” and “as available” without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. Security testing is inherently uncertain; no finding or absence of finding constitutes a guarantee of security.

To the maximum extent permitted by applicable law, Verilax shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss of profits, revenues, data, or business opportunities arising out of or in connection with your use of Verilax. Verilax's total aggregate liability shall not exceed the amounts paid by you to Verilax in the 12 months preceding the claim.

You agree to indemnify and hold Verilax harmless from and against any claims, damages, liabilities, and expenses arising out of your use of Verilax in violation of these Terms, the Acceptable Use Policy, or applicable law.

These Terms are governed by the laws of the State of [jurisdiction] without regard to conflict-of-law principles. Exclusive jurisdiction and venue for disputes lie in the state and federal courts located in [jurisdiction].

[Jurisdiction placeholders to be filled by counsel.]

Verilax may update these Terms from time to time. Material changes will be announced with reasonable advance notice. Continued use of Verilax after a change takes effect constitutes acceptance of the updated Terms.

Questions about these Terms should be directed to the contact listed on the Privacy Policy page.