These Terms & Conditions govern your access to and use of the CyberAzimut platform and services. By creating an account, starting a trial, or using the service, you agree to be bound by these terms.
CyberAzimut provides an External Attack Surface Management (EASM) platform that discovers, monitors and analyses the publicly reachable internet-facing assets of an organisation. The service is delivered as software-as-a-service (SaaS) and includes automated reconnaissance as well as, depending on the plan, analyst-led manual validation of findings.
You must be at least 18 years old and duly authorised to bind your organisation contractually. You are responsible for maintaining the confidentiality of your credentials and for all activity under your account. Access is authenticated via SSO or one-time password (OTP).
By registering for and using the service, you represent and warrant that: (a) you are the owner of, or have obtained explicit written authorisation from the owner of, all domains, IP addresses and other assets you submit for monitoring; (b) you hold the legal and organisational authority to permit CyberAzimut to perform automated reconnaissance — including DNS enumeration, port scanning, service banner analysis and certificate inspection — against those assets; and (c) where applicable under your subscription plan, you expressly authorise CyberAzimut analysts to conduct manual validation activities, including web application fingerprinting, header analysis and exposure confirmation, in order to verify, enrich or contextualise scan findings. You acknowledge that reconnaissance and validation activities generate network traffic directed at monitored assets and may trigger your organisation's intrusion-detection or security-monitoring systems or affect service availability; CyberAzimut bears no responsibility for such alerts, service disruptions, or any consequences thereof. Any disruption attributable to scanning activities must be reported as soon as possible to support@cyberazimut.com.
You will only use the service to monitor assets covered by the authorisation described in Section 3. You will not submit assets belonging to third parties without their explicit written consent. You will not use the service to attack, disrupt or exploit any system. You will not attempt to circumvent the platform's access controls, reverse-engineer its scanning signatures, or resell access to the service without prior written agreement from CyberAzimut. Violation of this section may lead to immediate suspension of your account without refund.
The service performs best-effort discovery of publicly reachable assets and analysis of their exposed configurations. CyberAzimut does not guarantee that all assets, vulnerabilities or misconfigurations will be discovered. Results may include false positives or false negatives. The service does not constitute a penetration test, red team engagement, or compliance audit and must not be represented as such. CyberAzimut is not liable for undetected vulnerabilities or for any incident arising from assets not surfaced by the platform.
Plans are billed monthly or annually in advance. Free trials last thirty days and require a payment method on file; we begin billing on day 31 unless you cancel before then. Plans can move up or down mid-period with prorated billing.
Monthly plans are non-refundable. Annual plans cancelled within 14 days of initial activation are refunded pro rata.
You retain all rights to your data and your assets. CyberAzimut retains all rights to the platform, models, signatures and aggregated, anonymised insights. You are granted a non-exclusive, non-transferable licence to use the service for the duration of your subscription.
Each party will protect the other party's confidential information with the same care it uses for its own (and never less than reasonable care). Confidentiality obligations survive termination for five years.
To the fullest extent permitted by applicable law, CyberAzimut provides the service on an "as is" and "as available" basis, without any express or implied warranty of any kind, including without limitation any warranty of merchantability, fitness for a particular purpose, or non-infringement. CyberAzimut does not warrant that the service will be uninterrupted, error-free, or that any specific asset, vulnerability or misconfiguration will be discovered or correctly characterised.
To the maximum extent permitted by law, CyberAzimut's total aggregate liability for any and all claims arising out of or relating to the service — including claims for missed findings, false positives, scan-triggered security alerts, or service unavailability — is capped at the fees paid by you to CyberAzimut in the twelve months preceding the claim. In no event will CyberAzimut be liable for indirect, incidental, special, consequential or punitive damages, including loss of revenue, loss of data, or business interruption, even if advised of the possibility of such damages.
You agree to indemnify, defend and hold harmless CyberAzimut, its officers, employees and agents from and against any claim, demand, loss, liability or expense (including reasonable legal fees) arising out of or relating to: (a) your breach of Section 3 (Authorization to scan and validate) or Section 4 (Acceptable use); (b) your use of the service in violation of any applicable law or regulation; or (c) any third-party claim resulting from your submission of assets you were not authorised to monitor.
You may cancel at any time from the dashboard. We may suspend or terminate for material breach, with notice when reasonably possible. Upon termination, you can export your data for 30 days; after that we delete it.
These terms are governed by the laws of the Province of Québec and the federal laws of Canada applicable therein, without regard to conflict-of-laws rules. Disputes will be resolved in the courts of the judicial district of Montréal.
Each organization receives a unique referral code, usable once per referred organization at signup. When a referred organization becomes and remains a paying subscriber, the referring organization receives a CA$10 credit applied to its account for each payment made by the referred organization; the referred organization receives a 50% discount on its first invoice. Credits apply to upcoming invoices, may exceed a single invoice amount and carry over, and have no cash value — they are non-transferable and non-refundable. CyberAzimut may modify, suspend or terminate the referral program at any time, and may cancel credits obtained through fraud, self-referral or any circumvention of these terms.
Questions about these terms? Write to info@cyberazimut.com.