Website and Platform Terms of Use

1. Agreement

These Terms of Use govern access to and use of websites, portals and software operated by Capture The Bug Limited.

By accessing the Website or Platform, you agree to these Terms.

If you use the Platform on behalf of an organisation, you represent that you have authority to bind that organisation.

2. Our services

CTB provides cybersecurity technology and managed security services, including Penetration Testing as a Service.

These Terms govern general access and use.

Customer-specific Services are additionally governed by the applicable Customer Terms, Order Form, Statement of Work or other written agreement.

3. Accounts

You must:

• provide accurate information;
• maintain the confidentiality of credentials;
• use reasonable security controls;
• ensure only authorised individuals use your account; and
• promptly notify CTB of suspected account compromise.

You are responsible for activity performed through your account unless caused by CTB's breach of its obligations.

4. Licence

Subject to compliance with these Terms, CTB grants you a limited, non-exclusive, non-transferable and revocable right to access and use the Platform for legitimate internal business purposes.

No ownership rights are transferred.

5. Acceptable use

You must not:

• use the Platform unlawfully;
• attempt unauthorised access to CTB systems;
• introduce malware;
• interfere with Platform operation;
• bypass access controls;
• conduct unauthorised vulnerability scanning or penetration testing against CTB infrastructure;
• copy or scrape Platform content at scale without permission;
• reverse engineer the Platform except where such restriction is prohibited by law;
• attempt to obtain source code;
• impersonate another person;
• use the Platform to infringe third-party rights; or
• use the Platform to facilitate unlawful cyber activity.

6. Authorised security testing

Nothing in these Terms grants permission to test CTB systems.

Security testing against CTB infrastructure is permitted only where expressly authorised under a CTB Responsible Disclosure Policy or other written authorisation.

7. Customer responsibility for testing authority

Customers requesting penetration testing must ensure they have legal authority to authorise testing of all Target Systems.

Where infrastructure is owned, operated or hosted by a third party, the Customer must obtain necessary approvals before testing begins.

8. Intellectual property

CTB and its licensors retain all intellectual-property rights in:

• the Platform;
• Website;
• software;
• workflows;
• methodologies;
• branding;
• templates;
• documentation; and
• related technology.

Customer ownership of Customer Data and customer-specific deliverables is governed by applicable Customer Terms.

9. Feedback

If you provide product feedback, CTB may use it to improve its products and services without restriction, provided CTB does not publicly attribute confidential feedback to you without permission.

10. Third-party services

The Platform may integrate with third-party products.

CTB is not responsible for third-party services except to the extent expressly agreed.

11. Availability

We aim to maintain reliable Platform availability but do not guarantee uninterrupted or error-free operation.

Maintenance, security incidents, internet failures and circumstances outside our reasonable control may affect availability.

12. Suspension

CTB may suspend access where reasonably necessary to:

• protect security;
• prevent abuse;
• respond to legal requirements;
• address non-payment; or
• investigate a material breach.

Where practicable, CTB will provide notice.

13. Confidentiality

Information made available through the Platform concerning security vulnerabilities, customer systems or testing must be treated as confidential unless authorised for disclosure.

14. Disclaimer

Cybersecurity testing reduces risk but cannot establish that a system is completely secure.

The Platform and general Website content do not constitute a guarantee against compromise.

15. Liability

To the maximum extent permitted by law, CTB will not be liable under these general Website Terms for indirect, incidental, special or consequential loss arising solely from use of public Website content.

Liability for paid Services is governed by the applicable Customer Terms.

Nothing excludes liability that cannot legally be excluded.

16. Consumer protections

Nothing in these Terms excludes rights that cannot lawfully be excluded under applicable consumer legislation.

Where services are acquired for business purposes and applicable law permits contracting out of statutory consumer guarantees, the parties agree that such provisions are excluded to the maximum lawful extent.

17. Changes

We may update these Terms periodically.

Material changes affecting registered users will be communicated using reasonable means.

18. Governing law

These Terms are governed by New Zealand law.

The courts of New Zealand have jurisdiction in relation to disputes arising from these Terms.

19. Contact