Terms & Conditions

• "CYVORA" refers to the cybersecurity advisory and managed defence company operating this website.
• "Client" refers to the organisation or individual engaging our services.
• "Services" refers to the cybersecurity advisory, assessment, testing, detection, response and training offerings described on this site.

CYVORA provides cybersecurity services across six areas: Advise (Virtual CISO and governance), Assess (assessments and vulnerability management), Test (penetration testing), Detect (managed SOC and MDR), Respond (incident response and forensics), and Empower (security awareness). The specific scope, deliverables, timelines and fees for any engagement are defined in a separate written agreement or Statement of Work.

Certain managed and specialist capabilities may be delivered in collaboration with carefully selected technology and cybersecurity partners, while remaining under CYVORA's strategic oversight. Clients will be informed where partner delivery applies, and all partner involvement is governed by appropriate contractual and data protection arrangements.

To enable effective service delivery, the Client agrees to:

• Provide accurate and timely information about their environment and requirements.
• Grant necessary access and authorisation for agreed testing and assessment activities.
• Ensure all testing is authorised in writing before any engagement begins.
• Notify CYVORA promptly of any changes that may affect the scope or safety of an engagement.

CYVORA will only conduct penetration testing, social engineering or similar assessments on systems and assets for which the Client has provided explicit written authorisation. The Client is responsible for ensuring they have the legal right to authorise testing on all in-scope assets.

Both parties agree to keep confidential all information shared during an engagement, including assessment results, vulnerabilities identified and security findings. CYVORA handles client data in accordance with our Privacy Policy and applicable data protection law.

All reports, methodologies and deliverables provided by CYVORA remain our intellectual property unless otherwise agreed in writing. The Client receives a licence to use deliverables internally for their intended purpose. Reports may not be redistributed or published without written consent.

Cybersecurity services cannot guarantee the complete absence of security incidents. To the fullest extent permitted by law, CYVORA's liability for any claim arising from our services is limited to the fees paid for the specific engagement giving rise to the claim. We are not liable for indirect, incidental or consequential damages.

Fees, payment terms and invoicing schedules are specified in the applicable agreement. Unless otherwise stated, invoices are payable within 30 days. Late payments may incur interest in accordance with applicable law.

Either party may terminate an engagement in accordance with the terms of the applicable agreement. Upon termination, the Client pays for services rendered up to the termination date.

These Terms are governed by the laws of the Republic of Cyprus. Any disputes shall be subject to the exclusive jurisdiction of the Cypriot courts, unless otherwise agreed.

We may update these Terms from time to time. The "Last updated" date reflects the most recent revision. Continued use of our services after changes constitutes acceptance of the updated Terms.

For questions about these Terms, contact info@cyvora.com.