Terms of use

This site is information, not an offer

The pages here describe what RIA Labs does and what it costs. They are not a contract, and prices are indicative until we have scoped your target and put something in writing. Submitting the form starts a conversation and commits neither of us to anything.

Nothing is tested without authorisation

This is the rule the whole business rests on. We test a target only when there is a signed agreement and a written authorisation naming it, from someone entitled to give it. A free scan is no exception. Nominating a target on the form is a request, not permission, and we will not run anything against it until the paperwork exists. The engagement page sets out what that involves.

It follows that you must not nominate a system you do not control or cannot authorise on someone else’s behalf. If you do, you are asking us to break the law, and we will decline.

What testing does and does not promise

Security testing samples a system; it does not certify one. We report what we find and can demonstrate, and a report with no findings is not evidence that a system is sound. Nothing we deliver is a guarantee against a breach, and nothing on this site should be read as one.

Findings on compiled binaries are reached statically: they are pinned to the exact function and evidenced, but nothing is executed to prove them. We label them that way in the report and we will not describe them as exploited.

The content on these pages

The text, design and code of this site belong to Saffron Dynamics. Quote us, link to us, or send a page to a colleague. Do not republish it as your own.

Availability

We keep the site up and the form working, but neither is a service you are paying for, and we make no commitment about either. If the form fails, email us at info@ria-labs.com and that reaches the same place.

Changes

We may revise these terms, and the date at the top will say when we last did. The agreement covering an engagement in progress does not change because a web page did.