1.1 Agreement to Terms
These Terms of Service (“Terms”) constitute a legally binding agreement between you (“Client,” “you,” or “your”) and Nullray (“Company,” “we,” “us,” or “our”) governing your access to and use of our website at [www.nullray.com], our security platform, and all related services (collectively, the “Services”).
BY ACCESSING OR USING OUR SERVICES, YOU AGREE TO BE BOUND BY THESE TERMS. IF YOU DO NOT AGREE, YOU MUST NOT ACCESS OR USE OUR SERVICES.
1.2 Definitions
"Services" means all cybersecurity services provided by Nullray, including but not limited to AI Security, Cloud Security, Red Teaming, Governance Risk and Compliance (GRC), Managed Security Services, Data Protection, Virtual CISO, Vulnerability Management, and Application Security.
"Client Data" means any data, information, or materials provided by you to Nullray in connection with the Services.
"Deliverables" means all reports, findings, documentation, and other materials provided by Nullray to you as part of the Services.
"Platform" means Nullray's security intelligence platform and any associated software, tools, or dashboards.
"Personal Data" means any information relating to an identified or identifiable natural person, as defined under applicable data protection laws.
"SOW" means a Statement of Work or service agreement executed between the parties.
"DPA" means the Data Processing Agreement referenced in Section 1.10.
1.3 Eligibility
To use our Services, you must:
Be at least eighteen (18) years of age.
Have the legal authority to bind your organization to these Terms.
Not be prohibited from using the Services under applicable laws, including export control and sanctions laws.
Provide accurate, current, and complete information during registration or engagement.
Not be a resident of any jurisdiction subject to comprehensive trade sanctions imposed by [Jurisdiction].
1.4 Scope of Services
Nullray provides offense-led cybersecurity services designed to identify, validate, and help remediate security vulnerabilities. Our Services include:
AI Security: Securing AI systems, models, and pipelines against emerging threats.
Cloud Security: Hardening multi-cloud and hybrid environments against misconfiguration and exploitation.
Red Teaming: Adversary simulation and offensive security testing.
Governance, Risk and Compliance (GRC) : Aligning security programs with regulatory requirements.
Managed Security Services: Continuous monitoring, detection, and response.
Data Protection: Safeguarding sensitive data across its lifecycle.
Virtual CISO: Strategic security leadership and advisory services.
Vulnerability Management: Proactive identification and remediation of vulnerabilities.
Application Security: Securing applications against unauthorized access and attacks.
Specific deliverables, timelines, and scope are defined in separate SOWs or service agreements.
Service Level: Unless otherwise specified in the applicable Statement of Work (SOW), Nullray shall provide its services in accordance with the agreed scope, deliverables, timelines, and service standards outlined in the SOW. Service delivery timelines, reporting obligations, response times, and any applicable service-level commitments shall be mutually agreed upon in writing. Nullray shall exercise commercially reasonable efforts and professional diligence in performing its services. Any service credits, penalties, or specific performance guarantees shall apply only where expressly agreed upon in the applicable SOW.
1.5 Client Responsibilities
You agree to:
Provide accurate and complete information necessary for service delivery.
Grant Nullray authorized access to systems, networks, and environments as required.
Obtain all necessary consents and permissions before engaging Nullray, including from any third parties whose systems may be tested.
Designate a point of contact for coordination and approvals.
Not use the Services for any unlawful, unauthorized, or malicious purpose.
Maintain the confidentiality of any credentials or access provided by Nullray.
Promptly notify Nullray of any security incidents or breaches affecting the Services.
Ensure that any systems provided for testing are owned or lawfully controlled by you.
Comply with all applicable laws, including export control and sanctions regulations.
1.6 Prohibited Conduct
You agree not to:
Use the Services to conduct unauthorized attacks on third parties.
Reverse engineer, decompile, or disassemble any part of the Platform.
Attempt to gain unauthorized access to Nullray's systems or infrastructure.
Share, resell, or sublicense the Services without written consent.
Use the Services in violation of any applicable laws or regulations.
Introduce malware, viruses, or harmful code into the Platform.
Interfere with or disrupt the integrity or performance of the Services.
Use automated tools to scrape, crawl, or extract data from the Platform.
Use the Services to develop competing products or services.
Circumvent any access controls, rate limits, or security measures.
1.7 Fees and Payment
Fees for Services are specified in the applicable SOW or service agreement.
Invoices are due within [XX] days of issuance unless otherwise stated.
Late payments may incur interest at [X]% per month or the maximum permitted by law, whichever is lower.
All fees are non-refundable unless otherwise specified in writing.
You are responsible for all applicable taxes, duties, and governmental charges.
Auto-Renewal: Subscription-based Services renew automatically for successive periods of [X] unless either party provides written notice of non-renewal at least [30] days before the end of the then-current term. Renewal pricing will be communicated at least [60] days before renewal.
Price Changes: Nullray may adjust fees upon renewal with at least [60] days' prior written notice.
Disputed Invoices: You must notify Nullray of any invoice dispute within [15] days of receipt.
1.8 Intellectual Property
1.8.1 Nullray Ownership
Nullray retains all rights, title, and interest in:
The Platform, including all software, algorithms, and technology.
Methodologies, frameworks, and tools used to deliver Services.
Pre-existing intellectual property and know-how.
Any improvements, modifications, or derivative works.
Aggregated, de-identified, or anonymized data derived from the Services.
1.8.2 Client Ownership
You retain all rights, title, and interest in:
Your Client Data and confidential information.
Your pre-existing intellectual property.
Any data you provide as input to the Services ("Input Data").
1.8.3 Deliverables License
Upon full payment, Nullray grants you a non-exclusive, non-transferable license to use Deliverables solely for your internal security purposes. This license does not permit resale, redistribution, or public disclosure without written consent.
1.8.4 Feedback
Any feedback, suggestions, or ideas you provide may be used by Nullray without restriction or compensation.
1.9 Confidentiality
Each party agrees to protect the other's confidential information with reasonable care, and in no event less than the care it uses for its own confidential information.
Confidential information includes non-public business, technical, and security data.
Obligations survive termination for a period of [X] years, or indefinitely for trade secrets.
Confidentiality does not apply to information that is publicly available, independently developed, received from a third party without restriction, or required to be disclosed by law (provided prompt notice is given to the other party).
Permitted Disclosures: Confidential information may be disclosed to employees, contractors, and professional advisors on a need-to-know basis who are bound by confidentiality obligations at least as protective as these Terms.
1.10 Data Protection
Nullray processes Personal Data in accordance with our Privacy Policy and applicable data protection laws.
We implement appropriate technical and organizational measures to protect data, including encryption in transit (TLS 1.2+) and at rest (AES-256).
Data processing terms are governed by our Data Processing Agreement ("DPA"), which is incorporated by reference into these Terms. The DPA includes:
Nature and purpose of processing
Categories of Personal Data and Data Subjects
Duration of processing and permitted instructions
Confidentiality obligations
Security measures (including MFA and RBAC)
Breach notification procedures
Sub-processor management
Assistance with data subject rights requests
Deletion and return of data upon termination
You are responsible for ensuring lawful collection and transfer of Client Data.
Where Nullray acts as a Data Processor (as defined under GDPR Article 28 or India DPDP Act Section 8(2)), we process Personal Data only on your documented instructions.
1.11 Warranties and Disclaimers
1.11.1 Nullray Warranties
Nullray warrants that:
Services will be performed in a professional and workmanlike manner consistent with industry standards.
Personnel have appropriate skills, experience, and certifications.
Deliverables will materially conform to the SOW.
The Platform will comply with applicable laws in material respects.
1.11.2 Disclaimers
EXCEPT AS EXPRESSLY STATED, THE SERVICES AND PLATFORM ARE PROVIDED "AS IS" AND "AS AVAILABLE." NULLRAY DISCLAIMS ALL OTHER WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.
Nullray does not warrant that:
The Services will identify all vulnerabilities, threats, or security gaps.
The Platform will be uninterrupted, timely, or error-free.
Findings will result in complete security or prevent all breaches.
AI-generated outputs will be accurate, complete, or suitable for any particular purpose. All AI-generated outputs should be independently reviewed and validated by qualified personnel.
1.12 Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW
NULLRAY SHALL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, INCLUDING LOST PROFITS, LOST DATA, OR BUSINESS INTERRUPTION.
NULLRAY’S TOTAL AGGREGATE LIABILITY SHALL NOT EXCEED THE FEES PAID IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.
THESE LIMITATIONS DO NOT APPLY TO INDEMNIFICATION OBLIGATIONS, CONFIDENTIALITY BREACHES, INTELLECTUAL-PROPERTY INFRINGEMENT, OR GROSS NEGLIGENCE OR WILLFUL MISCONDUCT.
1.13 Indemnification
1.13.1 By Client
You agree to indemnify, defend, and hold harmless Nullray and its officers, directors, employees, and agents from any claims, damages, losses, or expenses (including reasonable legal fees) arising from:
Your use of the Services.
Your violation of these Terms.
Your infringement of third-party rights.
Your Client Data.
Systems you provided for testing that were not lawfully owned or controlled by you.
1.13.2 By Nullray
Nullray agrees to indemnify, defend, and hold harmless you from any third-party claims alleging that the Platform infringes a valid patent, copyright, or trade secret, provided you promptly notify Nullray and allow Nullray to control the defense.
1.14 Term and Termination
These Terms remain in effect until terminated.
Either party may terminate for material breach with [30] days written notice and an opportunity to cure.
Nullray may suspend or terminate access immediately for violation of these Terms, security risk, or legal requirement.
Effect of Termination: Upon termination, you must cease all use of the Services and return or destroy confidential information within [30] days.
Survival: Provisions that by nature should survive termination will survive, including Sections 1.8 (Intellectual Property), 1.9 (Confidentiality), 1.12 (Limitation of Liability), 1.13 (Indemnification), and 1.15 (Governing Law).
Data Return/Deletion: Upon termination, Nullray will return or delete Client Data in accordance with the DPA and applicable law.
1.15 Governing Law, Disputes, and Arbitration
1.15.1 Governing Law
These Terms are governed by the laws of [Jurisdiction] , without regard to conflict of law principles.
1.15.2 Dispute Resolution
Informal Resolution: The parties agree to attempt to resolve any dispute informally for at least [30] days before initiating formal proceedings.
Binding Arbitration: Any unresolved dispute shall be resolved through binding arbitration administered by [Arbitration Body, e.g., JAMS, ICC] in accordance with its rules. The arbitration shall take place in [City, State/Country] .
Class Action Waiver: TO THE FULLEST EXTENT PERMITTED BY LAW, YOU AND NULLRAY AGREE THAT EACH PARTY MAY BRING CLAIMS AGAINST THE OTHER ONLY IN AN INDIVIDUAL CAPACITY AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS, COLLECTIVE, OR REPRESENTATIVE PROCEEDING.
Arbitration Opt-Out: You may opt out of arbitration by sending written notice to [legal@nullray.com] within [30] days of first accepting these Terms.
Claims Period: Claims must be brought within [one (1)] year of arising, unless a shorter period is permitted by law.
Injunctive Relief: Either party may seek injunctive relief in court to protect its intellectual property or confidential information.
1.16 Force Majeure
Neither party shall be liable for failure or delay in performance caused by events beyond its reasonable control, including natural disasters, war, terrorism, pandemics, government actions, or infrastructure failures. The affected party must notify the other promptly and use reasonable efforts to resume performance.
1.17 Export Compliance
You agree to comply with all applicable export control and sanctions laws, including those of [Jurisdiction] . You represent that you are not located in, under the control of, or a national or resident of any sanctioned country or on any prohibited party list.
1.18 Modifications to Terms
Nullray reserves the right to modify these Terms at any time. We will provide notice of material changes via email or Platform notification at least [30] days before the changes take effect. Continued use of the Services after changes constitutes acceptance. If you do not agree, you must stop using the Services.
1.19 DMCA / Copyright Policy
If you believe your copyrighted work has been infringed on our Platform, please notify our Designated Copyright Agent:
DMCA Agent
Nullray
Address: [Company Address]
Email: [dmca@nullray.com]
Your notice must include: (a) identification of the copyrighted work; (b) identification of the infringing material; (c) your contact information; (d) a statement of good faith belief; (e) a statement of accuracy under penalty of perjury; and (f) your signature.
1.20 Contact Information
For questions about these Terms, contact:
Nullray
Address: [Company Address]
Email: info@nullray.com
Phone: +91 9360039080