Audit Engagement Terms
Offered by ZuluSec LLC, Birmingham, Alabama.
These terms cover the security audit. Zero-trust architecture, compliance hardening, platform engineering, and automation engineering are governed by the engagement agreement issued for that specific work, which you receive after the scoping call and sign before anything starts.
Scope. Audits cover the environment agreed at the scoping call (one environment for Baseline; up to three agreed environments for Standard; on-prem sites up to 25 systems each). Work outside that boundary requires a separate engagement.
Access. Client provides read-only credentials. ZuluSec does not modify client systems during an audit and does not perform active exploitation.
Deliverables. Findings report delivered as agreed at the scoping call (typically within one week for Baseline, two for Standard, from the date access is granted).
Confidentiality. ZuluSec keeps everything it sees and everything it reports confidential. Findings are shared only with the client. Credentials are destroyed at engagement end.
Payment. Scope and the fixed price are confirmed at the scoping call and quoted in writing. You sign the engagement agreement and access authorization, and pay, before any work begins.
Refunds. Full refund any time before work begins. After work begins, fees are non-refundable, but ZuluSec will make reasonable efforts to address concerns about the deliverable.
Liability. An audit is a point-in-time review and does not guarantee the absence of vulnerabilities or future breaches. Liability is limited to fees paid for the engagement.