PentriarchPentriarch
Book a demo
Back to home

Terms of Service

Last updated: February 24, 2026

Pentriarch provides authorized, AI-orchestrated security validation services. These Terms govern your access to and use of the platform and are designed to protect all parties during security testing activities.

1. Acceptance

By accessing or using the Pentriarch platform, you agree to be bound by these Terms and our Privacy Policy. If you do not agree to these Terms in their entirety, you must not access or use the service. Where you are accepting on behalf of a legal entity - such as a company or organization - you represent and warrant that you have the authority to bind that entity to these Terms, and references to “you” shall mean that entity.

2. Explicit Authorization Requirement

This is the most critical section of these Terms. Pentriarch performs controlled security testing on systems you designate as targets. By initiating any scan or validation, you explicitly confirm and warrant that:

  • You are the legal owner of, or hold explicit written authorization to conduct security testing against, all systems specified as targets.
  • You have obtained all necessary internal approvals - including from your information security, legal, and compliance functions - for security testing to proceed.
  • You have notified your hosting provider, cloud infrastructure provider, or co-location facility if required under their acceptable use policy or terms of service.
  • You are duly authorized to enter into this agreement on behalf of your organization.

Submitting false authorization or targeting systems outside your authorized scope constitutes a material breach of these Terms and may constitute a criminal offence under applicable law, including the UK Computer Misuse Act 1990, the US Computer Fraud and Abuse Act, or equivalent legislation in your jurisdiction. Pentriarch reserves the right to immediately suspend or terminate access and to report suspected violations to the appropriate authorities.

3. Scope Limitation

Pentriarch performs testing exclusively within the scope you define and explicitly approve prior to any testing commencing. You are solely responsible for ensuring that your scope definition is accurate, complete, and reflects only assets you are authorized to test. Pentriarch shall not be liable for any consequences - including unintended system interaction, third-party impact, or regulatory exposure - arising from an incorrectly or incompletely defined scope.

  • A valid, approved scope must be in place before any testing begins.
  • Scope modifications require fresh customer approval before taking effect.
  • You may reduce your defined scope at any time without notice.

4. Safe Testing Clause

Pentriarch performs non-destructive security validation. We commit to the following operating principles during all testing activity:

  • Not intentionally disrupting, degrading, or causing downtime to your services or infrastructure.
  • Not exfiltrating, retaining, or transmitting sensitive production data encountered during testing.
  • Not escalating privileges or expanding access beyond what is strictly necessary to validate a specific finding.
  • Halting all testing activity immediately upon receipt of a valid suspension request.

Notwithstanding these commitments, security testing carries inherent operational risk. By authorizing testing, you acknowledge that any testing activity carries a residual possibility of unintended system interaction and accept this risk. Pentriarch recommends scheduling testing during agreed maintenance windows for production systems where operational continuity is critical.

5. Liability Limitation

Pentriarch is not responsible for pre-existing vulnerabilities identified during testing. The discovery of a vulnerability does not give rise to liability on the part of Pentriarch. You remain solely responsible for remediation of all findings reported.

To the maximum extent permitted by applicable law, Pentriarch's aggregate liability for any claim arising from use of the platform - whether in contract, tort, statute, or otherwise - is limited to the total fees paid by you in the three calendar months immediately preceding the event giving rise to the claim.

Pentriarch shall not be liable for indirect, incidental, special, punitive, or consequential damages, including loss of data, loss of revenue, loss of profits, or business interruption, even if Pentriarch has been advised of the possibility of such damages.

6. Customer Responsibilities

As a customer, you are responsible for:

  • Ensuring all testing activities comply with applicable laws and your organization's internal information security and acceptable use policies.
  • Notifying your hosting, cloud infrastructure, or co-location provider where their terms require advance notification of security testing activity.
  • Reviewing all findings in a timely manner and taking appropriate remediation action commensurate with the risk level identified.
  • Maintaining the confidentiality of platform access credentials and not sharing access with unauthorized individuals.
  • Configuring and maintaining accurate scope restrictions and updating them whenever your authorized target set changes.

7. Suspension Rights

Pentriarch reserves the right to immediately suspend testing activity or platform access - without prior notice where necessary - in any of the following circumstances:

  • Testing activity reaches or approaches systems outside the defined and approved scope.
  • Unexpected risk to third-party systems, data, or services is detected.
  • Legal, regulatory, or law enforcement requirements necessitate suspension.
  • Abuse, misuse, or violation of these Terms is detected or suspected.
  • A suspension request is received from the authorized customer.

You may request immediate suspension at any time by emailing security@pentriarch.comwith the subject line “STOP TESTING”. We acknowledge all suspension requests within 1 hour.

8. Data Handling

Pentriarch does not intentionally collect, store, or transmit sensitive production data encountered during testing. Scan evidence is strictly limited to attack path proof required for reporting purposes.

  • All scan results and reports are encrypted at rest using industry-standard encryption.
  • Access to results is restricted to authenticated users with appropriate role-based permissions.
  • You may request permanent deletion of your scan data at any time by contacting privacy@pentriarch.com.
  • Audit logs are retained for a minimum of 12 months to support compliance and regulatory requirements.

9. Permitted Use

You may use Pentriarch solely for lawful, explicitly authorized security validation and defensive security purposes. The following uses are expressly prohibited:

  • Testing systems, networks, or applications without the documented authorization of the asset owner.
  • Using or sharing findings to exploit systems, exfiltrate data, or cause harm beyond the scope of validation proof.
  • Attempting to circumvent, bypass, or abuse platform access controls, rate limits, or security mechanisms.
  • Using the platform for any illegal, harmful, coercive, or malicious purpose.
  • Sublicensing, reselling, or otherwise sharing platform access without prior written authorization from Pentriarch.

10. Accounts

You are responsible for maintaining the confidentiality and security of your account credentials. You agree to provide accurate, current, and complete information when creating your account and to keep that information up to date. You must notify us immediately of any actual or suspected unauthorized use of your account at security@pentriarch.com.

11. Subscription and Billing

Paid features are billed in accordance with your selected subscription plan. All fees are non-refundable except where required by applicable consumer protection or statutory law. Pentriarch reserves the right to revise pricing with a minimum of 30 days' written notice to affected customers. The pilot program is provided at no charge to accepted participants for the duration of the designated pilot period.

12. Disclaimers

The Pentriarch platform is provided “as is” and “as available” without warranties of any kind, whether express, implied, or statutory. Pentriarch does not warrant that the platform will identify all vulnerabilities present in your systems, nor does successful testing constitute a guarantee of security. Security validation is a risk-reduction activity, not a guarantee of a secure state.

13. Termination

Pentriarch may suspend or terminate your access to the platform, with or without notice, in the event of a material breach of these Terms, violation of applicable law, or conduct that poses risk to the platform or third parties. You may terminate your account at any time by contacting support. Upon termination, you retain the right to request deletion of your data in accordance with Section 8.

14. Governing Law

These Terms shall be governed by and construed in accordance with applicable law. The parties agree to attempt to resolve any dispute arising under or in connection with these Terms through good-faith negotiation before initiating any formal legal or arbitration proceedings.

15. Contact

For questions or concerns regarding these Terms, please contact us through the appropriate channel: