Terms & Conditions

By using this website or engaging CRIS InfoTech Private Limited (“CRIS InfoTech”, “we”, “us”), you agree to these Terms & Conditions. If you do not agree, please do not use the website or our services.

CRIS InfoTech Private Limited is a cybersecurity company based in Hitech City, Hyderabad, Telangana, India, providing penetration testing (VAPT), security operations (SOC) and related services.

You may use this website for lawful purposes only. You must not attempt to disrupt, damage or gain unauthorized access to the website or any connected system.

Content on this website — including articles, guides, sample reports and checklists — is general information and not advice for your specific situation. Sample reports and findings are representative examples.

Each engagement is defined in a written proposal or statement of work that sets out the scope, timeline, deliverables and fees. If anything in a signed proposal differs from these terms, the signed proposal applies.

We only carry out security testing on systems that you own or are authorized to have tested, under signed rules of engagement. You confirm that you have the authority to approve testing of every system you place in scope, including any hosted by third parties.

Nothing on this website authorizes testing of any system.

CRIS InfoTech does not hold company certifications, accreditations or empanelments such as ISO 27001, SOC 2, CREST or CERT-In empanelment. Framework names on this website (for example OWASP, NIST, PTES, OSSTMM, MITRE ATT&CK, CVSS and CWE) describe the methods we follow, not certificates we hold.

Engagements are led by CRIS InfoTech and may be delivered by vetted independent testers bound by the same confidentiality obligations. The individual qualifications of the testers assigned to your project are stated in your proposal.

Figures shown on this website, such as the number of audits delivered and clients protected, are based on our own records as of the date of this page.

Case scenarios, sample reports and findings are illustrative and do not describe any specific client. We never publish client names, logos or results without written permission.

You agree to provide accurate scope details, access, test accounts and points of contact on time; to take backups of systems in scope; and to inform relevant teams and providers of the testing window.

We treat all information about your systems, findings and business as confidential. We use it only to deliver the agreed services and do not disclose it to anyone without your permission, except where required by law. We are happy to sign your non-disclosure agreement.

Fees, payment schedule and applicable taxes are stated in the proposal. Unless the proposal says otherwise, invoices are payable within the period stated on the invoice. A free demo test, where offered, is limited to the scope we agree with you.

Reports are prepared for your use and may be shared with your auditors, customers and partners. Our methodologies, tools and templates remain our property.

Retesting of fixed issues is included as set out in the proposal, within the retest window stated there.

An attestation letter confirms that testing was performed, with its scope and dates. It is not a certificate of compliance with any standard or regulation.

We do not guarantee any compliance, certification or audit outcome; those decisions are made by your auditor or regulator.

Security testing reduces risk but cannot guarantee that a system is free of all vulnerabilities. To the extent permitted by law, our total liability for any engagement is limited to the fees paid for that engagement, and we are not liable for indirect or consequential losses.

This website is provided “as is”, and we are not liable for losses arising from its use.

The CRIS InfoTech name, logo, website content and design belong to CRIS InfoTech Private Limited and may not be copied or reused without our written permission.

Names of standards, tools and products — such as OWASP, NIST, MITRE, Burp Suite, Splunk or Microsoft Sentinel — belong to their respective owners. Their mention describes what we use or follow and does not imply endorsement, partnership or certification.

Articles, checklists and examples on this website are for education and defence. Do not use them to test any system without written authorization from its owner.

Links to external websites, such as WhatsApp or LinkedIn, are provided for convenience. We are not responsible for their content or practices.

We may update these terms from time to time. The date at the top of this page shows the latest version. Signed proposals remain governed by the terms in force when they were signed.

These terms are governed by the laws of India. The courts of Hyderabad, Telangana have exclusive jurisdiction.

For any question about these terms, email contact@crisinfotech.com or call +91 8790899473.