Test authorisation

Parties

Client: [DOPLNIŤ: name or business name, address, company ID, representative]. Provider: [DOPLNIŤ: business name, registered office, company ID].

Subject of the consent

The client authorises the provider to perform a security test on the domain and within the scope stated below, including active attempts to exploit vulnerabilities using the Strix tool.

Test details

• The domain and any subdomains to be tested
• Other targets in scope: API, IP addresses, repository
• The ordered package
• The time window in which the test may run
• Test accounts, if they are part of the package
• The client's contact during the test

Client declarations

• I own the domain or I am authorised to consent to the test.
• I have obtained the consent of third parties where needed, for example the hosting provider.
• I have a current backup of the website and data.
• I acknowledge that an active test may cause downtime or a change of data.

Out of scope

• Availability attacks (DoS), social engineering and physical access.
• Anything not listed as a target in the test details.

Stopping the test

The client may stop the test at any time at [DOPLNIŤ: contact for stopping a test]. The provider also stops the test on its own if it detects a risk to a production system.

Signature

The client signs the authorisation electronically in the customer portal. The provider stores the time of signing, the IP address and the version of the wording. The wording does not change after signing.