Clear boundaries before any review begins.

Authorization comes first

Submitting the web form does not authorize security testing. Testing only begins after written authorization and an agreed scope are in place.

The requester must have authority to request an assessment for the business, website, domain, network, application, or system involved. Norivex Cyber may decline a request if authorization, ownership, or scope cannot be verified.

Current assessment approach

Norivex Cyber currently provides introductory, permission-based, non-destructive security assessments. Scope boundaries must be documented before work begins, and no activity will extend outside the agreed scope. Findings will be shared with the authorized business contact.

Activities that are not included

No exploitation, privilege escalation, persistence, destructive testing, denial-of-service testing, credential attacks, social engineering, or intrusive testing will be performed unless explicitly agreed to in writing as part of a future authorized engagement.

Limits and recommendations

No security assessment can guarantee that every vulnerability will be identified. No assessment can guarantee complete security or eliminate all cybersecurity risk.

The client remains responsible for deciding whether and how to implement recommendations. Norivex Cyber provides practical guidance based on the agreed scope and information available at the time of review.

General service information

These terms provide general service information and are not legal advice. Questions about a request or potential scope can be sent to connor@norivexcyber.date or by phone at 276-806-0921.