Terms
Terms of service and engagement scope starter
These starter terms outline the intended boundaries for Yarra Secure services. They should be reviewed before paid work or launch.
No unauthorised testing
Yarra Secure does not perform technical testing against systems without written approval from the authorised owner or responsible business representative.
Written approval and defined scope
Testing requires written scope, approved targets, timing where relevant, and clear exclusions. Any system outside the approved scope is not tested.
Informational findings
Findings, reports, and recommendations are provided for informational and remediation planning purposes. They are not legal, financial, insurance, or compliance certification advice.
No guarantee of total security
Security reviews reduce uncertainty but cannot guarantee that every vulnerability, risk, or future attack path will be found.
Client responsibilities
Clients are responsible for backups, approvals, access permissions, account ownership, change windows, and decisions about implementing fixes. Production changes should be tested and backed up before deployment.