Terms of Engagement & Security Services Charter
The binding operational rules, mutual non-disclosure covenants, and ethical frameworks governing all penetration testing, DevSecOps audits, and defensive engineering engagements executed by Lightlab.
Authorization to Test & Rules of Engagement
All security assessments are performed under explicit written authorization from the client. Lightlab operates strictly within defined IP ranges, domain boundaries, and agreed testing windows to ensure zero operational disruption.
Mutual Non-Disclosure & Confidentiality (M-NDA)
Both parties agree to treat all vulnerability findings, source code architectures, network topologies, and technical deliverables as confidential trade secrets protected under mutual non-disclosure agreements.
Intellectual Property & Remediation Deliverables
Clients retain 100% intellectual property ownership of their software systems and remediation code diffs generated during assessments. Lightlab retains ownership of proprietary scanning suites and methodology.
Limitation of Liability & Professional Indemnity
Lightlab provides security assessments based on state-of-the-art methodology at the time of evaluation. Engagements are governed by liability caps proportionate to contract value and standard professional indemnity safeguards.
Governing Law & Jurisdiction
These terms are governed by and construed in accordance with the laws of Vietnam, with primary jurisdiction vested in competent courts in Hanoi, Vietnam, or mutually agreed international arbitration.
Engagement Inquiries & Legal Counsel
For custom Master Services Agreements, vendor compliance questionnaires, or specific DPA terms, contact our legal desk at admin@lightlab.work.