Terms of Use

These terms govern your use of the Kaitara Security website at security.kaitara.com, the free security scan, and the client portal. By using any of them, you accept these terms. Paid engagements are governed by a separate written engagement agreement between you and Kaitara Security. Where that agreement and these terms differ, the engagement agreement takes precedence. Kaitara Security is a security and compliance services business operating in India, and a venture of the Kaitara group. Contact: security@kaitara.com

The guidance we publish — including our material on the CERT-In Directions 2022, the Digital Personal Data Protection Act 2023, the GDPR, ISO 27001, SOC 2, the EU MDR and IVDR, and FDA premarket cybersecurity — is provided for general information. It is not legal advice, and it is not regulatory, medical or financial advice. It does not create a professional or advisory relationship between you and Kaitara Security. Regulations change, and how a requirement applies depends on facts specific to your organisation. Do not act, or decide not to act, solely on the basis of anything published on this website. Where a decision carries legal or regulatory consequence, take advice from a qualified professional in the relevant jurisdiction. We take care to keep our published material accurate and current, but we do not warrant that it is complete, up to date, or free from error.

Kaitara Security delivers readiness and implementation work: we assess what applies to you, implement and test controls, produce the required documentation and evidence, and prepare you for assessment by others. We do not issue certifications, attestations or marks, and we are not an auditor, a certification body, a Notified Body, a CERT-In empanelled auditor, or a licensed CPA firm. Where a framework requires an independent assessment — a SOC 2 report, an ISO 27001 certificate, a CE mark — that assessment is carried out by an independent third party you engage separately, and the outcome is theirs to determine. We therefore do not guarantee any certification, audit, regulatory or submission outcome. What we commit to is the scope of work set out in your engagement agreement, delivered to a professional standard. Nothing on this website is an offer capable of acceptance, and nothing on it forms part of a contract unless it is repeated in a signed engagement agreement.

The scan is provided free of charge and as-is. It performs passive, non-intrusive checks against information your domain already exposes publicly, or against a public code repository you nominate. It does not attempt to gain access to any system. You may only submit a domain or repository that you own, or that you are authorised to have assessed. You are responsible for holding that authorisation. The scan is a starting point, not a security assessment or a penetration test. It will not find every issue, and a clean result does not mean your systems are secure or that you are compliant with any regulation. We accept no liability for reliance on scan output. We rate-limit the scan and may withdraw or restrict access to it at any time.

To the fullest extent permitted by law, Kaitara Security is not liable for indirect, incidental, special or consequential loss, or for loss of profit, revenue, business, goodwill, data, or anticipated savings, arising from use of this website, the free scan, or the client portal. Our total aggregate liability arising out of or in connection with the free scan and your use of this website is limited to INR 10,000. Liability arising from a paid engagement is governed by the limitation of liability in the relevant engagement agreement. Nothing in these terms excludes or limits liability for fraud, fraudulent misrepresentation, death or personal injury caused by negligence, or any other liability that cannot lawfully be excluded.

Where we deploy or resell a third-party security product as part of an engagement, that product is provided under its own vendor terms and warranties. We describe such products accurately to the best of our knowledge, but the vendor is responsible for its own product. Third-party names, logos and trademarks referred to on this website remain the property of their respective owners, and their use does not imply endorsement of Kaitara Security by those owners unless stated. We are not responsible for the content of external websites we link to.

The content of this website, including our written guidance, page structure and brand assets, belongs to Kaitara Security unless stated otherwise. You may read, quote briefly with attribution, and share links to it. You may not republish it substantially, or present it as your own. Deliverables produced during a paid engagement are governed by the intellectual property terms of your engagement agreement.

These terms, and any dispute arising out of or in connection with them, are governed by the laws of India. Where you are situated in India — the courts at Bengaluru, Karnataka have exclusive jurisdiction. Where you are situated outside India — any dispute that cannot be resolved amicably within thirty days of written notice will be referred to and finally resolved by arbitration administered by the Singapore International Arbitration Centre (SIAC) in accordance with the SIAC Rules in force at the time. The seat of the arbitration is Singapore, the tribunal will consist of a sole arbitrator, the language of the arbitration is English, and the award is final and binding on both parties. Where you have signed an engagement agreement with us, the dispute-resolution provisions of that agreement apply instead of this section.

We may update these terms as our services evolve or as legal requirements change. The current version is always available at security.kaitara.com/terms. Continued use of the website after a change means you accept the updated terms.