Terms of Service

CyberRank provides a workspace for building, sending, and scoring third-party security assessments. You may use the Service only in accordance with these Terms and any documentation we publish. We may, from time to time, release new features, retire existing ones, or apply usage limits to ensure fair access for all customers.

You agree that your use of the Service will not violate any applicable law, regulation, or the rights of any third party. CyberRank is offered as a software-as-a-service product; we do not provide legal, audit, or certification opinions, and the platform is not a substitute for independent professional review.

To use most features of the Service, you must register for an account. You are responsible for keeping your credentials confidential and for all activity that occurs under your account. You agree to notify us promptly of any unauthorised access at security@cyberrank.example.

Workspace administrators may invite additional users, set roles, and remove access. The organisation that owns the workspace is responsible for the actions of its users and for ensuring that invitees are authorised to view the data shared with them.

You retain all rights to the content you upload, generate, or share through the Service, including questionnaire responses, vendor records, evidence files, and notes (collectively, “Customer Data”). You grant CyberRank a limited, non-exclusive licence to host, process, and display Customer Data solely to provide and improve the Service for you.

You are responsible for ensuring you have the rights to share any Customer Data, including data about your vendors and their personnel, and for complying with applicable privacy and data protection laws.

CyberRank, including all software, scoring methodologies, templates, framework mappings, documentation, and visual design, is and remains the property of CyberRank or its licensors. Nothing in these Terms grants you any right, title, or interest in our intellectual property other than the limited right to use the Service.

You may not copy, reverse-engineer, scrape, or create derivative works of the Service except as expressly permitted by law.

Paid plans are billed in advance based on the plan you select. Fees are non-refundable except where required by law. We may change pricing for renewal terms by giving you reasonable notice before your next billing cycle.

Usage-based credits (for example, assessment dispatches or AI-assisted scoring) are consumed as you use the Service and expire at the end of your billing term unless we state otherwise.

You agree not to use the Service to:

• Upload malware, run unauthorised security tests, or interfere with the Service;
• Misrepresent your identity or the identity of your organisation;
• Send unsolicited communications to vendors or their employees;
• Resell, sublicense, or expose the Service to third parties as a standalone product;
• Process special categories of personal data (such as health or biometric data) without a written agreement with us.

The Service is provided “as is” and “as available” without warranties of any kind, whether express or implied, including warranties of merchantability, fitness for a particular purpose, or non-infringement. CyberRank does not warrant that the Service will be uninterrupted, error-free, or that vendor scores will identify every risk.

To the maximum extent permitted by law, CyberRank’s total liability arising out of or related to these Terms will not exceed the fees you paid us in the twelve months preceding the event giving rise to the claim. In no event will CyberRank be liable for any indirect, incidental, special, consequential, or punitive damages.

We may update these Terms from time to time. If we make material changes, we will notify you by email or by posting a notice in the Service. Your continued use of the Service after the changes take effect constitutes your acceptance of the revised Terms.

These Terms are governed by the laws of the jurisdiction in which the contracting CyberRank entity is established, without regard to conflict-of-laws principles. Any dispute arising out of or related to these Terms will be brought exclusively in the courts of that jurisdiction, unless a mandatory consumer-protection law provides otherwise.