1. ACCEPTANCE OF TERMS

By engaging StackOfTruths for any service (including website penetration testing, AI agent penetration testing, security audits, consulting, or retainers), you agree to be bound by these Terms of Service. If you do not agree to these terms, please do not book our services.

2. SERVICES OFFERED

StackOfTruths provides the following professional services:

• Website Pentest — Automated — $299 — Fast external vulnerability scan, results within 24 hours
• Website Pentest — Full Manual — $799 — Complete manual assessment, 3-5 days, debrief included
• Lite AI Pentest • Startup Edition — $750 — Same-day results, 30-min debrief
• Full AI Agent Penetration Test — $3,000 — 40+ page report, 1-hour debrief
• Deep-Dive AI Red Team — $5,000 — 2 weeks, SOC2/ISO27001 ready, certificate included
• Security Retainer — $1,500/month — Monthly scans, quarterly pentests, 24/7 support
• Code Security Review — $1,500 — Full codebase audit (Python/JS/Go)
• Crypto Security Audit — $2,500 — 3-5 day turnaround, wallet security, API key audit
• AI Security Consulting — $350/hour — Architecture review, threat modeling, team training

All services are performed personally by Pedro Jose, founder, with 10+ years cybersecurity experience and 5+ years AI experience.

3. CONSULTING & SECURITY AUDIT SERVICES

When engaging my consulting or security audit services, the following terms apply:

3.1 Engagement Scope

• Services are defined in the written agreement or scope of work (SOW) before engagement
• Any changes to scope require mutual written agreement
• All deliverables will be clearly outlined in the engagement contract

3.2 Client Responsibilities

• Client must provide necessary access, credentials, and permissions for security assessments
• Client must have appropriate authorization for all systems provided for testing
• Client is responsible for backing up all data before any security audit
• Client must inform all relevant stakeholders about the security assessment

3.3 Limitations of Liability

• Security audits and pentesting are performed on a “best effort” basis
• No security assessment can guarantee 100% protection against all vulnerabilities
• I am not liable for any damage, data loss, or system interruption during authorized testing
• Clients are advised to perform their own validation of all recommendations

3.4 Confidentiality

• All client data, findings, and reports are treated as strictly confidential
• I will not share or disclose client information without explicit permission
• Audit results are shared only with authorized client representatives
• I may use anonymized, aggregated findings for marketing purposes with client consent

3.5 Payment & Cancellation

• Full payment required before report delivery for one-off engagements
• Retainer clients billed monthly in advance
• Cancellation within 5 business days of start date incurs 25% fee
• Cancellation within 24 hours of start date incurs 50% fee
• Final reports delivered only after full payment received
• Consultations booked via Calendly — 24-hour cancellation notice required, no-shows may be restricted from rebooking

4. REFUNDS

Due to the professional nature of security services, no refunds are offered once testing has begun. If you cancel before any work has been performed, you may receive a full refund minus a 10% processing fee. For disputes, DM @StackOfTruths on X or email pedrojose@stackoftruths.com.

5. PROFESSIONAL QUALIFICATIONS

Services are provided by Pedro Jose, founder of StackOfTruths, with:

• 10+ years of cybersecurity experience
• 5+ years of AI development and security
• 22+ professional certifications including CompTIA SecAI+, CompTIA Security+, Pentest+, Malware Development, Social Engineering, Wireshark, and more
• Dedicated pentest environment with industry-standard tools

All security audits are performed on dedicated, isolated hardware using both automated and manual testing methodologies.

6. SECURITY AUDIT ADDENDUM

By booking a penetration test or security audit (website or AI agent), you agree to the following additional terms:

6.1 Authorization

You represent and warrant that you are the owner of, or are expressly authorized by the owner to test, the target systems, domains, IP addresses, and applications specified in your booking. You shall provide written proof of ownership or authorization upon request.

6.2 Scope of Testing

Testing is strictly limited to the domains/IPs provided. You agree to provide a written scope of work prior to testing. StackOfTruths will not test systems outside the agreed scope. You acknowledge that penetration testing may cause temporary service disruptions and agree to hold StackOfTruths harmless for any damage occurring within the agreed scope.

6.3 Rules of Engagement

The following activities are PROHIBITED unless explicitly agreed in writing:

• Denial of Service (DoS/DDoS) attacks
• Physical intrusion or social engineering targeting employees
• Modification or destruction of data
• Testing that knowingly disrupts production services during business hours without coordination

6.4 Emergency Stop

Client may terminate testing at any time by contacting me directly via X DM, Calendly, or emergency contact provided. StackOfTruths will halt all testing immediately upon receiving a stop request.

6.5 Confidentiality & Reporting

All findings, reports, and data from the engagement are strictly confidential. Reports will be delivered only to authorized client representatives. StackOfTruths may use anonymized, aggregated data for research and marketing with client consent.

6.6 Liability Limitation

StackOfTruths’ maximum liability shall not exceed the total fees paid for the specific engagement. Client agrees to indemnify StackOfTruths against claims arising from unauthorized testing or misuse of findings.

7. LIMITATION OF LIABILITY

All services are provided “as is” without warranties of any kind. We are not liable for any damages arising from the use or inability to use our services, including but not limited to data loss, system damage, business interruption, or security incidents occurring after the audit period.

Maximum liability shall not exceed the total fees paid for the specific service in question.

8. INTELLECTUAL PROPERTY

All methodologies, tools, reports, and materials remain the sole property of StackOfTruths. You may not copy, modify, or create derivative works without explicit written consent.

Audit reports are provided for client use only and may not be shared with third parties without written permission.

9. GOVERNING LAW

These terms shall be governed by the laws of the Netherlands. Any disputes shall be resolved in the courts of Amsterdam. For international clients, you agree to submit to the jurisdiction of the Netherlands courts.

10. CHANGES TO TERMS

We reserve the right to modify these terms at any time. Continued use of our services constitutes acceptance of updated terms.

KVK: 94992266 | Location: Keurenplein 41, 1069CD Amsterdam, Netherlands