Terms of Service

By creating an account, accessing our website, using our platform, requesting an assessment, or engaging our consulting services, you acknowledge that you have read, understood, and agree to be bound by these Terms and our Privacy Policy. If you are using our services on behalf of an organization, you represent and warrant that you have the authority to bind that organization to these Terms.

These Terms constitute a legally binding agreement between you (and/or the organization you represent) and Cybersecurityratings.com. If you do not agree to these Terms, you may not access or use our services.

Cybersecurityratings.com provides the following services:

• Cybersecurity Ratings: Automated analysis and scoring of organizational security posture based on publicly observable technical data
• Security Assessment Reports: Detailed reports identifying security findings, risk factors, and remediation recommendations
• Consulting Services: Expert security consulting, compliance advisory, and remediation support delivered by our team of certified analysts
• Rating Database: Public and subscription-based access to security ratings and reports for organizations worldwide
• API Access: Programmatic access to rating data for integration with third-party systems (Business and Enterprise plans)

We reserve the right to modify, suspend, or discontinue any aspect of our services at any time, with or without notice.

To access certain features, you may be required to create an account. You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account. You agree to notify us immediately of any unauthorized use of your account.

You represent that all information provided during registration is accurate, current, and complete. Accounts are non-transferable. We reserve the right to suspend or terminate accounts that violate these Terms or engage in prohibited activities.

Nature of Ratings: Our security ratings are generated using automated analysis of publicly available technical data about organizations. Ratings reflect publicly observable security indicators and are not a guarantee of an organization's actual security posture.

Public Database: Basic ratings (A–F letter grades) for rated organizations may be displayed publicly in our database. Organizations may request a free assessment to review and dispute their rating.

Accuracy: While we strive for accuracy, ratings are based on data available at the time of analysis and may not reflect real-time security changes. We do not guarantee that ratings are complete, current, or error-free.

Right to Rate: We reserve the right to rate any organization and to publish ratings in our database. Organizations have the right to request re-evaluation of their rating by contacting us.

You agree not to use our services to:

• Violate any applicable law, regulation, or third-party rights
• Use automated scraping, bots, or unauthorized access methods to extract data from our platform
• Resell, redistribute, or republish rating data without written authorization
• Use ratings or reports for unlawful purposes, harassment, or competitive defamation
• Attempt to gain unauthorized access to any systems, networks, or data
• Introduce viruses, malware, or any other harmful code
• Interfere with the integrity or performance of our platform
• Use our services to target, attack, or exploit any third party

Violation of this Acceptable Use policy may result in immediate account suspension and civil or criminal liability.

Paid subscriptions are billed according to the plan selected at the time of purchase. All fees are non-refundable except as required by law or as expressly stated in our refund policy. Subscriptions automatically renew at the end of each billing period unless cancelled at least 5 days before the renewal date.

You authorize us to charge your designated payment method for all fees associated with your subscription. Failed payments may result in service suspension. Prices are subject to change with 30 days' written notice for annual subscribers; monthly subscribers will be notified of price changes at least 14 days in advance.

You may cancel your subscription at any time through your account settings or by contacting us. Cancellations take effect at the end of the current billing period; no partial refunds are provided for unused subscription time.

Our consulting services are subject to a separate Statement of Work (SOW) or service agreement that outlines the scope, deliverables, timeline, and fees. Consulting engagements are governed by these Terms along with the applicable SOW.

Consulting deliverables represent professional opinions and recommendations based on the information available at the time of the assessment. While we strive for thoroughness and accuracy, we cannot guarantee specific audit outcomes or compliance certifications.

Consulting fees are invoiced according to the terms specified in your service agreement. All consulting fees are non-refundable upon commencement of work.

All content, ratings, reports, methodology, software, trademarks, logos, and other materials on our platform are the exclusive property of Cybersecurityratings.com or our licensors and are protected by US and international intellectual property laws.

You are granted a limited, non-exclusive, non-transferable license to access and use our services for their intended purpose. You may not reproduce, distribute, modify, create derivative works from, or publicly display any content from our platform without our prior written consent.

You retain ownership of any data you provide to us and grant us a limited license to use that data solely to provide our services to you.

API access is available on Business and Enterprise plans subject to our API usage limits and fair use policy. API keys must be kept confidential and may not be shared or resold. You may use API data solely for internal business purposes directly related to your authorized use of our services.

You may not use the API to build competing products or services, to republish or redistribute rating data, or in any manner that violates these Terms or applicable law. We reserve the right to revoke API access at any time for abuse or violation of these Terms.

OUR SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED. We do not warrant that our services will be uninterrupted, secure, error-free, or completely accurate. Security ratings and reports reflect analysis based on available data and do not constitute legal, financial, or professional advice.

We do not guarantee that addressing the findings in our reports will result in compliance with any specific regulatory framework, passage of any audit, or prevention of security incidents. You are responsible for your own security practices and compliance decisions.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, CYBERSECURITYRATINGS.COM AND ITS OFFICERS, DIRECTORS, EMPLOYEES, AND AGENTS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING WITHOUT LIMITATION LOSS OF PROFITS, DATA, USE, OR BUSINESS OPPORTUNITIES, ARISING OUT OF OR RELATED TO YOUR USE OF OUR SERVICES.

Our total aggregate liability arising out of or related to these Terms or your use of our services shall not exceed the amount paid by you to us in the 12 months preceding the event giving rise to the claim.

You agree to indemnify, defend, and hold harmless Cybersecurityratings.com and its affiliates, officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or related to your violation of these Terms, your misuse of our services, or your violation of any third-party rights.

You may terminate your account and stop using our services at any time. We may terminate or suspend your account, access to our services, or these Terms immediately, without prior notice, if we believe you have violated these Terms, engaged in unlawful activity, or posed a security risk to our platform or users.

Upon termination, your right to use our services ceases immediately. Sections that by their nature should survive termination shall survive, including Ownership, Disclaimers, Limitation of Liability, Indemnification, and Governing Law.

These Terms shall be governed by and construed in accordance with the laws of the State of Colorado, USA, without regard to its conflict of law provisions. Any disputes arising under or in connection with these Terms shall be subject to the exclusive jurisdiction of the state and federal courts located in Denver, Colorado.

You waive any objection to the jurisdiction of these courts on grounds of venue or inconvenience.