Terms of Use

This website, ittcsec.com, is published by ITTCSEC Cybersecurity Consultancy, trading as ITTC / ITTCsec (KvK 98601733, VAT ID NL005342512B74), Van Heuven Goedhartlaan 245, 3527 DK Utrecht, Netherlands. Full company details are on our Company Information page.

These terms govern your use of ittcsec.com only, the website, not any cybersecurity engagement. Browsing this website, submitting the contact form, or otherwise interacting with it does not create a consulting engagement, a client relationship, or any contractual obligation on either side. An actual security engagement (a penetration test, an assessment, ongoing advisory work, or any other service) is governed exclusively by the specific proposal, Statement of Work, Master Services Agreement, or other signed contractual document agreed separately for that engagement. If anything on this website appears to contradict the terms of a signed engagement document, the signed document controls.

By using this website, you agree to these terms. You may view, and where the site explicitly makes something available for that purpose (e.g. a downloadable resource), download it for your own personal or internal business reference.

You agree not to:

• Use this website in any way that violates applicable law.
• Attempt to gain unauthorised access to this website, its underlying systems, or any data it holds. See "Security and responsible use" below for how to report a genuine finding instead.
• Scrape, systematically extract, or republish substantial parts of this website's content without permission.
• Use automated means to interfere with the website's availability or performance (e.g. denial-of-service activity, aggressive scraping).
• Submit false, misleading, or malicious content through the contact form or any other input on this site.

The content, design, diagrams, and branding on this website are the property of ITTCSEC Cybersecurity Consultancy unless otherwise noted, and may not be reproduced, distributed, or used to create derivative works without permission. This doesn't restrict normal use of the site for its intended purpose (reading it, sharing a link to it, and so on).

Articles, checklists, and guides published on this site (including the interactive self-assessment tool) are general, educational information about cybersecurity topics: they describe common practices and considerations, not a specific evaluation of your organisation's actual security posture. Nothing on this website should be treated as a substitute for a proper, scoped security assessment carried out under an actual engagement.

Nothing on this website authorises security testing, scanning, or any other intrusive activity against this website, ITTCsec's infrastructure, ITTCsec's clients, or any third party. We provide cybersecurity services, including penetration testing, vulnerability assessment, and security research, only to clients who have entered into an appropriate signed agreement defining scope and authorisation beforehand, exactly as we'd expect of anyone testing our own environment. If you believe you've found a genuine vulnerability on this website itself, see our Responsible Disclosure policy for how to report it appropriately, rather than testing further or disclosing it publicly.

This site links to external resources (regulatory sources, standards bodies, and similar) for reference. We don't control those sites and aren't responsible for their content or availability.

We aim to keep this website available and accurate, but don't guarantee uninterrupted availability, and may update, suspend, or modify it at any time without notice.

This website and its content are provided "as is," without warranties of any kind beyond those that cannot be excluded under applicable Dutch law. To the extent permitted by law, ITTCSEC Cybersecurity Consultancy is not liable for losses arising from reliance on this website's general content in place of a proper, scoped engagement. Nothing in these terms excludes or limits liability where doing so would not be permitted under Dutch law (for example, liability for intent or gross negligence).

These terms are governed by the laws of the Netherlands. Any dispute arising from these terms falls under the exclusive jurisdiction of the competent Dutch courts, without prejudice to any mandatory consumer-protection rules that may apply.

If any provision of these terms is found unenforceable, the remaining provisions continue to apply, and the unenforceable provision is read as narrowly as needed to make it enforceable while preserving its original intent.

We may update these terms from time to time. The current version is always available at this URL, with the "last updated" date above reflecting the most recent revision.

Questions about these terms can be sent to info@ittcsec.com.