Terms of use

Introduction

These terms govern your use of this website. They are deliberately short and specific rather than exhaustive, because terms nobody reads protect nobody.

One distinction matters more than anything else on this page: these terms cover the website. They do not govern the security services we deliver. Those run under a signed engagement contract, and nothing here changes it. See Services are governed by a separate agreement.

Who we are

Nexix Security Labs provides cybersecurity assessment, managed security operations, operational technology security, data engineering and IT consulting services, and operates Nexix Academy. In these terms, "we", "us" and "our" mean Nexix Security Labs, and "you" means anyone using this site.

• Registered entity name: Nexix Security Lab
• Registered address: Indraprastha Nagar, Nagpur, Maharashtra, India 440022
• Email: contact@nexixsecuritylabs.com

Acceptance of these terms

By using this site you accept these terms. If you do not accept them, please do not use the site. If you use the site on behalf of an organisation, you confirm you are authorised to accept these terms for that organisation.

Our privacy policy explains what personal data we handle and forms part of your use of this site.

How you may use this site

You may read, browse, print and share this site for your own informational and internal business purposes. You may quote from our published research with attribution and a link back to the original article. You may contact us through the details we publish.

None of that requires permission from us, and we would rather our research circulated than sat behind a barrier.

What you must not do

You must not:

• Use the site in a way that breaks any applicable law.
• Attempt to gain unauthorised access to this site, its hosting infrastructure, or any system or network connected to it.
• Probe, scan or test the vulnerability of this site or its infrastructure without our prior written permission.
• Introduce malware, or attempt to interfere with the site's availability or integrity.
• Scrape or harvest the site systematically for the purpose of republishing our content as your own or training a commercial model on it.
• Use our name, logo or brand in a way that suggests endorsement, partnership or certification that does not exist.
• Misrepresent your identity or affiliation when contacting us.

We are a security company, so it is worth saying plainly: testing our site without permission is unauthorised access, not research, and we treat it as such. If you have found a genuine security issue in this site, tell us at contact@nexixsecuritylabs.com and we will respond. We do not take legal action against people who report issues to us in good faith and give us a reasonable chance to fix them.

Research content and responsible use

This site publishes security research. That research necessarily describes real vulnerabilities, attack techniques and tooling, because defending against a technique requires understanding it.

It is published for defensive and educational purposes. Reading it does not give you permission to do anything to anyone else's systems. Testing a system you do not own or have written authorisation to test is unlawful in most jurisdictions, including under India's Information Technology Act 2000, regardless of intent and regardless of where you read about the technique.

You are responsible for how you use what you learn here. We accept no responsibility for the consequences of anyone applying published techniques outside a properly authorised engagement.

Research also ages. A post describes what was true when it was written; vulnerabilities get patched, tooling changes, and advice that was correct in 2022 may not be correct now. Check the publication date and verify before acting on anything.

No professional advice, no client relationship

Nothing on this site is professional advice for your specific situation. Our articles, service pages and sector pages are general information written without knowledge of your environment, your risk appetite or your regulatory position.

Reading this site, downloading anything from it, or sending us an enquiry does not create a client relationship, a duty of care, or any obligation on our part to act. A relationship begins when both sides sign an engagement, and not before.

Services are governed by a separate agreement

Security services are delivered under a separate written agreement: typically a master services agreement, a statement of work, agreed rules of engagement, and a non-disclosure agreement. Those documents set the scope, the authorisation to test, how findings are handled, and the commercial and liability terms.

Where anything on this website conflicts with a signed engagement agreement, the engagement agreement prevails. Service descriptions on this site are illustrative of what we do; they are not an offer, a commitment to a scope, or a warranty of any outcome.

Intellectual property

The content of this site, including the written research, page copy, layout, design and code, belongs to Nexix Security Labs or is used with permission. The Nexix Security Labs name and logo are our marks.

Quoting our research with attribution and a link is welcome, as set out in How you may use this site. Republishing an article in full, presenting our work as your own, or using our marks to imply endorsement is not.

Third-party names, products and marks mentioned in our research belong to their respective owners and are referred to for identification only.

Information you send us

If you send us an enquiry, we handle the personal data in it as described in our privacy policy. Please do not send us confidential material, credentials, or details of a live security incident through the website contact form: it is a marketing enquiry form, not a secure channel. Contact us and we will agree an appropriate route first.

If you send us an unsolicited suggestion or idea, we cannot guarantee to keep it confidential or to compensate you for it, and you should not send it on that assumption.

Links to other websites

This site links to Nexix Academy, to our social media profiles, and from research articles to third-party sources. Once you follow a link you are on someone else's site under their terms, not ours. We do not control those sites and a link is not an endorsement of their content or practices.

Availability of the site

We aim to keep this site available, but we do not promise it will be uninterrupted or error-free. We may change, suspend or withdraw any part of it, including individual articles, without notice. This is a marketing and research site; nothing you depend on operationally should live only here.

Disclaimer of warranties

We take care over what we publish and correct errors when we find them, but the site and its content are provided as they are, without any promise that they are complete, current, or fit for a particular purpose.

To the fullest extent permitted by law, we give no warranties, conditions or representations about this site or its content, whether express or implied, including any implied warranty of merchantability, fitness for a particular purpose, or non-infringement. In particular we do not warrant that the site will be uninterrupted or error-free, that defects will be corrected, or that any research, technique or finding described here applies to your systems.

Nothing in these terms excludes or limits any liability that cannot lawfully be excluded or limited, including liability for death or personal injury caused by negligence, or for fraud or fraudulent misrepresentation. Nothing here affects your statutory rights.

Limitation of liability

Subject to the paragraph on liabilities that cannot be excluded in Disclaimer of warranties, and to the fullest extent permitted by law, we are not liable for any indirect, incidental, special or consequential loss, or for any loss of profit, revenue, business, goodwill, data or anticipated saving, arising out of or in connection with your use of this site or your reliance on anything published on it.

This section governs the website only. Liability for anything arising out of a paid engagement — an assessment, a managed service, or any other work we perform for you — is governed exclusively by the signed agreement covering that engagement, and not by this page. Where the two differ, the engagement agreement prevails. See Services are governed by a separate agreement.

Governing law and jurisdiction

These terms, and any dispute or claim arising out of or in connection with them or with your use of this site, are governed by and construed in accordance with the laws of India.

The courts at Nagpur, Maharashtra have exclusive jurisdiction over any such dispute or claim.

Where a signed engagement agreement specifies a different forum or an arbitration procedure for work we perform for you, that agreement governs disputes about that work, and this section applies only to your use of this website.

Changes to these terms

We update these terms when the site or the law changes. The effective date at the top tells you which version you are reading. Continuing to use the site after a change means you accept the updated terms, so it is worth checking the date if you rely on anything here.

How to contact us

Questions about these terms, or about anything published on this site:

• Email: contact@nexixsecuritylabs.com
• Phone: +91 8956018674
• Post: Indraprastha Nagar, Nagpur, Maharashtra, India 440022