Terms of Service
1. Definitions
For the purpose of these Terms:
- Customer: The Managed Service Provider (MSP) or organization using the Platform to manage vulnerability disclosures.
- Researcher: An ethical hacker or security professional who submits vulnerability reports through the Platform.
- Platform: The Triagio Coordinated Vulnerability Disclosure service, including all features, APIs, and documentation.
2. Scope of Service
Triagio provides a Coordinated Vulnerability Disclosure platform that facilitates the reporting, validation, and communication of security vulnerabilities.
Important: Triagio acts as a facilitator only. We validate and coordinate reports, but we do not fix vulnerabilities. Remediation is the sole responsibility of the Customer.
3. Acceptable Use & Authority
By using the Platform, you represent and warrant that:
- You own or have explicit written permission for every domain, IP address, or digital asset you add to Triagio.
- Scanning, testing, or submitting reports for targets you do not own or lack authorization for is strictly prohibited.
- Violations may result in immediate account termination and potential legal action.
4. Fair Use Policy (FUP)
Our "Unlimited Assets" offering is subject to a Fair Use Policy based on validated report output:
- Essential: 3 validated reports per month included.
- Pro: 10 validated reports per month included.
- Integrated: 25 validated reports per month included.
- Exceeding your monthly limit may result in overage fees or postponed processing at Triagio's discretion.
5. Intellectual Property
You retain all rights to your data, including vulnerability reports and communications.
Triagio retains all rights to the Platform software, aggregated and anonymized threat intelligence, and service improvements.
6. Liability
The Service is provided "as is" without warranties of any kind, express or implied.
Triagio is not liable for any damages arising from:
- The inherent risks of vulnerability scanning and security testing.
- Actions or omissions by Researchers or Customers.
- Business interruption, data loss, or indirect damages, provided Triagio has exercised due care in service delivery.
7. Governing Law
These Terms of Service are governed by and construed in accordance with Dutch law.
Any disputes arising from or relating to these Terms shall be exclusively resolved by the competent courts of Amsterdam, the Netherlands.