CybersecurityServicesAgreement

When to Use

Mandatory before any testing or security operations begin on client systems.

Primary Use

VAPT, security audits, managed security monitoring, and incident response engagements.

Key Clauses

• →Explicit written authorization requirement for lawful testing
• →No exfiltration/no modification/no unauthorized retention controls
• →CVSS v3.1 aligned severity and reporting methodology
• →Critical vulnerability immediate disclosure and retest cycle

Governing Laws