Network Penetration Testing Agreement

1Parties and summary

This Network Penetration Testing Agreement (the "Agreement") is made on ____________ (the "Effective Date") between Online Securitys, a Florida company headquartered at 715 Pinellas St, Suite 5, Clearwater, FL 33756, serving clients in all 50 states ((727) 340-3921) (the "Provider"), and ______________________ (the "Client").

A penetration test is a safe, approved attempt to find weaknesses in the Client's network before criminals do. The Client receives a clear report of what was found and how to fix it.

2Services

The Provider will deliver the following for the Client:

1. Planning call. Agree on scope, timing, contacts and the rules of engagement in Schedule A.
2. Testing. Approved testing of the systems listed in scope, during the agreed window.
3. Report. A plain-language report with each finding ranked by risk and clear steps to fix it, delivered within 10 business days of testing.
4. Review call. A walkthrough of the results with the Client's team.
5. Retest. One retest of fixed findings within 60 days, included.

3Client responsibilities

• Confirm in writing that it owns or is authorized to approve testing of every system in scope.
• Get any approvals needed from hosting or cloud providers.
• Name a contact reachable during testing.
• Keep backups current before testing begins.

Authorization and rules of engagement. Testing covers only the systems, addresses and dates listed in Schedule A. The Provider stops testing right away if the Client asks, or if a test affects normal operations. Any critical weakness found is reported to the Client's contact the same day.

4Fees, billing and term

Billing. Invoices are due within 15 days. Monthly plans are billed in advance. After 30 days past due, service may be paused with 10 days' written notice.

Term. This Agreement covers the project in Schedule A and ends when the final report or work is delivered and paid. Either party may cancel unstarted work with 10 days' written notice; completed work is billed.

Price changes. 30 days' written notice before any price change.

5Data, privacy and confidentiality

Findings and any data seen during testing are kept confidential, stored encrypted, and deleted 90 days after the final report unless the Client asks otherwise.

Client data is used only to provide this service and is never sold. It is stored on access-restricted U.S. servers and sent over encrypted connections. Each party keeps the other's business information private during this Agreement and for 2 years after it ends.

6Limits of service and liability

A penetration test shows weaknesses found at a point in time. It cannot prove a system is free of every weakness. Testing is done carefully to avoid disruption, though brief slowdowns can occur.

Each party's total liability is limited to the fees paid in the 3 months before a claim. Neither party is liable for lost profits or indirect damages.

7General terms

Nationwide service. The Provider serves clients in all 50 states and Washington, D.C. Services may be delivered remotely or on site, by the Provider's team or by qualified, vetted partners bound by the same confidentiality terms.

Governing law. This Agreement is governed by the laws of the State of Florida, where the Provider is incorporated, without regard to conflict-of-law rules. Any dispute will be resolved in the state or federal courts of Florida, unless both parties agree in writing to another venue or to binding arbitration. Where the law of the Client's state requires otherwise, that law applies to the extent required.

Whole agreement. This Agreement and Schedule A are the full agreement; changes must be in writing and signed by both parties. If any part is found unenforceable, the rest stays in effect.

Assignment. Neither party may transfer this Agreement without the other's written consent, except to a successor of its business.

Independent parties. The Provider acts as an independent contractor.

Schedule A: Service details

Signatures

More sample contracts

• Local Monthly Plan