Terms of use.

These terms apply to your use of this website. They do not govern any engagement between us. Engagements are governed by a written engagement letter and the terms referenced in it, which take precedence over anything on this site.

By using this website you accept these terms. If you do not accept them, please do not use the site.

Everything published on this site is general information about our services and about cyber and information security. It is not professional advice, it is not tailored to your organisation, and it should not be relied upon as either.

Security decisions depend on the specifics of your systems, your obligations and your risk appetite. Do not act on anything here without establishing whether it applies to you.

Durations, scopes and indicative figures on this site describe typical engagements. They are not offers and they are not contractual. Fees and scope are agreed in writing before work starts.

Where this site refers to ISO 27001, Cyber Essentials, IEC 62443, the NIS Cyber Assessment Framework or any other standard, it refers to frameworks we align our work to.

We are not a certification body and we are not an accredited assessor. We do not claim certification against any of these standards, and nothing on this site should be read as such a claim. Where you need certification, an accredited body issues it.

The content of this site, including the writing, diagrams and document extracts, is ours unless stated otherwise. You may read it, print it and share links to it. You may not republish it as your own or present it as another organisation’s work.

All document extracts shown on this site are illustrative. They contain no client information and do not represent any actual engagement.

Do not use this site to attempt to gain unauthorised access to it or to anything connected to it, to disrupt it for other visitors, or to submit anything unlawful through its forms.

Good-faith security research is welcome and is covered by our disclosure policy. Please read security.txt before testing, keep to what it permits, and report what you find rather than publishing it first.

We take reasonable care over what is published here but we do not warrant that it is complete, current or free from error. To the extent permitted by law, we exclude liability for loss arising from reliance on this site.

Nothing here excludes liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot lawfully be excluded.

These terms are governed by the law of England and Wales, and the courts of England and Wales have exclusive jurisdiction over any dispute arising from them.