Terms of Service

SAKASEC maps an organisation’s externally visible attack surface. AI-assisted tooling discovers internet-facing assets, exposure signals and technical OSINT leads connected to the domains you submit; AKASEC specialists then validate, interpret and prioritise the findings and deliver a curated report through the customer dashboard.

Asset discovery is passive and external. It relies on publicly available information and non-intrusive techniques. It is not penetration testing, active exploitation, or any form of intrusive testing. Any active testing is performed only under a separate, explicitly agreed engagement with its own written scope and authorisation.

Threat Hunting is a separate, optional service. Each month AKASEC performs a hunt across the security telemetry in your own Microsoft 365 / Microsoft Defender XDR tenant, looking for signs of compromise, and delivers a report that a AKASEC specialist has reviewed.

The service uses read-only access to your tenant, granted by your Global Administrator through Microsoft’s admin-consent flow (a single Microsoft application permission, ThreatHunting.Read.All). We read security telemetry only. We do not make changes in your tenant, remediate, or perform active exploitation. Granting access does not by itself start a hunt: AKASEC reviews and authorises your tenant first, and a person reviews every report before it is delivered.

You may revoke this access at any time from your Microsoft Entra admin centre (Enterprise applications, then the AKASEC Threat Hunting application, then Delete); revoking stops all further access. You are responsible for providing an accurate tenant and for ensuring the person who grants consent is authorised to do so on behalf of your organisation. Our handling of the telemetry we access is described in our Privacy Policy.

Because our work concerns security reconnaissance, authorisation is fundamental. By submitting any domain, asset or scope, you represent and warrant that:

• you own or control the submitted domains and assets, or are otherwise duly authorised to instruct discovery activities in respect of them;
• for Threat Hunting, you are authorised to grant AKASEC read-only access to the Microsoft 365 tenant you provide, and the individual who grants admin consent is authorised to do so on behalf of your organisation;
• you have the authority to accept these Terms on behalf of your organisation;
• your instructions do not, and your use of the reports will not, breach any law or any third party’s rights.

You must not submit assets you are not authorised to have assessed. You agree to indemnify and hold AKASEC harmless against any claim, loss or liability arising from a breach of these warranties or from scope you were not authorised to submit.

The paid services are recurring monthly subscriptions. Fees are stated on our site exclusive of VAT, which is added at checkout where applicable. Payments are processed by Stripe; by subscribing you also agree to Stripe’s terms.

Asset discovery is billed per domain in your discovery scope. Adding a domain increases your monthly fee and is charged pro-rata for the remainder of the current billing period; removing a domain decreases it, with a pro-rata credit applied to your next invoice. Your primary domain is included and is managed by AKASEC.

Threat Hunting is billed as a flat monthly fee per tenant (one hunt per month). You may hold both services at the same time; each is a separate subscription, billed, renewed and cancellable independently.

• Renewal: the subscription renews automatically each month until cancelled.
• Cancellation: you may cancel at any time via the customer dashboard (Stripe Customer Portal). Cancellation takes effect at the end of the current billing period; you retain access until then.
• No partial refunds: except where required by mandatory law, fees already paid for the current period are non-refundable.
• Price changes: we may change fees for future billing periods with reasonable prior notice; any “founding” or launch pricing applies only as described at the time of purchase.

A report reflects information reasonably discoverable at a point in time. Attack surfaces change constantly and discovery cannot be exhaustive. We do not warrant that a report identifies every asset, exposure or vulnerability, and a report is not a certification of security. You remain responsible for your own security decisions and for acting on the findings.

You agree not to:

• submit scope you are not authorised to have assessed;
• use the service or any report to facilitate unlawful activity, or to target systems you do not control or are not authorised to assess;
• attempt to disrupt, reverse engineer or gain unauthorised access to our platform;
• resell or redistribute the service or reports except as permitted below.

We (and our licensors) own the SAKASEC platform, methodology and tooling. We grant you a non-exclusive, non-transferable licence to use the reports we deliver for your organisation’s internal security purposes.

You retain ownership of the information you submit. You grant us the licence needed to provide the service, including to process your scope and produce and deliver reports. Our handling of personal data is described in our Privacy Policy.

Each party will protect the other’s non-public information and use it only to perform or use the service. Reports and the details of your environment are treated as your confidential information. We may disclose information where required by law.

To the maximum extent permitted by law, the service is provided “as is” without warranties of any kind, express or implied, including fitness for a particular purpose. Nothing in these Terms excludes liability that cannot be excluded under mandatory law.

Subject to the foregoing, AKASEC is not liable for indirect, incidental or consequential loss, loss of profit, data or goodwill; and our total aggregate liability arising out of or in connection with the service is limited to the fees you paid to us in the twelve (12) months preceding the event giving rise to the liability.

These Terms apply for as long as you use a service or hold a subscription. We may suspend or terminate access if you materially breach these Terms (including the authorisation warranties in section 3) or where required by law. On termination your right to use the services and reports ends, subject to sections that by their nature survive (including 3, 7, 8, 9 and 13).

We may update these Terms from time to time. Material changes will be notified by a reasonable means (for example by email or in the dashboard). Continued use after changes take effect constitutes acceptance.

These Terms are governed by the laws of the Netherlands. The parties submit any disputes to the District Court of The Hague (Rechtbank Den Haag), without prejudice to any mandatory consumer protections that may apply.

AKASEC B.V.

• Registered address: Wilhelmina van Pruisenweg 104, 2595 AN The Hague, the Netherlands
• Chamber of Commerce (KvK): 92701280
• VAT / BTW: NL866145886B01
• Email: legal@sakasec.ai