Terms & Conditions.
The terms under which Ryvane provides its website, research, audits, and training services. Plain English first; the legal precision comes from the engagement letter you sign before any paid work.
By using ryvane.com or engaging Ryvane for any paid service, you agree to the terms below. If you don't agree with any of them, please don't use the site or hire us. These terms apply to the website and to any free-of-charge content on it; paid engagements are governed in detail by a separate engagement letter or master services agreement, which prevails over anything stated here.
01 — About these terms
Who we are.
"Ryvane" refers to Ryvane Pvt. Ltd., the legal entity that operates this website and delivers our research, audit, and training services. "We", "us", and "our" mean the same thing. "You" means anyone who visits this website, contacts us, or engages us for a service.
We may update these terms from time to time. The "Last updated" date above tells you when the current version was published. Continued use of the site after a change means you've accepted the new version.
02 — The website
What you can and can't do here.
You're welcome to read, share, and link to anything we publish — including the Journal, the methodology page, and any open research notes. Attribution is appreciated, not required.
You agree not to:
- Use the site in any way that breaks applicable laws or that we'd consider abusive
- Attempt to break into, probe, or stress-test our infrastructure without prior written permission
- Scrape the site for the purpose of redistributing content commercially without our agreement
- Misrepresent yourself, your company, or your intent when reaching out via our contact channels
The website is provided "as is". We try to keep it accurate and up to date, but we don't guarantee it's free of typos, technical errors, or outdated information.
03 — Engagements
How paid work actually starts.
Nothing on this website is a binding offer to provide services. We begin every paid engagement with a short scoping conversation followed by a written engagement letter that covers scope, deliverables, timeline, fees, confidentiality, and any other terms relevant to the work.
That engagement letter — not this website — is the contract that governs the engagement. If anything in these site terms conflicts with the engagement letter, the engagement letter wins.
04 — Intellectual property
Who owns what.
The Ryvane name, logo, branding, and the content on this website are ours. Engagement deliverables — reports, exploit scripts, evaluation harnesses, and any code we write specifically for you — belong to you once the engagement is paid in full, subject to the terms of the engagement letter.
We retain the right to use general knowledge, techniques, and methods that don't disclose your confidential information for internal use, training materials, and future engagements. Where we want to write publicly about a class of vulnerability we found, we agree the disclosure path in the engagement letter — never unilaterally.
05 — Confidentiality
What we keep private.
Anything you share with us about your systems, your team, your security posture, or your business — whether in writing, in a call, or in shared infrastructure — is confidential. We treat it that way by default and formalise it in writing for paid engagements, either via the engagement letter or a separate non-disclosure agreement.
We don't name clients publicly without their written permission. We don't share findings between clients. We don't use findings from one engagement to win another.
06 — Limitation of liability
Reasonable limits.
The website and any free-of-charge content (including blog posts and open research) are provided without warranties of any kind. To the extent allowed by law, we're not liable for any indirect, incidental, or consequential loss arising from your use of the site or reliance on free content.
For paid engagements, the limitation of liability is the one stated in the engagement letter — typically capped at the fees paid for that engagement. We carry appropriate professional indemnity coverage for the work we do.
07 — Governing law
Where disputes are handled.
These terms are governed by the laws of India. Any dispute arising out of the use of this website is subject to the exclusive jurisdiction of the courts of Bengaluru, Karnataka. Paid engagements may specify a different governing law and venue in the engagement letter — that takes precedence.
08 — Contact
Questions about these terms.
If anything here is unclear, or if you need a copy of our standard engagement letter or non-disclosure agreement template, write to hello@ryvane.com and we'll respond.
A privacy policy is on the way. Until it's published, our short version is: we don't sell data, we don't run third-party analytics that track you across sites, and we only collect what we need to answer your messages or run an engagement. Ask us anything if that matters to you.