Terms of use

1. Authorized testing only

Brexa tests only systems that the owner has authorized in writing, within the scope and timing agreed in the rules of engagement. Nothing on this website is an offer to test systems you do not own or control.

2. Portal accounts

• Portal accounts are created by Brexa for named people at our clients. Accounts are personal and must not be shared.
• Keep your password and authenticator codes private, and tell us right away if you think your account has been misused.
• We may suspend an account to protect a client's data, for example after suspicious sign-in activity or when a client asks us to remove someone.

3. Confidential information

Findings, reports and other engagement records in the portal are confidential to the client and Brexa. Use them only for your organization's security work and share them only as your agreement with Brexa allows.

4. Acceptable use

Do not attempt to access another organization's workspace, interfere with the portal's operation, or test the portal itself without our written permission.

5. Website content

Content on the public website, including the portal demo, is general information. The demo uses a fictional company and fictional data. Company names shown in the bug bounty section are organizations where Brexa researchers reported issues through official disclosure programs; they are not Brexa customers and do not endorse Brexa.

6. Availability and changes

We work to keep the portal available and secure but do not guarantee uninterrupted access. We may update the site and these terms; the date at the top shows the latest version.

7. Liability

To the extent the law allows, the website and portal are provided as is, and Brexa's responsibility for testing services is set out in the client agreement rather than in these terms.

8. Contact

Questions about these terms: assessment@trybrexa.com.