Terms of Use

1. About Olimpio and these Terms

Olimpio Security ("Olimpio", "we", "us", or "our") provides External Security Assessments and Continuous Monitoring for authorised internet-facing systems. These Terms govern the Olimpio website, app.olimpio.io, and related reports and services.

By using the website, platform or services, you agree to these Terms. If you do not agree, do not use the relevant service.

Olimpio Security Ltd is registered in England and Wales with company number 16684354. Our registered office is 27 Pine Street, Haslingden, Rossendale, Lancashire, BB4 5ND. We are registered with the Information Commissioner's Office (ICO) as a data controller, registration number C1981234.

2. The services

An External Security Assessment is a human-led, non-destructive assessment of an agreed and authorised internet-facing scope. It uses software-assisted technical work and analyst review to provide prioritised findings, remediation guidance and a report.

Continuous Monitoring is a recurring service delivered through app.olimpio.io that provides ongoing visibility of authorised internet-facing exposure. Current pricing and applicable service details are shown on the Olimpio website or during checkout.

3. Service arrangements and billing

Assessment scope, deliverables and timing are agreed before work begins. Continuous Monitoring is recurring and requires an active subscription. Subscription billing is handled through Stripe where presented during checkout; Olimpio does not store payment card details.

Current prices, billing intervals and cancellation options are shown on the Olimpio website or in the applicable checkout and account experience.

4. Authorised use — what you may scan

You may only scan assets you own or are explicitly authorised to test. This is a strict condition of using the service.

You confirm and warrant that, before running any scan, you either:

• own the domain, IP address, or system being scanned; or
• hold documented, current written authorisation from the system owner to perform external security scanning of the specified target.

Unauthorised computer access and unauthorised security testing are offences under the Computer Misuse Act 1990 (and equivalent laws in other jurisdictions). Scanning targets you do not own or are not authorised to test may expose you to criminal liability and civil claims regardless of whether Olimpio is used as the tool.

You must not use Olimpio to:

• Scan domains, IP addresses, or systems belonging to third parties without their written permission.
• Attempt to access, probe, or interfere with systems you are not authorised to test.
• Conduct denial-of-service, destructive, or exploit-based attacks.
• Misrepresent your authority to scan a given target when registering or running a scan.
• Circumvent rate limits, access controls, or security measures of the platform.
• Use the platform for any unlawful purpose.

We may suspend or terminate accounts where we have reasonable grounds to believe authorisation requirements have not been met, where targets submitted appear to be third-party systems, or where misuse is suspected. We reserve the right to report suspected unlawful use to relevant authorities.

5. Your responsibilities

You are responsible for:

• Verifying you have authorisation before submitting any scan target.
• Maintaining the security of your account credentials.
• Ensuring any team member or colleague using your account also complies with these Terms.
• Notifying relevant internal teams, hosting providers, or managed service providers where required before scanning.
• Reviewing scan findings and deciding independently how to prioritise and implement remediation steps.
• Having qualified personnel apply any changes to live systems and validating those changes in a test environment first where practical.

6. Assessment and monitoring limitations

Olimpio provides risk indicators and advisory information relating to authorised internet-facing systems. Findings are intended to help you understand and prioritise external cyber risk.

External Security Assessments are non-destructive unless otherwise expressly agreed. Neither an assessment nor Continuous Monitoring is a guarantee that systems are secure, complete protection, or a substitute for all other security activity.

Coverage is limited by the agreed scope, publicly observable information, network conditions and changes made over time. Services do not cover internal systems, authenticated applications, social engineering or physical security unless expressly agreed in writing.

Remediation guidance is provided to help prioritise next steps but should be reviewed in the context of your specific environment before implementation.

7. Reports and intellectual property

Assessment reports and platform output are made available to you for your own internal security improvement, compliance, and remediation planning.

The Olimpio name, logo, platform, software, scanning methodology, report templates, and all related materials are owned by Olimpio Security Ltd. Nothing in these Terms transfers ownership of Olimpio intellectual property to you.

You may not resell, redistribute, or present Olimpio reports or output as your own proprietary security product without written permission. IT consultants and MSPs using Reports may be shared with your relevant internal teams and IT providers for security remediation planning, subject to these Terms.

8. Suspension and termination

We may suspend or terminate your account at any time where:

• You breach these Terms, in particular the authorised use provisions.
• We have reasonable grounds to believe your use is unlawful.
• Scan activity appears to target systems you are not authorised to test.
• Payment of a subscription is overdue.
• Continued access would expose Olimpio or third parties to harm or legal risk.

Subscription cancellation and access arrangements are shown during checkout or in the applicable account experience. We may suspend or terminate access as described above.

9. No security guarantee

Cybersecurity risk cannot be fully eliminated. Olimpio does not guarantee that every vulnerability, exposure, misconfiguration, or weakness will be identified. Coverage varies by authorised scope, target and available information. An Olimpio report is a practical aid, not a certification or assurance of security.

10. Limitation of liability

To the maximum extent permitted by applicable law, Olimpio Security Ltd will not be liable for indirect, consequential, incidental, special, or punitive losses, including loss of profits, loss of data, security incidents, business interruption, or losses arising from reliance on scan results or remediation guidance.

Our total liability for any direct loss will not exceed the amount you paid to us in the three months prior to the event giving rise to the claim, or £100 where no payment has been made.

Nothing in these Terms excludes or limits liability for fraud, personal injury or death caused by negligence, or any other liability that cannot be excluded by law.

11. Third-party services

The platform uses third-party infrastructure, vulnerability data sources, and services to operate. These may have their own terms and limitations. We are not responsible for third-party service availability, accuracy, or any changes those providers make.

The Olimpio website may link to external resources for reference. We are not responsible for content on third-party websites.

12. Changes to these Terms

We may update these Terms from time to time. The "Last updated" date at the top of this page reflects when the current version was published. Continued use of the platform after we notify you of changes (by email or in-app notice) constitutes acceptance of the updated Terms.

13. Governing law

These Terms are governed by the laws of England and Wales. Any disputes will be subject to the exclusive jurisdiction of the courts of England and Wales.

14. Contact

If you have questions about these Terms, contact us at joe@olimpio.io.