TERMS OF SERVICE

ACCEPTANCE OF TERMS

By accessing or using the TRST CYBER website at trstxcyber.com (the "Site"), using any of our free scanning tools, submitting any forms, or engaging our professional services, you agree to be bound by these Terms of Service ("Terms"). If you do not agree, do not use the Site or our services.

These Terms constitute a legally binding agreement between you ("User," "you," or "your") and TRST CYBER ("TRST," "we," "us," or "our"), a cybersecurity operations firm located at 5762 Bolsa Ave. Unit 101, Huntington Beach, CA 92649.

If you are using the Site or services on behalf of a business or organization, you represent that you have the authority to bind that entity to these Terms. In that case, "you" refers to that entity.

DESCRIPTION OF SERVICES

TRST CYBER provides the following cybersecurity and technology services, subject to separate engagement agreements where applicable:

Managed Detection & Response (MDR)

24/7 security operations center (SOC) monitoring, threat detection, incident response, and remediation for business networks and endpoints, powered by the Field Effect platform.

Enterprise Cybersecurity

Comprehensive security architecture, network defense, endpoint protection, vulnerability management, and security program development for mid-market and enterprise organizations.

Personal Cybersecurity

Individual, family, and executive digital protection services including data broker removal (via Incogni), identity monitoring (via Aura), executive digital protection (via BlackCloak), and personal security assessments.

Digital Forensics & Incident Response

Computer forensics, network forensics, mobile device analysis, malware analysis, incident investigation, evidence preservation, and expert reporting.

CISO & CIO Advisory Services

Fractional and virtual CISO/CIO engagements, security program leadership, board-level reporting, and strategic technology advisory.

AI Governance Advisory

AI risk assessment, policy development, responsible AI framework implementation, and alignment with emerging AI regulations and standards.

ISO Compliance

ISO 27001 (Information Security) and ISO 42001 (AI Management System) readiness assessments, implementation support, and audit preparation.

Cyber Insurance Facilitation

Cyber insurance procurement and advisory through our partnership with CORK, including risk assessment, policy selection guidance, and claims support. Coverage available up to $500,000 warranty.

Free Security Tools

Browser-based email breach scanner and domain recon scanner, provided at no cost for informational purposes (see Section 3).

FREE SCANNER TOOLS

No guarantee of accuracy. Our scanners query publicly available third-party data sources (XposedOrNot, Cloudflare DoH, crt.sh, NIST NVD, and optionally HaveIBeenPwned). We do not control the accuracy, completeness, or timeliness of these data sources. A "clean" scan does not mean your email or domain is secure. A scan showing findings does not mean you have been actively compromised.

No active exploitation. Our scanners perform passive queries against public databases and DNS resolvers. We do not perform port scanning, vulnerability exploitation, social engineering, password testing, or any form of active penetration testing.

No data retention. Scanner inputs (email addresses, domain names) and results are not stored on our servers beyond the duration of the API request. Results are rendered client-side in your browser.

Not professional advice. TRST CYBER is not liable for any actions you take — or fail to take — based on scan results. If scanner results indicate potential exposure, we strongly recommend engaging a qualified cybersecurity professional (us or otherwise) for a proper assessment.

AUTHORIZED USE & PROHIBITED CONDUCT

Authorization Requirement

By using our scanning tools, you represent and warrant that:

• You own the email address or domain you are scanning, or
• You have written authorization from the owner to scan that email address or domain, or
• You are an authorized agent of the organization that owns the domain (e.g., IT administrator, security officer, authorized consultant).

General Prohibited Conduct

You agree not to:

• Use the Site or services for any unlawful purpose
• Attempt to reverse-engineer, decompile, or extract source code from our tools or site
• Scrape, crawl, or bulk-query our scanning tools via automated scripts or bots
• Attempt to circumvent rate limits, access controls, or security measures on our site
• Submit false, misleading, or fraudulent information in any form
• Use our tools to facilitate hacking, phishing, social engineering, or other malicious activities
• Impersonate TRST CYBER, our employees, or our partners
• Interfere with the operation of the Site or disrupt other users' access

CYBER INSURANCE DISCLAIMER

TRST CYBER facilitates cyber insurance through our partnership with CORK and other third-party insurance providers. The following terms apply:

• TRST CYBER is not an insurer. We act as a facilitator and advisor. We are not an insurance company, underwriter, or claims adjuster.
• Coverage is subject to provider terms. All insurance coverage, limits, exclusions, deductibles, and claims processes are governed by the insurance provider's policy documents — not by TRST CYBER.
• No guarantee of coverage. We do not guarantee that any application for insurance will be approved, that coverage will apply to a specific claim, or that any particular loss will be covered.
• Warranty limitations. Coverage available up to $500,000 warranty is subject to the insurer's underwriting criteria and policy terms. Actual coverage amounts may vary.
• Independent review required. You should independently review all insurance policy documents and consult with a licensed insurance professional before making coverage decisions.

DIGITAL FORENSICS DISCLAIMER

TRST CYBER provides digital forensics and incident response services subject to the following terms:

• Evidence-based findings. Forensic findings and conclusions are based on the available evidence at the time of examination. We document our methodology and maintain chain of custody per industry standards (including NIST SP 800-86 and ISO/IEC 27037 guidelines).
• No guarantee of admissibility. While we follow forensically sound practices designed to preserve evidence integrity, TRST CYBER does not guarantee that forensic findings will be admissible in all courts, tribunals, or jurisdictions. Admissibility determinations are made by the presiding authority.
• Scope limitations. Forensic analysis is limited to the data, devices, and systems made available to us. We cannot analyze what we do not have access to. Incomplete evidence may result in incomplete conclusions.
• Expert testimony. Expert witness testimony, depositions, or court appearances are available as a separate engagement with independent terms and fees.
• Preservation obligations. Clients are responsible for complying with any legal hold or preservation obligations applicable to their data. TRST CYBER will advise on preservation best practices but does not assume your legal preservation duties.

CONFIDENTIALITY

We understand that cybersecurity engagements involve access to sensitive information. TRST CYBER maintains strict confidentiality standards:

• Client data protection. All client engagement details, findings, vulnerabilities, network architecture, and business information disclosed to us are treated as confidential.
• No public disclosure. We will not publicly disclose that you are a client, reference your engagement in marketing materials, or share any engagement details without your explicit written consent.
• Personnel obligations. TRST CYBER personnel with access to client data are bound by confidentiality obligations.
• Exceptions. Confidentiality obligations do not apply to information that: (a) is or becomes publicly available through no fault of ours; (b) was known to us before the engagement; (c) is independently developed by us without reference to your confidential information; or (d) is required to be disclosed by law, regulation, or court order — in which case we will provide notice where legally permitted.

For contracted engagements, confidentiality terms in the applicable service agreement or NDA will supersede these general provisions.

SERVICE LEVEL EXPECTATIONS

The following service level expectations apply. Specific SLAs for contracted clients are defined in individual service agreements and take precedence over these general expectations.

24/7 SOC Operations

For clients with active MDR contracts, our Security Operations Center operates 24 hours a day, 7 days a week, 365 days a year. Continuous monitoring and alerting is provided per the terms of your MDR agreement.

Incident Response

Response times for security incidents vary by engagement tier. Critical severity incidents (active breaches, ransomware) receive priority response. Specific response time commitments are documented in your service agreement.

General Inquiries

Inquiries submitted through website forms (recon-lead, brief, personal-recon-lead) will receive an initial response within 1 business day during normal business hours (Monday–Friday, 8:00 AM–6:00 PM PT, excluding US federal holidays).

Free Scanner Tools

Our free scanning tools are provided without any uptime guarantee, SLA, or performance commitment. We may modify, suspend, or discontinue the tools at any time without notice.

INTELLECTUAL PROPERTY

All content on this Site — including but not limited to text, design, graphics, logos, trademarks, code, scanning tools, methodologies, security frameworks, report templates, and documentation — is the property of TRST CYBER or its licensors and is protected by US and international intellectual property laws.

You may not copy, reproduce, distribute, modify, create derivative works from, publicly display, or commercially exploit any content from this Site without our prior written consent.

Client deliverables. Reports, assessments, and other deliverables created for you under a service engagement are licensed to you for your internal business use as specified in the applicable service agreement. Underlying methodologies, tools, and frameworks remain TRST CYBER property.

Your content. You retain ownership of any data, documents, or information you provide to us for the purpose of service delivery. By providing such content, you grant us a limited, non-exclusive license to use it solely for the purpose of delivering the engaged services.

LIMITATION OF LIABILITY

No consequential damages. In no event shall TRST CYBER, its officers, directors, employees, agents, or partners be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to:

• Loss of profits, revenue, data, or business opportunity
• Cost of substitute services or procurement
• Business interruption or downtime
• Damages arising from unauthorized access to or alteration of your systems
• Damages resulting from actions taken or not taken based on scan results
• Damages arising from third-party service provider failures (including Field Effect, BlackCloak, Aura, Incogni, CORK, or any API providers)

This limitation applies regardless of whether the damages were foreseeable and regardless of whether TRST CYBER was advised of the possibility of such damages.

Scanner tools. The free scanning tools are provided AS-IS and WITHOUT WARRANTY OF ANY KIND, either express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, accuracy, or non-infringement.

Some jurisdictions do not allow the exclusion or limitation of certain damages. In those jurisdictions, our liability is limited to the maximum extent permitted by law.

INDEMNIFICATION

You agree to indemnify, defend, and hold harmless TRST CYBER and its officers, directors, employees, agents, and partners from and against any and all claims, demands, losses, damages, liabilities, costs, and expenses (including reasonable attorneys' fees) arising out of or related to:

• Your use of the Site or services in violation of these Terms
• Your use of scanning tools on email addresses or domains you do not own or are not authorized to scan
• Any content or data you submit to us that infringes on third-party rights
• Your violation of any applicable law, regulation, or third-party rights
• Any dispute between you and a third party arising from your use of our services or scan results

GOVERNING LAW & JURISDICTION

These Terms shall be governed by and construed in accordance with the laws of the State of California, without regard to its conflict-of-law principles.

Any legal action or proceeding arising under these Terms shall be brought exclusively in the state or federal courts located in Orange County, California, and you hereby consent to the personal jurisdiction and venue of such courts.

DISPUTE RESOLUTION

Informal Resolution First

Before initiating any formal dispute resolution process, you agree to contact us at info@trstxcyber.com and attempt to resolve the dispute informally for at least 30 days.

Binding Arbitration

If informal resolution fails, any dispute, claim, or controversy arising out of or relating to these Terms, or the breach, termination, enforcement, interpretation, or validity thereof, shall be resolved by binding arbitration administered by JAMS under its Comprehensive Arbitration Rules and Procedures. The arbitration shall take place in Orange County, California. The arbitrator's decision shall be final and binding and may be entered as a judgment in any court of competent jurisdiction.

Small Claims Exception

Notwithstanding the above, either party may bring an individual action in small claims court in Orange County, California, if the claim qualifies.

Class Action Waiver

You agree that any dispute resolution proceedings will be conducted only on an individual basis and not in a class, consolidated, or representative action. You waive the right to participate in a class action lawsuit or class-wide arbitration.

FORCE MAJEURE

TRST CYBER shall not be liable for any failure or delay in performing its obligations under these Terms to the extent such failure or delay results from circumstances beyond our reasonable control, including but not limited to:

• Acts of God, natural disasters, pandemics, or epidemics
• Cyber attacks, ransomware attacks, DDoS attacks, or other malicious cyber operations directed at TRST CYBER, our infrastructure, or our service providers
• Internet or telecommunications infrastructure failures
• Third-party API outages or data source unavailability (including XposedOrNot, Cloudflare, crt.sh, NIST NVD, or HaveIBeenPwned)
• Government actions, sanctions, embargoes, or regulatory changes
• War, terrorism, civil unrest, or acts of foreign enemies
• Labor disputes, strikes, or shortages
• Power outages or utility failures

We will make reasonable efforts to notify you of any force majeure event and resume performance as soon as practicable.

EXPORT CONTROLS

Our services and the information provided through our Site may be subject to United States export control laws, including the Export Administration Regulations (EAR) and sanctions programs administered by the Office of Foreign Assets Control (OFAC).

You agree not to use, export, re-export, or transfer our services or any related information in violation of US export control laws. You represent that you are not located in, under the control of, or a national or resident of any country subject to US trade sanctions, and that you are not on any US government restricted party list.

Certain cybersecurity tools, techniques, and knowledge may be classified as controlled technology under EAR. TRST CYBER complies with all applicable export regulations in the delivery of our services.

GENERAL PROVISIONS

Entire Agreement

These Terms, together with our Privacy Policy and any applicable service agreement, constitute the entire agreement between you and TRST CYBER regarding the use of the Site. For contracted services, the terms of your service agreement will govern in the event of a conflict with these Terms.

Severability

If any provision of these Terms is held to be invalid, illegal, or unenforceable by a court of competent jurisdiction, that provision will be enforced to the maximum extent permissible, and the remaining provisions will continue in full force and effect.

Waiver

Our failure to enforce any right or provision of these Terms shall not be deemed a waiver of such right or provision. Any waiver of any provision must be in writing and signed by TRST CYBER.

Assignment

You may not assign or transfer these Terms or any rights or obligations hereunder without our prior written consent. TRST CYBER may assign these Terms without restriction.

Amendments

We reserve the right to modify these Terms at any time. Material changes will be posted on this page with an updated effective date. Continued use of the Site after changes are posted constitutes acceptance of the modified Terms. For contracted clients, amendments to service-specific terms require mutual written agreement.

Headings

Section headings are for convenience only and do not affect the interpretation of these Terms.

Survival

Provisions that by their nature should survive termination of these Terms will survive, including but not limited to: Limitation of Liability, Indemnification, Intellectual Property, Confidentiality, Governing Law, and Dispute Resolution.

CONTACT US

For questions about these Terms of Service, contact: