Terms of Service

These Terms of Service govern use of the CyberObsidian website and any inquiry, assessment, consultation, or service relationship unless a separate written agreement says otherwise.

CyberObsidian LLC is based in Virginia and provides security administration, monitoring, endpoint, identity, and IT support services for small businesses. These terms are written to be clear, but they are still legal terms. Do not use this website or request services if you do not agree to them.

Website information is not a guarantee

Website content is provided for general information only. It is not legal advice, insurance advice, compliance certification, incident-response instruction, or a guarantee that any specific security outcome will occur.

Security conditions change quickly. Information on this site may become incomplete, outdated, or not suitable for your environment.

Client agreements control paid work

Any paid service, managed security work, assessment, project, retainer, emergency support, or ongoing engagement must be governed by a written proposal, statement of work, order form, master services agreement, or similar client agreement.

If these website terms conflict with a signed client agreement, the signed client agreement controls for that client work.

No promise of perfect security

CyberObsidian may help reduce risk, improve visibility, harden systems, monitor endpoints, support identity controls, and prepare for security events. No provider can guarantee prevention of all cyber incidents, unauthorized access, malware, ransomware, downtime, data loss, business interruption, or regulatory exposure.

You remain responsible for business decisions, risk acceptance, backup strategy, insurance decisions, legal obligations, employee conduct, third-party systems, and the accuracy of information you provide.

Scope of services

Services are limited to the scope described in the applicable written agreement. Anything not listed in that scope is excluded unless CyberObsidian agrees to it in writing.

Examples of excluded items may include:

• Guaranteed breach prevention, compliance certification, or audit sign-off.
• Legal, tax, insurance, accounting, or regulatory advice.
• Support for unmanaged systems, unsupported software, or environments outside the agreed scope.
• Work requiring credentials, approvals, licenses, access, or information you have not provided.
• Emergency, after-hours, or incident-response work unless specifically agreed.

Emergency and incident response

The public contact form is not an emergency channel. Submitting a contact form does not create an emergency response obligation, service-level agreement, client relationship, or duty to monitor your systems.

If you are an active client, emergency handling, response times, escalation paths, and covered systems must be defined in your written agreement. If you are not an active client and are experiencing an incident, contact your cyber insurance carrier, legal counsel, existing IT provider, or qualified incident-response provider immediately.

Your responsibilities

You agree to:

• Provide accurate, complete, and timely information.
• Maintain appropriate backups, insurance, internal policies, and business continuity plans.
• Maintain authority to grant access to systems, accounts, data, and vendors you ask CyberObsidian to support.
• Review recommendations and decide what risks your business accepts.
• Keep credentials, security tools, reports, and findings confidential.
• Use the website and contact form lawfully and without attempting to disrupt, probe, abuse, or compromise the site.

Access, credentials, and third-party services

Client work may depend on third-party platforms, vendors, software, hardware, cloud services, email services, endpoint tools, identity providers, hosting providers, and telecommunications providers. CyberObsidian is not responsible for outages, defects, policy changes, pricing changes, data loss, security incidents, or failures caused by third-party services unless a written agreement states otherwise.

You are responsible for keeping ownership and administrative control of your accounts, domains, licenses, subscriptions, and vendor relationships unless otherwise agreed in writing.

Confidentiality

Security findings, reports, credentials, diagrams, business records, and technical details may be confidential. Confidentiality obligations for client work should be defined in the applicable written agreement. Do not send sensitive data through the public contact form.

Fees, payment, and taxes

Fees, payment schedules, deposits, renewals, late fees, taxes, expenses, cancellation terms, and refund terms must be described in the applicable written agreement or invoice. Unless stated otherwise in writing, fees are non-refundable once work begins or service capacity is reserved.

Intellectual property

CyberObsidian owns or licenses the website content, branding, text, graphics, layout, and other materials on this site. You may not copy, resell, republish, or reuse site content except for normal viewing, sharing a link, or discussing a potential engagement.

Deliverables for client work, including reports, procedures, templates, scripts, configurations, and documentation, are governed by the applicable written agreement.

Acceptable use

You may not use this website to:

• Submit false, misleading, unlawful, abusive, or malicious content.
• Attempt unauthorized access, scanning, scraping, vulnerability testing, or disruption.
• Send spam, malware, credential theft attempts, or exploit content.
• Impersonate another person or misrepresent authority to request services.
• Violate any applicable law or third-party right.

Disclaimers

The website and any free or preliminary communications are provided as is and as available. To the maximum extent permitted by law, CyberObsidian disclaims warranties of merchantability, fitness for a particular purpose, non-infringement, uninterrupted availability, error-free operation, and any warranty arising from course of dealing or usage of trade.

Limitation of liability

To the maximum extent permitted by law, CyberObsidian will not be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, including lost profits, lost revenue, lost data, loss of goodwill, business interruption, or security incidents, even if CyberObsidian was advised those damages were possible.

For paid services, any liability limit should be stated in the applicable written agreement. If no written agreement applies, CyberObsidian's total liability related to the website or preliminary communications is limited to one hundred dollars.

Indemnification

You agree to defend, indemnify, and hold CyberObsidian harmless from claims, damages, liabilities, costs, and expenses arising from your misuse of the website, unlawful conduct, inaccurate information, unauthorized service requests, breach of these terms, or violation of third-party rights.

Privacy

Use of the website and contact form is also covered by the Privacy Policy.

Changes to these terms

CyberObsidian may update these terms from time to time. The effective date above shows when they were last updated. Continued use of the website after changes are posted means you accept the updated terms.

Governing law

These terms are governed by the laws of the Commonwealth of Virginia, without regard to conflict-of-law rules. Venue and dispute-resolution terms for paid services may be defined in the applicable written agreement.

Contact

For questions about these terms, use the contact formand include "Terms Question" in your message.