These terms govern your use of cyber72.com and, where no separate signed agreement says otherwise, the security services we provide. Cyber72 is owned and operated by Vadim Leviev, trading as Internet Solutions, a sole proprietorship registered in Israel, Alon Tower 2, 94 Yigal Alon Street, Tel Aviv-Yafo, Israel.
Effective 23 October 2026.
Scope of these terms
By using this website you accept these terms. If you do not accept them, do not use the site.
Where we deliver services, the contract is between you and Vadim Leviev, trading as Internet Solutions. A signed statement of work, master services agreement or rules-of-engagement document takes precedence over these terms to the extent of any conflict. These terms fill the gaps that such a document leaves open; they do not replace it.
Definitions
- “We”, “us”, “Cyber72” – Vadim Leviev, trading as Internet Solutions, owner and operator of the Cyber72 brand.
- “You”, “Client” – the organisation that engages us, and the people acting on its behalf.
- “Engagement” – the work described in a signed statement of work: a penetration test, red-team exercise, incident response, audit, advisory or retainer.
- “Scope” – the systems, applications, networks, identities, time windows and techniques the statement of work and the rules of engagement permit.
- “Client Materials” – anything you give us or we access in your systems for the engagement, including data, credentials, documentation and configuration.
- “Deliverables” – the reports, findings, reproducers, evidence and retest results we produce for you.
Engagements and scope of services
Every engagement starts from a written statement of work that sets out the objectives, the scope, the schedule, the deliverables and the fee. We do not begin work before it is signed and, where testing is involved, before the authorisation described below is in place.
Work outside the agreed scope is not performed. If we identify something worth testing that the scope does not cover, we raise it with you and, if you want it covered, we agree a change in writing before touching it. A change to scope, schedule or effort may change the fee, and we will tell you before it does.
Our obligation is to perform the engagement with the reasonable skill and care of a competent offensive-security practitioner. Security testing is a point-in-time, effort-bounded exercise: an engagement finds what it finds within its scope and its window. It is not a guarantee that a system contains no vulnerabilities, and neither a clean report nor a completed retest certifies that you cannot be breached.
Fees, invoicing and taxes
Fees, currency and the payment schedule are set out in the statement of work. Unless it says otherwise, invoices are payable within 30 days of the invoice date. Fees are exclusive of VAT and of any other tax or duty, which you pay in addition where the law requires it.
Reasonable pre-agreed expenses – travel, accommodation and any third-party service bought specifically for your engagement – are billed at cost. We do not incur billable expenses without your prior written approval.
If an invoice is overdue we may suspend work on notice, and we may charge interest at the rate permitted by Israeli law. Suspension for non-payment does not extend any deadline we have committed to.
Authorisation to test
You are responsible for the accuracy of the asset list you give us. If you place an asset in scope that you are not entitled to authorise, you indemnify us against any claim arising from testing it in good faith on your instruction.
Testing carries inherent operational risk: an exploit attempt, a credential test or a denial-of-service check can degrade or interrupt a live service, even when carried out carefully. We manage that risk with an agreed test window, an agreed intensity, an escalation contact reachable throughout the window, and an immediate stop on your instruction. We ask you to hold current backups and a restore path before testing starts. Except for damage caused by our gross negligence or wilful misconduct, we are not liable for interruption or degradation that results from testing you authorised.
You must tell us, before the window opens, about anything fragile, safety-critical or operationally sensitive in scope. We stop immediately and contact you if we find evidence of a pre-existing compromise, of an active third-party intrusion, or of material that is unlawful to hold.
Client materials and data handling
Client Materials remain yours. We use them only to deliver the engagement, we hold them under the controls described in our Privacy Policy, and we return or destroy them at the end of the engagement and confirm that in writing.
Where an engagement gives us access to personal data in your systems, you are the controller and we act as a processor on your documented instructions. If that processing needs a data processing agreement, we sign one; where it is in place, it prevails over this section.
You must not send us personal data of special sensitivity, regulated health or payment-card data, or classified material unless the statement of work expressly provides for it and the necessary safeguards are agreed in writing first.
Intellectual property
The cyber72.com website, its design, text, graphics and code are owned by Vadim Leviev, trading as Internet Solutions or licensed to us, and are protected by copyright and trade-mark law. You may read the site and share links to it, and you may quote short extracts with attribution. You may not copy, republish, scrape at scale, or use our name or logo to imply an endorsement or a relationship that does not exist.
On payment in full, the Deliverables produced specifically for you become yours to use internally, to give to your auditors, insurers and regulators, and to pass to the suppliers whose systems the findings concern.
We keep ownership of the methodology, tooling, scripts, checklists, know-how and generic techniques we bring to or develop during the engagement, including anything of general application that is not specific to your environment. Nothing in an engagement transfers that to you, and nothing stops us using our accumulated experience for other clients – subject, always, to the confidentiality section below.
Confidentiality
Each side keeps the other’s confidential information confidential, uses it only for the engagement, and protects it with at least the care it applies to its own confidential information. This survives the end of the engagement.
Your findings, vulnerability detail, exploit code and reports are your confidential information. We do not publish them, submit them to a bug-bounty programme or a disclosure platform, disclose them to another client, or name you in marketing or a case study without your written consent. Where you do consent to a reference, we agree the wording with you first.
Confidentiality does not cover information that is already public through no breach, that a party held before disclosure without a duty of confidence, that a party develops independently, or that the law or a lawful order compels a party to disclose – and in that last case we tell you before we disclose, where we are lawfully able to.
Warranties and disclaimers
We warrant that we will perform the engagement with reasonable skill and care, using suitably qualified personnel, and in accordance with the statement of work.
Beyond that, and to the fullest extent the law permits, the website and the services are provided without further warranty of any kind, express or implied, including any implied warranty of merchantability, fitness for a particular purpose or non-infringement. We do not warrant that the website will be uninterrupted or error-free, that content on it is complete or current, or that an engagement will identify every vulnerability in scope. Implementing our recommendations, and the security of your environment after the engagement, remain yours.
Limitation of liability
Nothing in these terms limits liability that cannot lawfully be limited, including liability for death or personal injury caused by negligence, for fraud, or for wilful misconduct.
Subject to that, and to the fullest extent Israeli law permits: neither party is liable for indirect, incidental, special, consequential or punitive loss, or for loss of profit, revenue, goodwill, business opportunity or data, however caused; and our total aggregate liability arising out of or in connection with an engagement is limited to the fees you paid us for that engagement in the 12 months before the event giving rise to the claim.
For use of this website where there is no engagement and no fee, our total aggregate liability is limited to ILS 1,000.
A claim must be brought within 12 months of the date on which the claiming party became aware, or ought reasonably to have become aware, of the circumstances giving rise to it.
Term and termination
These website terms apply for as long as you use the site. An engagement runs for the term set out in its statement of work.
Either party may terminate an engagement on 30 days’ written notice, or immediately if the other commits a material breach that is not remedied within 14 days of written notice, or becomes insolvent. We may also suspend or terminate immediately if continuing would require us to act unlawfully or outside an authorisation.
On termination you pay for work performed and expenses properly incurred up to the termination date, we deliver what is complete at that point, and each side returns or destroys the other’s confidential information. The sections on client materials, intellectual property, confidentiality, warranties, liability and governing law survive termination.
Governing law and disputes
These terms and any engagement are governed by the laws of the State of Israel, without regard to conflict-of-laws rules. The competent courts of Tel Aviv-Yafo have exclusive jurisdiction over any dispute, and both parties submit to that jurisdiction.
Before starting proceedings, the parties will try in good faith to resolve the dispute through direct discussion between people with authority to settle it. Nothing in this section prevents either party from seeking urgent injunctive relief to protect confidential information or intellectual property.
If a provision of these terms is held invalid or unenforceable, it is severed and the rest stays in force. A failure to enforce a right is not a waiver of it. You may not assign your rights under an engagement without our written consent.
Changes to these terms
We may update these terms. The revised version is posted here with a new effective date and applies to use of the site from that date. Changes do not alter the terms of a signed statement of work already in force; those change only by written agreement between the parties.
Contact
Questions about these terms, an engagement or a contract? Write to us.
- Email: [email protected]
- Phone: +972-3-375-1193
- Post: Vadim Leviev, trading as Internet Solutions, Alon Tower 2, 94 Yigal Alon Street, Tel Aviv-Yafo, Israel
Cyber72 is owned and operated by Vadim Leviev, trading as Internet Solutions, a sole proprietorship registered in Israel · Terms & Conditions · Effective 23 October 2026.