Terms of service

These terms apply to services supplied by Mariusz Gadula Digital Services through Fabereye Cybersecurity.

Service

The Adaptive Web Application Pentest is an AI-orchestrated assessment of expressly authorized public web applications, authenticated web applications and APIs. One exact hostname includes paths and APIs served on that hostname. Additional hostnames, roles and retesting are separate add-ons.

Authorization and safety

You must be authorized to test every submitted target and prove control of each exact hostname using the account-specific DNS TXT or HTTPS file challenge before paying. Documents, billing details and manual approval cannot replace verification. Payment, a billing address, or access to an account does not itself authorize testing. We may pause or refuse testing when scope, ownership, safety or legality is unclear. Internal networks, private systems, destructive testing, denial-of-service, persistence, social engineering and third-party services are excluded unless separately agreed in writing.

Timing and reports

You choose a UTC start and end date, limited to 30 calendar days. We target completion within seven days after the operator starts, subject to scope and add-ons. Reports are private and available for 90 days.

Limitations

Security testing provides observations and recommendations, not a guarantee that a system is secure or that every vulnerability will be found. You remain responsible for backups, change control, incident response and decisions made from a report.

Contact

For support, scope changes or urgent stop requests, email support@fabereye.com.

Demo: one public website hostname at 10% of the full service price before tax. The report includes details only for low-risk findings. Medium, high and critical findings show counts only; their titles, locations, evidence and remediation are withheld. No add-ons, authenticated testing or dedicated API testing. No low-risk findings does not mean the website is secure.