Home / Terms of service

Terms of Service

Effective 2022-10-03 · Last updated 2025-06-09

These terms are the agreement between Anobis Inc (“Worlds CyberSec”, “we”) and the business buying services (“you”). An order form, statement of work or rules of engagement signed by both sides is part of the agreement and takes precedence where it differs. By signing an order or accepting services you accept these terms.

1. Services and orders

We provide the services described on this site and in your order: managed detection and response plans, assessments, compliance and advisory work, incident response and training. Plan scope is defined by endpoint and site counts on the order, trued up quarterly from the agent inventory. Assessment scope is defined in the rules of engagement. Work outside an order is quoted in advance at the published hourly rates.

2. Term and renewal

Managed plans run for twelve months from the order date and renew for successive twelve-month terms unless either side gives 60 days' written notice. Prices do not change on renewal without 60 days' notice. Retainers run for twelve months. Assessments and projects end on delivery of the final report or deliverable and the retest where included.

3. Fees and payment

Plans and retainers are billed monthly in advance, or annually in advance at the discounted rate, by ACH or card. Assessments and projects are invoiced 50% at kickoff and 50% at report delivery, net 15. Emergency incident response is invoiced weekly, net 10. Balances more than 15 days past due accrue interest at 1.5% per month or the maximum the law allows, whichever is less, and we may suspend monitoring after ten days' written notice. You pay our reasonable costs of collection. Fees exclude taxes, which are added where they apply.

4. Your authorization and responsibilities

You confirm that you own or are authorized to have us monitor, test and act on every system, account, network and application in scope, and that you have obtained any consents your employees, customers or regulators require. You will give us the access described in the onboarding runbook, keep contacts current, and tell us promptly about changes that affect coverage: new sites, new cloud accounts, mergers, departures of named contacts. You remain responsible for your own systems, backups, patching and the decisions you make on our recommendations.

5. Containment authority

The containment playbook signed at onboarding sets what we may do without asking (for example, isolate an endpoint or revoke a session) and what needs your approval (for example, disable a named executive's account or block a business-critical service). We act in good faith under the playbook and are not liable for the business impact of an action the playbook authorizes. You may change the playbook in writing at any time; changes take effect within one business day.

6. Assessments and rules of engagement

No testing starts before both sides sign rules of engagement naming the targets, the window, the excluded techniques, the emergency contacts and the stop conditions. Denial-of-service testing and physical intrusion are excluded unless the rules of engagement include them. Testing can be stopped by either side at any time by contacting the named emergency contact. We take reasonable care, and testing carries inherent risk of disruption that you accept by authorizing it. Findings are confidential and are reported only to you.

7. Service levels

Response times by severity are published on the how it works page and in your order. Actual performance is reported monthly. If we miss the critical acknowledgement or containment target twice in a calendar quarter on a Professional or Enterprise plan, you receive a credit of 10% of that month's plan fee, applied to the next invoice, as your sole remedy for the miss. Service levels depend on the access and telemetry described in the onboarding runbook being in place.

8. No guarantee of security

Security monitoring, testing and advice reduce risk; they do not eliminate it. We do not guarantee that we will detect or prevent every intrusion, that an assessment will find every vulnerability, or that a compliance program will produce a particular audit result. Reports describe what we found in the scope and window tested.

9. Confidentiality and data

Each side keeps the other's confidential information confidential and uses it only for the agreement, for five years after the agreement ends and indefinitely for security findings and trade secrets. We process client data as described on the trust page and in our privacy policy, and will sign a data processing agreement or business associate agreement where your regulation requires one. We may use aggregated, de-identified detection data to improve our services.

10. Intellectual property

Reports, findings, policies and other deliverables are yours to use for your business once paid for. Our methodologies, detection content, templates, playbooks and tools remain ours, and we may reuse them for other clients provided your confidential information is not disclosed.

11. Liability

Each side's total liability under the agreement is limited to the fees paid or payable in the twelve months before the claim, except for breach of confidentiality, a side's indemnity obligations, gross negligence or willful misconduct, and your obligation to pay fees. Neither side is liable to the other for indirect, consequential, special or lost-profit damages. We will defend and indemnify you against third-party claims that our services infringe intellectual property; you will defend and indemnify us against third-party claims arising from your systems, data or your authorization of testing. We carry professional liability and cyber insurance and will provide certificates on request.

12. Termination

Either side may terminate for material breach not cured within 30 days of written notice. You may terminate a managed plan for convenience after the first year on 60 days' notice. On termination we return or delete your data as the trust page describes, provide reasonable transition assistance at the hourly rates, and invoice work performed to the termination date.

13. General

California law governs this agreement; courts in Riverside County, California have jurisdiction. Neither side may assign the agreement without consent, except to a successor in a merger or sale. Notices go to the email on the order and to sales@worldscybersec.com. If a term is unenforceable, the rest stands. We may update these terms with 30 days' notice on this page and by email to client contacts; orders placed after the date are under the new terms.

14. Contact

Anobis Inc
12872 Gingerwood Ct, Corona, CA 92880
sales@worldscybersec.com