1. Agreement
These terms govern your use of responsered.com and any fixed-fee incident response engagement purchased through it. By using the site or paying an engagement fee, you accept them on behalf of yourself and, where applicable, the organization you represent. A signed engagement agreement, where one exists, prevails over these terms.
2. The service
Response Red provides expert-led, AI-assisted cyber incident response and digital forensics. Engagements are offered in fixed-fee tiers (P1 Emergency Response, P2 Priority Response, P3 Rapid Assessment), each with a published fee, included response hours, and a response-time target. Response-time targets are measured from payment confirmation and are service targets we staff for around the clock.
3. Fees and payment
The engagement fee is fixed, payable in advance by card through Stripe, and includes the response hours stated for the tier. Work beyond the included hours is only performed with your approval, at the published overage rate. An abandoned or cancelled checkout creates no obligation on either side.
4. Refunds
If we fail to engage a responder within the tier's target window, you may request a full refund of the engagement fee. Once a responder has engaged, the fee is earned and non-refundable; unused overage approvals are never charged.
5. Your responsibilities
You confirm that you have lawful authority over the systems, accounts, and data you ask us to investigate, and that the information you provide is accurate to the best of your knowledge. Do not submit passwords, private keys, access tokens, regulated personal data, or confidential evidence through the website — a secure channel is established for that after engagement.
6. Defensive scope
We provide defensive services only. We may decline or terminate, with a proportionate refund of unearned fees, any engagement that would require unlawful activity, action against systems you do not control, or offensive operations. The AI intake assistant provides preliminary, defensive triage guidance reviewed by humans; it is not legal, forensic, or compliance advice.
7. No guaranteed outcome
Incident response operates under uncertainty. We perform services with professional skill and care, but we cannot and do not guarantee recovery of data, attribution of an attacker, prevention of recurrence, or any particular outcome.
8. Confidentiality
Each party protects the other's confidential information with at least reasonable care, uses it only for the engagement, and discloses it only where required by law. Our confidentiality obligations survive the end of an engagement.
9. Deliverables and intellectual property
Reports and deliverables we produce for you are yours to use for your internal business, legal, insurance, and regulatory purposes. Our methodologies, tooling, and know-how remain ours.
10. Liability
To the maximum extent permitted by law, our total liability arising out of an engagement is capped at the fees you paid for that engagement, and neither party is liable for indirect or consequential losses. Nothing in these terms excludes liability that cannot lawfully be excluded.
11. Authority and indemnity
You are responsible for claims arising from instructions you give us for systems or data over which you lacked authority.
12. General
These terms are governed by the laws of the jurisdiction in which Response Red's operating entity is registered, unless a signed engagement agreement states otherwise. If part of these terms is unenforceable, the rest remains in effect. We may update these terms for future engagements by publishing a revised version here. Questions: [email protected].