Oakshield Book a call
Menu

Terms

Last updated:

These terms are pending review by our lawyer. We’ll update this page and the date when that’s done. Orders placed before then are governed by the Engagement Agreement you accept at checkout.

1. Who we are and who these terms are for

Oakshield is a business of Luven Technologies LLC, a Florida limited liability company (“we”, “us”). Contact: hello@oakshield.co.

These terms cover two things:

  • Part A: your use of oakshield.co and its free tools, guides, status pages and newsletter;
  • Part B: orders you place with us online.

Our site and services are for businesses. By using the site or placing an order, you confirm that you’re acting for a business or other organization and are authorized to bind it.

Part A: Using the site

2. Information, not advice

Our guides, status pages, newsletter and free tools give general information about software vulnerabilities and fixes, as of the date shown on each page. Vendors’ fixes, platforms and facts change, and a page can be out of date or wrong. Nothing on the site is advice about your particular systems, and it doesn’t create a client relationship. Check with your host, developer or a professional before you act on it.

3. Free tools

  • PHP fix checker: it runs entirely in your browser, and nothing you choose or paste is sent to us. It compares the version or package line you enter with published fix data. A version number alone can’t prove a fix is running, because vendors backport fixes without changing version numbers, and a fix may not apply until services restart. Treat the result as a pointer, not a verdict.
  • We may change, pause or withdraw any free tool at any time.

4. Acceptable use

Don’t use the site, or anything from it, to:

  • probe, scan or attack the site or anyone else’s systems;
  • get around rate limits or other safeguards;
  • copy the site in bulk or scrape it;
  • break the law.

To report a security issue in our site, see security.txt.

5. Our content

The site’s text, graphics and data belong to us or our licensors. You may read, link to and quote short extracts with a link back. Material we offer under its own licence can be used as that licence says.

6. No warranty and limited liability for the site

The site, free tools, guides and newsletter are provided “as is” and “as available”, without warranties of any kind, including accuracy, completeness and fitness for a particular purpose, to the extent the law allows. No check, tool or article can find every vulnerability or prevent every attack.

We’re not liable for indirect, consequential, special or punitive damages, or for lost profits, revenue or data, arising from the site or free tools. Our total liability for all claims about them is limited to US$100. These limits don’t apply where the law doesn’t allow them.

Part B: Orders

7. The agreement that governs an order

When you order online, you accept our Engagement Agreement for read-only services at checkout. That agreement, with its Schedule A (the assets, the authorization and the contacts), governs your order. This Part B summarizes it. If anything here differs from the Engagement Agreement you accepted, the Engagement Agreement wins.

8. What we do, and what we don’t

  • Read-only. We make no changes to your systems, run no exploits, and test no systems beyond the ones you list.
  • You must be authorized. You confirm you own or control each listed asset, or have the owner’s written authority, and that your hosting terms allow it. You prove control of each domain before we start.
  • How results are stated. Each finding is reported per named vulnerability, as of a stated date and time, with the method and the evidence level used, plus known open issues. We never state that a system is “secure”, “safe”, “clean”, “fully patched” or “not vulnerable”. A named person at Oakshield approves every report. AI tools are not given your evidence, findings, reports, credentials or code.

9. If we find possible signs of compromise: REFER

If the evidence shows a possible sign of compromise, we:

  • stop work on that asset;
  • tell your contact within 1 hour of confirming it;
  • record the result as REFER.

We don’t investigate further, clean up, or state that the asset is free of compromise. We recommend that you contact your insurer, your legal counsel and an incident-response firm before any clean-up. We may suggest firms; you choose and contract with any firm directly, and we receive nothing for referring you. We keep the related evidence for 90 days, unless you ask us to delete it sooner, so your insurer or response firm can ask for it. Response work isn’t included.

10. Prices and payment

  • Prices are in US dollars, as shown at checkout, and exclude any applicable sales tax. Any tax we must collect is shown before you pay.
  • Card orders: you save a card on Stripe’s own page when you order, and we charge it when we deliver the report. We never see or store your full card number.
  • Agency invoices: where agreed, we invoice on delivery, due in 15 days.
  • The fee is owed for delivering the documented checks, whatever the result, including “cannot determine” and REFER.

11. Cancelling, and fixing our mistakes

  • You can cancel an order before work starts, by email, at no charge.
  • After delivery, if a report contains an error we caused and you tell us within 14 days, we’ll correct and reissue it at no charge. That’s your sole remedy for report errors, subject to §12.

12. No guarantee; limitation of liability for orders

No review can find every vulnerability or compromise. New vulnerabilities appear constantly, including in versions released as fixes. Our services reduce uncertainty; they don’t make any system secure, and a later security incident doesn’t by itself show that we breached our agreement.

Neither party is liable for indirect, consequential, special or punitive damages, or for lost profits, revenue or data. Each party’s total liability for an order is limited to the fees paid or payable for it in the 12 months before the claim. These limits don’t apply to:

  • your payment obligations;
  • your indemnity for unauthorized assets;
  • either party’s fraud or wilful misconduct, or anything else the law doesn’t allow us to limit.

13. Your data

We use what you give us only to provide the services, keep it confidential, and delete working copies within 30 days after delivery, except as §9 says. We keep the report and records of our approvals. Our Privacy page explains the rest.

Part C: General

14. Changes, law and contact

  • We may update these terms. The date at the top shows the current version, and an order stays under the terms and agreement in force when you placed it.
  • New York law governs these terms. The courts in Monroe County, New York have exclusive jurisdiction.
  • If part of these terms can’t be enforced, the rest still applies.
  • Questions: hello@oakshield.co. Security reports: security@oakshield.co.

Oakshield is a business of Luven Technologies LLC.