Terms and Conditions

Welcome to Defend.gl. These terms and conditions (the "Terms") constitute a legally binding agreement between you and Hosting.gl ApS ("we", "us", "our", "Defend.gl") regarding your use of our bug bounty platform and related services.

1.1 Acceptance of terms

By creating an account, or accessing or using Defend.gl's platform, you agree to be bound by these Terms. If you do not accept the Terms, you may not use the platform.

1.2 Capacity

You confirm that you:

• Are at least 18 years old or have parental/guardian consent
• Have the legal capacity to enter into binding agreements
• Are not prohibited from using the platform under applicable law
• Will use the platform in accordance with all applicable laws

1.3 Changes to terms

We reserve the right to change these Terms at any time. Material changes will be notified by email or on the platform at least 30 days before they take effect.

2.1 Account creation

To use Defend.gl, you must create an account with accurate and complete information. You agree to:

• Provide truthful, current, and complete information
• Maintain and update your information
• Keep your password confidential and secure
• Promptly notify us of any unauthorised use of your account
• Be responsible for all activity on your account

2.2 Acceptable use

You may not:

• Use the platform for unlawful purposes
• Attempt to gain unauthorised access to systems
• Upload malware or malicious code
• Harass, threaten, or harm other users
• Impersonate another person or entity
• Interfere with the platform's functionality

2.3 Account suspension

We reserve the right to suspend or close accounts that violate these Terms, without prior notice in serious cases.

3.1 For security researchers

As a security researcher on Defend.gl, you agree to:

• Only test systems within the defined scope
• Not carry out destructive actions or denial-of-service attacks
• Not access, alter, or delete data beyond what is necessary
• Report vulnerabilities via the platform within 24 hours
• Keep all vulnerabilities confidential until they are resolved
• Comply with our disclosure policy

3.2 For companies

As a company on Defend.gl, you agree to:

• Define a clear and precise scope for your programme
• Respond to reports within the specified SLA times
• Pay rewards for valid vulnerabilities as agreed
• Not pursue legal action against researchers acting in good faith
• Treat all reports confidentially

3.3 Duplicates and invalid reports

Reports may be rejected if they are duplicates, fall outside the scope, do not constitute a real security risk, or cannot be reproduced.

4.1 Membership (companies)

Companies enter into a membership agreement with a minimum commitment period of 12 months. The membership fee is set out in the agreement entered into at sign-up. The agreement:

• Grants access to the platform's features
• Contributes to the Community Fund
• Is invoiced monthly in advance
• Renews automatically for 12 months unless terminated
• Must be terminated no later than 30 days before the end of the commitment period

4.2 Bug bounty rewards

Rewards for validated vulnerabilities:

• Are set by the company running the programme
• Are paid out after validation and acceptance
• Are processed within 14 business days
• May vary based on the vulnerability's severity

4.3 Taxes and duties

Security researchers are themselves responsible for reporting income to the relevant tax authorities and paying applicable taxes.

4.4 Refunds

Membership fees are not refunded once the current payment period has begun.

5.1 Condition of the platform

Defend.gl is provided "as is" and "as available". We do not warrant that the platform will be error-free, uninterrupted, or secure against all threats.

5.2 Limitation of liability

To the extent permitted by law, Defend.gl is not liable for:

• Indirect losses, consequential damages, or lost profits
• Loss of data or business interruption
• Actions taken by third parties on the platform
• Unauthorised access to your data due to your own negligence

Our total liability is limited to the amount you have paid us in the preceding 12 months.

5.3 Indemnification

You agree to indemnify Defend.gl against claims, losses, or expenses arising from your breach of these Terms or your use of the platform.

5.4 Intellectual property

Defend.gl's platform, logo, design, and content are protected by copyright and trademark rights. Vulnerability reports remain confidential.

6.1 Termination for companies

Companies' membership agreements have a commitment period of 12 months. The agreement renews automatically for a further 12 months unless terminated in writing no later than 30 days before the end of the commitment period. Termination can be done via our contact form.

6.2 Termination for security researchers

Security researchers may close their account at any time via the account overview or by contacting us.

6.3 Our right of termination

We may terminate or suspend your account:

• With 30 days' notice for any reason
• Immediately in the event of a breach of these Terms
• Immediately in the event of unlawful activity
• Immediately in the event of non-payment after a reminder

6.4 Consequences of termination

Upon termination, you lose access to the platform. Pending reports and payments will be settled. Your personal data will be deleted in accordance with our privacy policy.

6.5 Surviving provisions

The following provisions remain in effect after termination: confidentiality, intellectual property, limitation of liability, indemnification, and governing law.

7.1 Applicable law

These Terms are governed by Greenlandic and Danish law.

7.2 Venue

Any disputes shall be settled by the Court of Greenland (Retten i Grønland), with Nuuk as the venue.

7.3 Dialogue before litigation

We always encourage dialogue before any litigation. Contact us via our contact form, and we will find a solution together.

7.4 Severability

If a provision of these Terms is held invalid, the remaining provisions shall remain in effect.

7.5 Entire agreement

These Terms, together with our Privacy Policy, Safe Harbor Policy, and Disclosure Policy, constitute the entire agreement between you and Defend.gl.