Website terms of use

1. Who we are and what these terms cover

This website, glabit.com (the “Site”), is operated by Glab IT Solutions SRL, registered office Strada Tudor Vladimirescu nr. 64, ap. 1, 410203 Oradea, Bihor, Romania; Trade Registry J05/2360/2008, CUI 24490341, VAT RO24490341; info@glabit.com, +40 359 195 476 (“GlabIT”, “we”). These terms cover access to and use of the Site and its information. They are in force from the effective date shown at the bottom of this page; a version without an effective date is not in force. Paid services are never provided under these terms (section 3). Your use of the Site is also subject to applicable law and to the specific notices shown on each page (for example on the contact form). We do not use these terms to impose unexpected restrictions or liability provisions through passive browsing alone: the rules that matter to visitors — proper use (section 4), no implied testing authorisation (sections 5–6) and what not to send (section 8) — are stated plainly and linked from the footer of every page.

2. General information only

The Site describes our services and explains security and regulatory topics in general terms, as at the date shown on each page. Regulatory summaries (for example on NIS2, DORA or the AI Act) reflect our reading of the official texts at the time of writing; laws, guidance and deadlines change. Nothing on the Site is legal, regulatory, financial or other situation-specific professional advice, a compliance determination, or a certification, and you should not act on it as such without qualified advice for your circumstances. We take care to keep the Site accurate but do not warrant that it is complete, current or error-free.

3. Paid services are governed by separate written agreements

Security, engineering, audit, monitoring and compliance-support services are not provided under these terms. Each engagement is governed only by the signed proposal or statement of work, the service contract, a data processing agreement where applicable, and — for testing or red-team work — signed rules of engagement. Nothing on this Site forms part of, adds to, or overrides those documents. Descriptions on the Site are general; what we deliver in a given engagement is what the signed documents say.

4. Proper use of the Site

You may browse the Site and use its content for your own information. You may not: (a) attempt to gain unauthorised access to the Site, its server or any connected system; (b) probe, scan or test the vulnerability of the Site or its infrastructure without our prior written authorisation — see section 6 for how to report a suspected vulnerability instead; (c) use automated means to scrape or harvest content or contact details, or to submit forms, except to the extent that applicable law does not permit this restriction (for example lawful text-and-data-mining where the law allows it — we do not currently claim a machine-readable reservation of rights); (d) use the contact form for unsolicited marketing, or send content that is unlawful, defamatory or infringing; (e) circumvent security or rate-limiting controls.

5. Vulnerability reporting

If you believe you have found a security issue in a system we operate, follow the security-reporting page and our security.txt. That page describes which systems are eligible for a report, what to send, what not to send, and how a secure channel may be agreed. Neither that page nor security.txt grants any permission to probe, scan or test any system; “eligible for reports” is not an authorisation to test. Active security testing of a GlabIT system requires GlabIT’s prior written authorisation (section 4(b)), and receiving, acknowledging or accepting a report does not retroactively authorise the activity that produced it. That process concerns systems operated by GlabIT; client and third-party systems are not eligible, information concerning a client system may be passed to that client. Reporting an issue does not create a bounty entitlement and is not a promise of non-enforcement or legal immunity.

6. Cybersecurity requests and client authority

• If you ask us to assess, test, monitor or work on systems, you confirm that you have — or will obtain and evidence before work starts — the authority to authorise that work over every asset, account, person, location and activity you include.
• The signed scope and rules of engagement control what we do; where they are silent, we do not act.
• Assets, accounts or services belonging to third parties (including cloud and hosting providers, suppliers and affiliates) require the appropriate written permission of their owner or operator.
• Sending a message through this Site, or any email, never authorises GlabIT to test, access or change any system, and never obliges GlabIT to do so.
• We may refuse, pause or stop work at any time if authority, legality, scope or the safety of the work is unclear, or if the operational or legal risk becomes unacceptable in our reasonable judgement. Where a signed contract exists, its terms govern the consequences.
• Nothing on this Site overrides a signed contract.

7. Incident enquiries and response limitations

• A message through the contact form or by email is a preliminary contact, not an emergency service. It does not create a response-time commitment, an obligation to respond, or a service-level agreement. Where you have a signed contract with a service level, that contract controls.
• If you are dealing with a suspected incident: preserve logs and evidence; avoid destructive remediation (wiping, rebuilding, deleting accounts or logs) before triage where it is reasonably safe to wait; communicate with us through a channel you believe is not compromised; and record what you observe and when.
• Legal and regulatory notifications (for example to a supervisory authority, a national CSIRT or competent authority, or affected persons) remain your responsibility unless a signed scope states exactly what support GlabIT provides. Where the law requires it, use the competent authority’s reporting channel.

8. Public forms and what to send

9. Intellectual property and third-party rights

The Site, its design, text, graphics, logos and code are owned by GlabIT or its licensors and protected by copyright and, where applicable, trade-mark law. “GlabIT” and the GlabIT logo are the trade name and brand identifiers of Glab IT Solutions SRL; we do not assert here that they are registered marks. You may view and print pages for personal or internal business use; any other reproduction, distribution or modification requires our written permission. Names and marks of third parties referenced on the Site (for example OWASP, MITRE ATT&CK, ISO, CIS, NIST) belong to their respective owners and are used descriptively. Client names, marks, screenshots and links are intended to be published in the portfolio only for projects with the client’s documented permission and a verified project status recorded in our internal register, and our build and release checks are designed to withhold anything else from generated pages and files. If you find a client reference that you believe should not be there, tell us at info@glabit.com: we review it promptly and remove or correct it where the request comes from someone we can verify as entitled to make it (the client or its authorised representative) and subject to our contractual and legal obligations; removal from our pages is prompt, while copies held in caches, search engines or archives outside our control may take time to clear. Fonts are open-licence typefaces (Archivo, Inter, IBM Plex Mono) served from our own infrastructure. Ownership and licensing of anything we build for a client is defined by that client’s signed contract, not by this Site.

10. External links and resources

The Site may link to third-party websites (regulators, standards bodies, client sites, sources). We do not control and are not responsible for their content, availability or privacy practices. You may link to our pages fairly, without implying endorsement and without framing our content within another site.

11. Availability, changes and liability

We may change, suspend or discontinue any part of the Site at any time. We aim to keep the Site available but do not guarantee uninterrupted or error-free access. To the extent permitted by applicable law, GlabIT is not liable for loss or damage arising from use of, or reliance on, the Site or its content, including indirect or consequential loss.

12. Mandatory law and consumers

Nothing in these terms excludes or limits liability that cannot be excluded or limited under Romanian or EU law — including liability for wilful misconduct or gross negligence — or affects rights you have as a consumer under mandatory law where they apply. Our services are described for businesses and organisations; we do not state here whether consumers can contract with us online. The disclaimers in these terms do not cure or qualify any statement elsewhere on the Site: every claim on the Site is meant to be true and evidenced on its own.

13. Changes to these terms and archived versions

We may update these terms. Only an approved version with an effective date is in force, from that date; the version number and effective date are shown below.

14. Governing law, jurisdiction and contact

These terms are governed by the laws of Romania and applicable EU law. Disputes arising from use of the Site are subject to the jurisdiction of the competent courts of Oradea, Romania, without prejudice to mandatory rules that give consumers the right to bring or defend proceedings in their country of residence. Questions about these terms: Glab IT Solutions SRL, Strada Tudor Vladimirescu nr. 64, ap. 1, 410203 Oradea, Bihor, Romania · info@glabit.com · +40 359 195 476.