Terms & Conditions

Effective date: October 14, 2026

Last updated: October 14, 2026

SecuritySage may update these Terms & Conditions from time to time. The version posted on this page, with the “Last updated” date shown above, is the version that applies.

1. Acceptance of these Terms

These Terms & Conditions (the “Terms”) form a legally binding agreement between you and SecuritySage (“SecuritySage,” “we,” “us” or “our”), a cybersecurity consultancy located in Lakewood, Ohio 44107, USA. They govern your access to and use of the website at https://www.securitysage.org and any related pages, content, forms, tools and features (together, the “Site”), and your purchase and use of our self-paced digital training programs (the “Programs”).

By accessing or using the Site, creating an account, submitting a form, or purchasing a Program, you confirm that you have read, understood and agree to be bound by these Terms and by our Privacy Policy, Cookie Policy, Refund & Cancellation Policy and Disclaimer, each of which is incorporated into these Terms by reference. If you do not agree, you must not use the Site or purchase Programs.

If you are using the Site or purchasing a Program on behalf of a company or other organization, you represent that you have authority to bind that organization to these Terms, and “you” refers to both you and that organization.

2. Eligibility

The Site and our Programs are intended for businesses and adults. You must be at least 18 years old, or the age of majority in your place of residence if higher, to create an account, purchase a Program or engage our services. By using the Site, you represent that you meet this requirement and that you are not prohibited from receiving our services under the laws of the United States or any other applicable jurisdiction, including export control and sanctions laws.

We may refuse service, cancel orders or close accounts at our discretion where we reasonably believe that eligibility requirements are not met or that the Site is being used in violation of these Terms.

3. Our services and Programs

SecuritySage offers two distinct types of offerings:

• Consulting services (“Services”): professional services delivered by our team, including IT security audits and assessments, security awareness training, security policy development, cloud and infrastructure security consulting, phishing simulation and testing and virtual CISO (vCISO) advisory.
• Self-paced Programs: digital training products sold through our programs shop, which may include videos, written lessons, templates, checklists, worksheets and other downloadable or online materials.

We also publish free content, such as blog articles, a cybersecurity glossary and a free security self-assessment (together, “Free Content”). Free Content is provided for general information only, as explained in our Disclaimer. Results from the self-assessment are indicative only and are not a substitute for a professional security assessment.

We may add, change, suspend or discontinue any part of the Site, any Free Content or any Program offering at any time. Where a change materially reduces access to a Program you have already paid for, we will provide reasonable notice and, where appropriate, a pro-rated refund or replacement content.

4. Consulting engagements

Information about our Services on the Site, including any pricing shown on our pricing page, is a general description and does not constitute an offer capable of acceptance. Any consulting engagement is governed by a separate written agreement, such as a master services agreement, engagement letter or statement of work (“SOW”), signed by both you and SecuritySage. The SOW will set out the scope, deliverables, timeline, fees, payment terms, confidentiality obligations, data handling terms and any rules of engagement for testing.

If there is a conflict between these Terms and a signed SOW or engagement agreement, the SOW or engagement agreement controls for that engagement. Where personal data is processed on your behalf during an engagement, the parties will enter into a data processing agreement (or a business associate agreement, where HIPAA applies) as appropriate.

Submitting a contact or get-started form, booking a call or receiving a proposal does not create a client relationship or any obligation on either party until a written agreement is signed.

5. Authorized testing only

Security testing, including vulnerability scanning, penetration testing, phishing simulations, social engineering exercises and configuration reviews, can affect systems and people. For that reason:

• We never perform any testing without prior written authorization from a person with legal authority over the systems, accounts, networks and personnel in scope. That authorization must define the scope, timing, methods and contacts in writing.
• You represent and warrant that you own, or have obtained all necessary permissions from the owners of, every system, network, application, cloud account, domain, email address and third-party service you ask us to test, including any hosting, cloud or software-as-a-service providers whose terms require notice or approval.
• You are responsible for informing relevant internal stakeholders and for any approvals needed under your own policies, contracts or applicable law, including employee notice where required.
• We may pause or stop testing at any time if we believe authorization is unclear, the scope has changed, or continuing could cause harm.

You must not use the Site, our Programs, Free Content or anything you learn from us to access, scan, probe, test, attack or interfere with any system, network, account or person without explicit, written authorization from the owner. Educational content about attack techniques is provided solely to help you defend your own organization. Unauthorized access to computer systems may be a crime under laws such as the US Computer Fraud and Abuse Act and Ohio law.

The Site itself is not in scope for testing. Do not scan, probe or test the Site without our prior written authorization. If you believe you have found a vulnerability on the Site, please report it responsibly to [email protected], give us reasonable time to fix it before disclosing it publicly, and do not access, modify or retain any data that is not yours.

6. Accounts

To purchase or access a Program, you may need to create an account. You agree to:

• provide accurate, current and complete information and keep it up to date;
• choose a strong, unique password and, where available, enable additional security features;
• keep your login credentials confidential and not share your account with anyone outside the scope of your license;
• notify us promptly at [email protected] if you suspect unauthorized access to your account; and
• accept responsibility for all activity that occurs under your account, except to the extent caused by our own breach of these Terms.

We may suspend or disable an account to protect the security of the Site or other users, including where we detect suspicious login activity. Where reasonable, we will tell you and help you restore access.

7. Orders, pricing and taxes

All prices for Programs are shown in US dollars unless stated otherwise. Prices and Program content may change at any time, but changes will not affect orders we have already accepted.

When you place an order, you are making an offer to purchase. We accept your order when we send an order confirmation or provide access to the Program, whichever comes first. We may decline or cancel an order, and will refund any amount charged, if:

• a Program is unavailable;
• there is an obvious error in the price or description;
• we suspect fraud or unauthorized use of a payment method; or
• the order would violate these Terms or applicable law.

Prices do not include taxes unless stated. You are responsible for any sales, use, value-added, goods and services or similar taxes that apply to your purchase, other than taxes based on our income. Where we are required to collect taxes, they will be calculated at checkout based on the information you provide and shown before you complete your order.

Discount codes or promotions are subject to their stated conditions, may not be combined unless stated, have no cash value and may be withdrawn at any time.

8. License to digital Programs

Programs are licensed, not sold. When you purchase a Program and pay the applicable fee, SecuritySage grants you a limited, non-exclusive, non-transferable, non-sublicensable, revocable license to access and use that Program for the internal training and business purposes of a single organization (the organization named on the order, or you as an individual if no organization is named), subject to these Terms.

Under this license, you may:

• access and view the Program content online through your account;
• download materials that we make available for download;
• share the Program with employees and contractors of your organization, for that organization’s internal use only, unless the Program description sets a specific seat limit, in which case that limit applies; and
• adapt templates, checklists and policy documents included in a Program (for example, those in the Security Policy Toolkit) for use within your own organization.

You may not:

• resell, sublicense, rent, lend, share or distribute the Program, or any part of it, to anyone outside your organization;
• use Program materials to deliver training, consulting or other services to third parties, or include them in a product or service you sell;
• publish Program content on any public website, file-sharing service, learning platform or social media;
• remove or alter copyright notices, attributions or watermarks;
• use automated tools to scrape or bulk-download Program content; or
• transfer the license to another organization, including in a merger or acquisition, without our written consent, which we will not unreasonably withhold.

Access to online Program content remains available for as long as we continue to offer the Program, unless a different access period is stated in the Program description. If we retire a Program, we will give you reasonable notice and an opportunity to download any downloadable materials.

We may terminate your license if you materially breach these Terms. On termination, you must stop using the Program and delete any copies, except that policies you have already adapted and adopted internally may remain in use within your organization.

9. Payment

Payments for Programs are processed through WooCommerce by third-party payment processors, such as Stripe or PayPal. By submitting payment information, you represent that you are authorized to use the payment method and you authorize us and our payment processor to charge the full amount of your order, including applicable taxes.

Your payment details are entered directly with the payment processor and are subject to the processor’s own terms and privacy policy. SecuritySage does not receive or store your full card number. We are not responsible for errors, delays or outages caused by a payment processor or your financial institution.

Payment for consulting Services is governed by the applicable SOW or invoice terms. Unless otherwise stated in the SOW, invoices are due within the period stated on the invoice, and we may pause work on overdue accounts after giving notice.

10. Refunds and cancellations

Refunds and cancellations for Programs and consulting engagements are governed by our Refund & Cancellation Policy, which forms part of these Terms. In summary, eligible Program purchases may be refunded within 14 days if less than 30% of the Program content has been accessed, and consulting engagements are subject to the deposit, rescheduling and cancellation terms in that policy and in your SOW. Nothing in these Terms limits any non-waivable rights you may have under applicable consumer protection law.

If you initiate a chargeback or payment dispute instead of contacting us first, we may suspend access to the related Program while the dispute is pending.

11. Intellectual property

The Site, Programs and Free Content, including all text, graphics, logos, page layouts, videos, audio, course materials, templates, checklists, quizzes, software code and the selection and arrangement of these elements, are owned by SecuritySage or its licensors and are protected by US and international copyright, trademark and other intellectual property laws. “SecuritySage” and our logos are trademarks of SecuritySage. You may not use them without our prior written permission, except to refer to us accurately.

Some images on the Site are used under open licenses from Wikimedia Commons and remain the property of their respective authors. These images are credited on our image credits page and are used in accordance with their licenses. Your rights to reuse those images are governed by their original licenses, not by these Terms.

You may view, print and share links to Free Content for your personal or internal business use, provided you do not modify it, remove any notices, or present it as your own. Short quotations with attribution and a link back to the original page are welcome. Any other use requires our written permission.

Deliverables created for clients during consulting engagements are subject to the intellectual property terms of the applicable SOW.

If you send us feedback or suggestions, you grant us a royalty-free, perpetual, worldwide right to use them to improve our Site, Programs and Services, without any obligation to you.

If you believe content on the Site infringes your copyright, please see our DMCA Policy.

12. User content and comments

Where blog comments or other interactive features are enabled, you may submit content such as comments, questions or feedback (“User Content”). You retain ownership of your User Content. By submitting it, you grant SecuritySage a non-exclusive, royalty-free, worldwide, perpetual license to host, display, reproduce, adapt and distribute it in connection with the Site.

You are solely responsible for your User Content, and you represent that you have the rights needed to post it and that it complies with these Terms. User Content must not:

• be unlawful, defamatory, harassing, threatening, hateful, obscene or invasive of privacy;
• infringe any intellectual property or other rights;
• contain personal information of others without their consent;
• contain credentials, exploit code, malware, links to malicious sites, or instructions intended to facilitate unauthorized access;
• disclose vulnerabilities in third-party systems that have not been responsibly disclosed to the affected vendor;
• be spam, advertising or self-promotion unrelated to the discussion; or
• impersonate any person or misrepresent your affiliation.

We may review, moderate, edit or remove any User Content at our discretion and without notice, but we are not obligated to monitor it. User Content reflects the views of its author, not SecuritySage. Please do not post confidential or sensitive information about your organization’s security in public comments.

13. Acceptable use

You agree not to, and not to help anyone else to:

• use the Site in any way that violates applicable law or regulation;
• attempt to gain unauthorized access to the Site, its servers, accounts or databases, or to any connected systems;
• scan, probe or test the vulnerability of the Site, or breach or bypass any security or authentication measures, without our prior written authorization;
• interfere with or disrupt the Site, including through denial-of-service attacks, flooding, or uploading malware;
• use bots, scrapers or other automated means to access the Site or Programs, except for standard search engine indexing that respects our robots directives;
• submit false, misleading or fraudulent information in forms, orders or accounts;
• use the contact forms to send spam, unsolicited advertising or harmful content;
• reverse engineer, decompile or attempt to extract source code from the Site, except where permitted by law;
• circumvent our security controls, including those provided by our firewall and security plugins; or
• use the Site or Programs to develop a competing product or service.

Our security tools may automatically block traffic that appears malicious. If you believe you have been blocked in error, please contact us.

14. Third-party links and services

The Site may contain links to third-party websites, resources and services, such as government cybersecurity guidance, standards bodies or tools mentioned in our content. These links are provided for convenience. We do not control and are not responsible for the content, privacy practices, availability or security of third-party sites, and a link does not imply endorsement. Your use of third-party websites and services is at your own risk and subject to their terms.

Third-party services used to operate the Site, such as payment processors, are also governed by their own terms.

15. Disclaimers

EXCEPT AS EXPRESSLY STATED IN THESE TERMS OR IN A SIGNED SOW, THE SITE, PROGRAMS AND FREE CONTENT ARE PROVIDED “AS IS” AND “AS AVAILABLE,” WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED OR STATUTORY, INCLUDING ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT, AND ANY WARRANTIES ARISING FROM COURSE OF DEALING OR USAGE OF TRADE.

We do not warrant that the Site will be uninterrupted, error-free or free of harmful components, or that content will be complete, accurate or current at all times. Content on the Site and in Programs is for general educational and informational purposes and is not legal, regulatory, compliance, financial or insurance advice. See our Disclaimer for more detail.

Some jurisdictions do not allow the exclusion of certain warranties, so some of these exclusions may not apply to you.

16. Security-specific disclaimers

Cybersecurity is about reducing risk, not eliminating it. You acknowledge and agree that:

• No guarantee of breach prevention: no assessment, audit, training, policy, tool or advice, including ours, can guarantee that your organization will not experience a security breach, ransomware attack, fraud, data loss or other incident. Threats change constantly, and new vulnerabilities are discovered every day.
• Point-in-time results: assessments and audits reflect the systems, configurations and information available at the time of the work. Systems change after an assessment, and findings may become outdated.
• Sampling and scope limits: assessments are limited to the agreed scope and methods and may not identify every vulnerability or weakness.
• Your responsibility to act: you are responsible for deciding whether and how to implement our recommendations, for maintaining your own systems, backups and controls, and for any decisions you make based on our Programs, Free Content or Services.
• Self-assessment results: the free security self-assessment is a simplified, automated questionnaire. Its score and suggestions are general guidance only and do not certify or confirm the security of your organization.
• Compliance: our Programs and Services can help you work toward requirements such as GDPR, HIPAA or PCI DSS, but they do not by themselves make you compliant, and we do not provide formal certification or legal opinions unless expressly stated in a SOW.
• Testing risk: authorized security testing can, despite reasonable care, cause service interruptions or other side effects. These risks, and how they are managed, are addressed in the applicable SOW and rules of engagement.

17. Limitation of liability

TO THE FULLEST EXTENT PERMITTED BY LAW, IN NO EVENT WILL SECURITYSAGE, OR ITS OWNERS, EMPLOYEES, CONTRACTORS OR AGENTS, BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, BUSINESS, GOODWILL, DATA OR SAVINGS, OR COSTS OF SECURITY INCIDENT RESPONSE, BREACH NOTIFICATION, REGULATORY FINES OR PROCUREMENT OF SUBSTITUTE SERVICES, ARISING OUT OF OR RELATING TO THE SITE, PROGRAMS, FREE CONTENT OR THESE TERMS, WHETHER BASED ON CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY OR ANY OTHER THEORY, EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

TO THE FULLEST EXTENT PERMITTED BY LAW, OUR TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THE SITE, PROGRAMS, FREE CONTENT OR THESE TERMS WILL NOT EXCEED THE GREATER OF (A) THE AMOUNT YOU PAID TO SECURITYSAGE FOR THE PROGRAM GIVING RISE TO THE CLAIM IN THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO LIABILITY, OR (B) ONE HUNDRED US DOLLARS (US $100).

Liability for consulting Services is governed by the limitation of liability in the applicable SOW or engagement agreement.

These limitations apply even if a remedy fails of its essential purpose. They do not limit liability that cannot be limited under applicable law, such as liability for fraud, gross negligence or willful misconduct where such limitation is prohibited. Some jurisdictions do not allow certain limitations of liability, so some of these limitations may not apply to you.

18. Indemnification

To the extent permitted by law, you agree to defend, indemnify and hold harmless SecuritySage and its owners, employees, contractors and agents from and against any claims, liabilities, damages, losses, costs and expenses, including reasonable attorneys’ fees, arising out of or relating to:

• your use or misuse of the Site, Programs or Free Content;
• your violation of these Terms or of any applicable law;
• any security testing or other activity you conduct, or ask us to conduct, on systems for which you did not hold proper authorization;
• your User Content; or
• your violation of the rights of any third party, including intellectual property and privacy rights.

We will notify you of any such claim, and we may choose to participate in the defense with counsel of our choosing at our own expense. You may not settle any claim that imposes obligations on us without our prior written consent.

19. Suspension and termination

You may stop using the Site at any time, and you may ask us to close your account by emailing [email protected]. Closing your account will end your access to Programs linked to it.

We may suspend or terminate your access to the Site, your account or any Program, with or without notice, if we reasonably believe that you have breached these Terms, that your use poses a security risk, or that we are required to do so by law. Where the termination is not due to your breach, we will provide a pro-rated refund for any Program you can no longer access, where appropriate.

Sections of these Terms that by their nature should survive termination will survive, including those on intellectual property, license restrictions, disclaimers, limitation of liability, indemnification, and governing law and disputes.

20. Governing law and dispute resolution

20.1 Informal resolution first

Most concerns can be resolved quickly by talking. Before filing any claim, you agree to contact us at [email protected] with a written description of the issue, the relief you are seeking and your contact details. We will do the same if we have a dispute with you. Both parties agree to negotiate in good faith for at least 30 days from receipt of the notice before starting formal proceedings, except where a party seeks urgent injunctive relief to protect intellectual property, confidential information or the security of systems.

20.2 Governing law

These Terms, and any dispute arising out of or relating to them or to the Site or Programs, are governed by the laws of the State of Ohio, USA, without regard to its conflict-of-law rules. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

20.3 Venue

Subject to the informal resolution step above, any legal action or proceeding arising out of or relating to these Terms must be brought exclusively in the state or federal courts located in or serving Cuyahoga County, Ohio, and you and SecuritySage each consent to the personal jurisdiction of those courts. Either party may bring an individual claim in small claims court in Cuyahoga County if the claim qualifies.

20.4 Consumers outside the US

If you are a consumer residing outside the United States, nothing in this section deprives you of the protection of mandatory consumer laws of your country of residence or of any right to bring proceedings in your local courts where that right cannot be waived.

20.5 Time limit

To the extent permitted by law, any claim arising out of or relating to these Terms must be brought within one year after the claim arises; otherwise, it is permanently barred.

21. Changes to these Terms

We may revise these Terms from time to time. When we do, we will update the “Last updated” date at the top of this page. If a change is material, we will give reasonable notice, for example by posting a notice on the Site or emailing account holders. Changes will not apply retroactively and will not affect Program orders placed before the change, except where required by law. Your continued use of the Site after changes take effect means you accept the revised Terms. If you do not agree to the changes, you must stop using the Site.

22. Severability and waiver

If any provision of these Terms is found to be invalid, illegal or unenforceable, that provision will be enforced to the maximum extent permissible or modified to the minimum extent necessary to make it enforceable, and the remaining provisions will remain in full force and effect. Our failure to enforce any right or provision of these Terms is not a waiver of that right or provision.

23. Entire agreement and other terms

These Terms, together with the policies incorporated by reference and any order confirmation, form the entire agreement between you and SecuritySage regarding the Site and Programs and supersede any prior understandings on that subject. For consulting Services, the applicable signed SOW or engagement agreement, together with these Terms to the extent not inconsistent, forms the entire agreement for that engagement.

You may not assign or transfer these Terms or your rights under them without our prior written consent. We may assign these Terms in connection with a merger, acquisition, reorganization or sale of assets, or to an affiliate, with notice to you. Nothing in these Terms creates a partnership, joint venture, employment or agency relationship. There are no third-party beneficiaries of these Terms. We are not liable for any delay or failure to perform caused by events beyond our reasonable control, such as natural disasters, widespread internet or utility outages, cyberattacks on third-party infrastructure, or acts of government. Headings are for convenience only, and the word “including” means “including without limitation.”

Notices to you may be sent to the email address associated with your account or order, or posted on the Site. Notices to us must be sent to [email protected].

24. Contact us

If you have questions about these Terms, please contact us:

• Email: [email protected]
• Location: SecuritySage, Lakewood, Ohio 44107, USA
• Online: Contact us