Terms of Service

Last updated: August 27, 2026

1. Who we are

RedPick is an AI-powered application penetration testing platform operated by RedPick Inc., a Delaware corporation (“RedPick”, “we”, “us”), registered at 8 The Green, Suite A, Dover, DE 19901, USA. RedPick was founded by the team behind BeDefended; expert-led managed penetration testing is delivered by BeDefended as our engagement partner (see §4).

2. The service

RedPick provides automated, agentic security testing of applications you own or are authorized to test — available on a per-test basis and as a continuous subscription. Testing capability (application types, vulnerability categories, compliance mapping) is described on the coverage and pricing pages, which form part of these terms. We may improve or change the platform over time; we will not materially reduce a paid plan’s core capability during its term.

3. Authorization — your responsibility

Penetration testing is intrusive. You may only submit a target you own or for which you hold explicit, written authorization to test. You are solely responsible for confirming that authorization, for the scope you define, and for any impact of testing on your own systems, data, users, or third-party services. You must not use RedPick to test any system without authorization, to violate any law, or to attack infrastructure you do not control. We may suspend or refuse any test that we reasonably believe is unauthorized.

4. Managed engagements (BeDefended)

Fully managed, expert-led penetration tests are scoped and delivered by BeDefended, our founding partner, under a separate statement of work. Where a managed engagement involves BeDefended personnel accessing your data, BeDefended acts as our sub-processor and is bound by equivalent confidentiality and data-protection obligations (see the Privacy Policy).

5. Fees and payment

• Per-test assessments are quoted per the published rates (Professional $4,490; Enterprise custom), billed per test.
• Subscriptions (Starter, Growth, Scale) are billed annually in advance. Each plan includes a set number of full scans and unlimited retests; additional full scans beyond the plan allowance are billed at the published overage rate.
• Retests re-verify a specific finding we previously reported to you, after you have remediated it. They are unlimited under fair use and are not a substitute for a new full scan; a fresh re-assessment of the application is a scan, drawn from the plan allowance or billed at the overage rate.
• Prices exclude VAT and other applicable taxes. Fees for a delivered test or a commenced subscription term are non-refundable except where required by law. We may change published prices prospectively; changes do not affect a subscription already paid for its current term.

6. Deliverables and your data

You retain all rights to your applications, your data, and the reports we deliver to you. We grant you a perpetual right to use those reports for your internal security and compliance purposes. We retain all rights to the RedPick platform, engine, models, and methodology. We may use aggregated, de-identified information about testing to improve the service; we will not disclose your findings or identify you without your consent.

7. Confidentiality

We treat your applications, findings, and non-public information as confidential and disclose them only to personnel and sub-processors who need them to deliver the service, under confidentiality obligations.

8. Acceptable use

You must not resell or provide the service to third parties without our agreement, reverse-engineer the platform, circumvent usage limits, or use the service to build a competing product. You must not upload unlawful content or use the service to harm others.

9. Warranties and disclaimers

Security testing is inherently probabilistic: no assessment can guarantee that every vulnerability is found or that a system is free of risk. The service is provided “as is” to the maximum extent permitted by law, and we disclaim implied warranties of merchantability, fitness for a particular purpose, and non-infringement. You remain responsible for securing your systems and for backups before testing.

10. Limitation of liability

To the maximum extent permitted by law, neither party is liable for indirect, incidental, special, or consequential damages, and our total liability arising out of or relating to the service is limited to the fees you paid to us for the service in the twelve months before the event giving rise to the claim. Nothing limits liability that cannot be limited by law.

11. Term and termination

These terms apply while you use the service. We may suspend or terminate access for material breach (including unauthorized testing) or non-payment. A subscription runs for its paid term and does not auto-renew unless agreed in writing. Sections that by their nature should survive (ownership, confidentiality, disclaimers, liability, governing law) survive termination.

12. Governing law

These terms are governed by the laws of the State of Delaware, USA, without regard to its conflict-of-laws rules, and the parties submit to the exclusive jurisdiction of the state and federal courts located in Delaware, except where mandatory local consumer law provides otherwise.

13. Changes

We may update these terms; we will post the revised version here and update the date above. Material changes affecting an active subscription take effect at its next renewal.

14. Contact

Questions about these terms: [email protected]. RedPick Inc., 8 The Green, Suite A, Dover, DE 19901, USA.

See also our Privacy Policy.