threatkit.co
Let’s talk

Consultation terms

A clear agreement
for useful work.

These terms apply to ThreatKit’s fixed-scope consultation packages. Larger work is confirmed in a written engagement agreement.

Updated 4 October 2026

01 / Scope

Each package has a defined outcome.

The package page, checkout description, or written proposal identifies the consultation scope, timing, deliverables, and anything excluded. We start work after payment for a fixed package or after both sides accept a written proposal for quote-led work.

02 / Working together

Good work needs accurate context.

You provide the access, people, documents, and decisions reasonably needed for the agreed scope. You remain responsible for the accuracy of your statements, approval of customer responses, and decisions about risk. We will flag assumptions and gaps rather than present an unimplemented control as complete.

03 / Payment

Fixed packages are paid upfront.

Online packages are charged in EUR through Stripe. Stripe provides the hosted payment page and receipt. Quote-led work uses the payment schedule in the written engagement agreement. Prices and scope may be updated for future purchases, but an accepted order keeps its stated price.

04 / Boundaries

Consultation is not independent assurance.

ThreatKit can help organise requirements, review evidence, prepare responses, and coordinate specialist work. We do not issue ISO certification, SOC reports, legal opinions, penetration-test reports, or guarantees that a customer, auditor, or certification body will approve an outcome. Technical testing, incident response, and 24/7 monitoring require separate written scope.