Terms of Service

This website is operated by CyberBit Solutions LLC. If you do not agree with these Terms, do not use the website or services. If you are using CyberBit on behalf of a business, you confirm that you are authorized to act for that business.

CyberBit provides practical, fixed-scope website, email, domain, cloud-account, and cybersecurity foundation services for small businesses and selected personal cybersecurity needs. Services may include:

• Free Website, Email & Domain Check
• CyberBit Instant Signal Brief - $19 USD, one-time automated digital report
• Website, Email & Domain Security Snapshot - $199
• Focused Security Cleanup - $750
• Secure Wi-Fi & DNS Protection Setup - From $750
• Secure Website Redesign / Rebuild - From $2,500
• New Business Tech Setup - From $3,500
• Website Takeover & Cleanup (supporting path) - From $1,500
• Practice Security Baseline - From $1,250
• Business Security Remediation Sprint - From $1,500
• External Security Watch - $99/month or From $499/month
• Cyber Insurance Evidence Review - From $750
• Client/Vendor Security Questionnaire Support - From $1,500
• Authorized Web Application Penetration Test - From $4,500
• Personal Cyber Lockdown
• Family Cyber Safety Setup
• Account Compromise Triage
• Password Manager + MFA Setup
• Credit Freeze + Fraud Alert Guidance

• CyberBit performs safe, public-facing review, configuration review, checklist support, and advisory help unless a separate written scope says otherwise.
• CyberBit does not guarantee security, breach prevention, compliance certification, cyber insurance approval, lower premiums, questionnaire approval, account recovery, or protection from future incidents.
• CyberBit does not provide legal, insurance, financial, credit-repair, forensic, law-enforcement, emergency incident response, or 24/7 monitoring services unless separately and explicitly agreed in writing.
• CyberBit does not perform penetration testing, exploit testing, credential testing, social engineering, unauthorized scanning, or private-system access unless separately and explicitly agreed in writing.
• CyberBit does not guarantee SEO rankings, leads, uptime, email deliverability, platform approval, breach prevention, or perfect security.

Paid service scope

• CyberBit Instant Signal Brief is a one-time automated digital report generated from the exact successful Free Website, Email & Domain Check snapshot completed before checkout. It adds a secure web copy, PDF, standard explanations, likely task ownership, and provider-neutral next questions. It includes no human review, additional scan, false-positive review, customized prioritization, account-specific values, implementation, monitoring, penetration testing, compliance assessment, certification, attestation, or security guarantee.
• Cyber Insurance Evidence Review is a cybersecurity evidence-gap and readiness memo service; it is not legal advice, insurance advice, insurance placement, compliance certification, guaranteed approval, lower-premium advice, or permission to fabricate controls.
• Client/Vendor Security Questionnaire Support drafts supportable response language, evidence notes, and gap notes for customer review; CyberBit does not provide false answers, legal attestation, compliance certification, guaranteed client approval, or submission without customer approval.
• Website setup, secure website redesign, supporting takeover cleanup, Focused Security Cleanup, Secure Wi-Fi & DNS Protection Setup, and Business Security Remediation Sprint include only the fixed-scope design, setup, implementation, guided cleanup, or vendor-ready handoff confirmed in writing; they are not full penetration tests, unlimited IT support, emergency incident response, forensic investigation, full managed service, or guaranteed business outcome. The $750 Focused Security Cleanup covers one business, one primary domain, and one website/email environment; multi-system, multi-provider, migration, ownership-handoff, or broader hardening work requires Sprint or separate scope.
• Practice Security Baseline is an authorized evidence-based configuration review for one Microsoft 365 or Google Workspace tenant, one primary domain, and up to 25 active users. It is not implementation, penetration testing, SOC monitoring, compliance certification, or a comprehensive enterprise risk assessment; implementation moves into a Remediation Sprint.
• HIPAA-aware website, email, domain, workspace and vendor-handoff support may be included where relevant. This is not a HIPAA Security Risk Analysis, legal advice, compliance certification or review of all systems containing ePHI.
• Personal cybersecurity services are defensive, owner-authorized guidance; CyberBit does not request passwords, access unauthorized accounts, guarantee recovery, provide law-enforcement or private investigation services, or provide legal, financial, insurance, credit-repair, or forensic services.

External Security Watch scope

• Automated External Monitor provides monitoring and alerts for agreed public website checks only; cleanup, provider coordination, implementation, incident response, helpdesk, SOC, MDR, forensics, and unlimited IT support are scoped separately.
• Human External Security Watch includes the Automated External Monitor plus monthly human validation of external website, email, DNS, domain, TLS, and header drift; a monthly briefing; evidence history; one prioritized provider escalation note; a quarterly owner/provider review; and the written business-hours response commitment confirmed in the service scope.
• External Security Watch is recurring public-signal oversight and advisory follow-up; it is not SOC, MDR, endpoint monitoring, SIEM/log monitoring, emergency incident response, penetration testing, breach guarantee, compliance guarantee, full MSP, unlimited helpdesk, or legal, insurance, or regulatory certification.
• External Security Watch implementation work is quoted separately unless it is explicitly included in a written scope.

• Provide accurate, current, and complete information.
• Submit only domains, accounts, devices, systems, questionnaires, and materials you own or are authorized to manage.
• For website setup, redesign, takeover, domain, DNS, email, or workspace services, confirm that you own or are authorized to manage the relevant assets before requesting work.
• Do not submit passwords, private keys, backup codes, seed phrases, recovery codes, SSNs, bank details, full account numbers, full payment card numbers, API keys, private credentials, or unrelated sensitive personal information.
• Review recommendations with the appropriate owner, IT provider, website host, email provider, broker, legal advisor, insurance professional, or other qualified party when needed.
• Approve final questionnaire, insurance, vendor, or business submissions before they are sent.
• Maintain access to and responsibility for your own accounts, systems, vendors, backups, and business decisions.

CyberBit offers the Authorized Web Application Penetration Test through a separate qualification, contracting, and written authorization process. This commercial service is distinct from reporting a possible issue under the Security Disclosure Policy.

• The public qualification form starts a fit and scoping review only. Submitting it does not authorize, schedule, or begin testing.
• Before active testing, CyberBit requires an executed agreement, verified scope, written authorization from an entity able to grant it, and agreed Rules of Engagement.
• Only agreed customer-controlled assets may be tested. Third-party assets require separately verified owner permission.
• Exact assets, techniques, environment, schedule, contacts, evidence handling, price, and stop procedures are confirmed before payment or testing.
• Testing is a point-in-time assessment of the agreed scope. It cannot prove that every vulnerability was found, that the application is secure, or that a compliance requirement is satisfied.
• One focused retest may verify requested original findings within 30 calendar days when included in the written scope. It does not include new assets, new functionality, expanded roles or APIs, or certification.
• The customer may use its internal team, existing provider, another qualified provider, or separately scoped CyberBit help for remediation.

Review the service details before submitting a qualification request.

• Paid services begin after the applicable intake, scope, and payment flow is completed.
• Stripe handles payment processing. CyberBit does not store full payment card numbers.
• CyberBit Instant Signal Brief costs $19 USD, one-time with no subscription. Stripe webhook-confirmed payment, not the browser return page, creates the report entitlement. Unpaid, cancelled, failed, refunded, disputed, expired, or tampered orders do not retain report access.
• The Instant Signal Brief is delivered electronically through a secure web link with a PDF download. Support for this product is limited to billing, access, and download problems; interpretation and customized guidance require the separately purchased Cyber Risk Snapshot.
• Prices, service scope, availability, and timelines may change unless a written scope or paid order has already been accepted.
• Your first human-reviewed Cyber Risk Snapshot PDF draft will be delivered within 24 hours after both payment is confirmed and the required intake is complete. This is an elapsed calendar-hour commitment that includes weekends and holidays. The 24-hour clock starts at the later of successful payment confirmation and CyberBit validating that the required intake is complete. Required intake is complete only after all required answers, usable materials, authorization, and any requested clarification have been received. If payment is not confirmed or the required intake is incomplete, the 24-hour delivery clock has not started. Once started, the delivery clock continues without being paused or restarted. If CyberBit misses that 24-hour delivery window, you may request a full $199 refund.
• Book a qualifying implementation engagement of $750 or more within 30 days of report delivery, and CyberBit will apply the $199 Snapshot fee once toward that engagement. The credit is non-cash, non-transferable, applied once, and cannot be stacked with another promotion, refund, or credit. It excludes subscriptions, recurring services, taxes, and third-party costs and is subject to confirmed scope and written acceptance.
• Implementation and intake-first services may require scope confirmation before payment. CyberBit may decline or re-scope requests that are unsafe, unauthorized, incomplete, or outside the listed offer.
• Third-party subscriptions, licenses, taxes, and vendor costs are separate unless explicitly included.
• Requests that expand beyond the agreed work require scope confirmation.
• Refunds for other services, if any, follow the written scope, checkout terms, or service page terms that apply to that service.

Reports, checklists, summaries, questionnaire notes, and recommendations are based on available public-facing signals, information provided by the customer, safe checks, manual review, and the agreed scope. Systems, DNS records, vendors, accounts, threats, and public signals can change after a report is prepared, so findings may become outdated.

CyberBit recommendations are practical and informational. They are not guarantees and should be reviewed with the relevant owner, administrator, IT provider, web host, email provider, broker, legal advisor, or insurance professional where appropriate.

The Instant Signal Brief is deterministic automated output from one immutable completed Free Check snapshot. It preserves that scan's score and statuses, uses a versioned standard explanation map, and performs no second scan or live enrichment during fulfillment. Its standard review order is not tailored business-risk prioritization and does not replace the human-reviewed Cyber Risk Snapshot.

Personal cybersecurity services are checklist-based and guided support for accounts, devices, and household situations the customer owns or is authorized to manage. These services are not emergency response, law enforcement, forensic investigation, legal advice, financial advice, credit-repair service, insurance advice, or guaranteed account recovery.

CyberBit may help interpret security questions, identify evidence gaps, organize practical fix plans, and draft supportable response language. CyberBit does not sell, broker, place, underwrite, or recommend insurance policies. CyberBit does not guarantee insurance approval, lower premiums, vendor approval, or compliance certification.

CyberBit will not fabricate controls or claim a control exists if it does not. Final answers should be reviewed and approved by the business owner and, where appropriate, a broker, insurer, legal advisor, insurance professional, vendor, client, or authorized representative.

• Do not use CyberBit services for abusive, unlawful, harmful, deceptive, unauthorized, or invasive activity.
• Do not ask CyberBit to access, test, scan, monitor, or modify systems without authorization.
• Do not submit someone else's account, device, domain, questionnaire, or private information unless you are authorized to do so.
• Do not use the website to interfere with security, availability, forms, APIs, email systems, or report systems.

The website, report templates, service materials, checklists, copy, designs, and other materials belong to CyberBit unless otherwise stated. Customers may use purchased deliverables internally for their own business or personal use, including sharing with relevant vendors, IT providers, brokers, insurers, or authorized stakeholders for the purpose of acting on the deliverable.

CyberBit may link to or rely on third-party services such as Stripe, email providers, hosting providers, analytics/logging providers, scheduling tools, vendor portals, cloud providers, and customer-selected platforms. CyberBit is not responsible for third-party services, websites, outages, terms, pricing, security, or privacy practices.

The website and services are provided as practical advisory support. CyberBit does not warrant that the website will be uninterrupted or error-free, that all risks will be found, that all issues can be fixed, or that any business or person will be secure, compliant, insurable, approved by an insurer, or protected from future incidents.

To the maximum extent permitted by law, CyberBit is not responsible for indirect, incidental, consequential, special, punitive, lost-profit, lost-revenue, business-interruption, data-loss, security, vendor, insurer, platform, or third-party damages related to use of the website, services, or recommendations.

CyberBit may refuse, suspend, or terminate requests that are unsafe, unauthorized, abusive, unlawful, outside scope, incomplete, or not a fit. These Terms are governed by the laws of New York, without regard to conflict-of-law rules.

CyberBit may update these Terms as services, tools, prices, workflows, or business operations change. The updated version will be posted on this page with a new last updated date.

The Privacy Notice explains how CyberBit handles information. The Security Disclosure Policy explains how to report a possible issue in CyberBit's public website.