Authorization Letter

Nubesti will not launch tests until KYC is approved and you confirm written authorization for the scope. This page is the standard authorization. It supplements the Rules of Engagement and Acceptable Use Policy.

By checking the authorization box in the portal, signing an order form, or sending the letter below, you represent that you can bind the owner of the targets.

1. What you authorize

You authorize Nubesti LLC and its automated agents to perform security testing only against assets you designate in the product or in a statement of work, during the period the account is active or the SOW states.

You confirm that you own those systems or have explicit written permission from the owner, and that any cloud or ISP notice required by that provider has been given.

2. Safe harbor (in-scope only)

For in-scope activity performed through Nubesti, you agree to treat that activity as consented security testing. You will not treat it as unauthorized access provided we stay inside the scope and Rules of Engagement.

This does not authorize testing of third-party systems you do not control.

3. Your duties

• Complete and pay KYC
• Keep an emergency contact reachable while tests run
• Stop or resize tests if production impact appears
• Keep findings confidential except as needed to remediate or as law requires

4. Copy-ready letter

You may send this on company letterhead to [email protected] or upload it during KYC:

I, [name / title], am authorized to bind [legal entity]. I authorize Nubesti LLC to perform security testing, including automated and AI-assisted testing, against the assets we designate in the Nubesti portal or in an attached scope list, for the term of our agreement. We own those assets or have written permission from the owner. We have completed (or will complete and pay for) Nubesti KYC before tests launch. Emergency contact: [name, email]. Signed: [name], [date].

5. Withdrawal

You may revoke authorization by stopping tests in the portal and emailing [email protected]. Already-running jobs will be halted as soon as reasonably possible. Fees already paid follow the Refund Policy and KYC Policy.