Ghost Protocol

Terms of service

The terms that apply when you use ghosts.lk or engage us for a service.

Last updated:

1. Agreement

By accessing ghosts.lk or engaging Ghost Protocol (Pvt) Ltd (“Ghost Protocol”, “we”, “us”) for services, you agree to these terms. If you do not agree, please do not use our website or services.

2. Services

Ghost Protocol provides:

  • Security Testing: Vulnerability assessments, penetration testing, security audits
  • Software Development: Web applications, APIs, custom platforms
  • Developer Tools: Wyrm (proprietary) and other tools
  • SaaS Subscriptions: Wyrm Pro, Wyrm Team, and Wyrm Enterprise plans
  • Consulting: Security architecture, compliance guidance, technical advisory

Specific deliverables, timelines, and pricing are defined in individual service agreements or proposals. These terms apply as a baseline to all engagements.

3. Security testing authorisation

Important: All security testing (penetration testing, vulnerability scanning) is performed only with explicit written authorization from the system owner. Clients must provide written scope confirmation before any testing begins. Ghost Protocol will never test systems without proper authorization.

4. Payment and billing

4.1 Payment processing

All payments are processed securely by Stripe, Inc.(“Stripe”), our payment processor. Ghost Protocol (Pvt) Ltd is the merchant for all purchases. Stripe handles card processing in accordance with Stripe’s Terms and Privacy Policy.

4.2 Subscriptions

  • Subscriptions are billed on a recurring basis (monthly or annually as selected)
  • Your subscription automatically renews at the end of each billing period unless cancelled
  • You may cancel your subscription at any time through your account or by contacting us
  • Cancellation takes effect at the end of the current billing period, you retain access until then
  • Price changes will be communicated at least 30 days in advance

4.3 Custom services

  • One-time services: 50% upfront, 50% upon delivery
  • Retainers: Billed monthly in advance
  • Invoices are due within 14 days unless otherwise agreed
  • Late payments may incur a 1.5% monthly fee after 30 days overdue

4.4 Taxes

Applicable sales tax, VAT, or GST is calculated and collected at checkout where required based on your location. The price shown at checkout includes all applicable taxes.

5. Refunds

Our refund policy is detailed on our Refund Policy page. In summary:

  • SaaS subscriptions may be refunded within 14 days of the initial purchase if unused
  • Renewal charges are not refundable, but you may cancel to prevent future charges
  • Custom services follow the refund terms in the service agreement

6. Intellectual property

Client deliverables: Upon full payment, clients receive ownership of custom-built deliverables as specified in the service agreement. Generic frameworks, libraries, and reusable components remain Ghost Protocol’s property.

Our tools: Ghost Protocol retains all rights to its proprietary tools (PhantomDragon, DragonKeep, DragonScale, DragonForge, Ghost License) and methodologies.

Software licensing: Wyrm is proprietary software, governed by the Wyrm Terms of Service. Other Ghost Protocol tools are licensed under their respective licenses.

7. Confidentiality

We treat all client data, systems information, and vulnerability findings as strictly confidential. Security test results are shared only with authorized client contacts. We will never disclose client information without written consent unless required by law.

8. Limitation of liability

Ghost Protocol performs security testing and development with professional care. However, no security test can guarantee the discovery of all vulnerabilities, and no software can be guaranteed defect-free. Our liability is limited to the fees paid for the specific engagement in question.

We are not liable for: damages arising from unauthorized use of our tools, third-party actions, force majeure events, or client’s failure to implement recommended security fixes.

9. Software licensing

Wyrm is proprietary software, provided “as is” without warranty; its use is governed by the Wyrm Terms of Service and requires a Ghost Protocol account. For licensing inquiries, contact ryan@ghosts.lk.

10. Acceptable use

You agree not to:

  • Use our services or tools for illegal activities
  • Attempt to reverse engineer proprietary tools
  • Misrepresent our findings or reports
  • Resell or redistribute our services without authorization
  • Share subscription access with unauthorized users
  • Circumvent usage limits or access controls

11. Termination

Either party may terminate an engagement with 14 days written notice. Client is responsible for payment of work completed to date. For subscriptions, cancellation takes effect at the end of the current billing period. Confidentiality obligations survive termination indefinitely.

We reserve the right to suspend or terminate access to paid services for violation of these terms or non-payment, with notice where practicable.

12. Governing law

These terms are governed by the laws of Sri Lanka. Any disputes will be resolved in the courts of Colombo, Sri Lanka, unless an alternative jurisdiction is agreed upon in writing.

13. Contact

Questions about these terms? Contact us at ryan@ghosts.lk or through our contact page.

Ghost Protocol (Pvt) Ltd
Colombo, Sri Lanka