Terms of service.

The Estonian version of these terms is authoritative.

Service provider

Streel OÜ (trademark Halden Cybersecurity), registry code 16169089, Pärnu mnt 28-16, 10141 Tallinn.

Contract

The contract is formed when the client submits an order online and accepts these terms. We provide services only to companies and other organisations, not to consumers. We confirm the order by email within one business day. If we cannot carry out an order, for example because we cannot confirm that the person ordering may authorise the check, we say so and refund any amount already paid.

Free email check

The free check reads only the domain's public DNS records and is for information. It does not assess the security of your website, webshop, applications or servers, and gives no guarantee that the company is protected against attacks.

Permission and scope

Every security check starts with written permission. It names the assets to be checked, the time period and what is not checked. We don't check anything outside it. The client confirms they have the right to grant permission for the assets named.

If the website or server is run by a hosting company, cloud provider or other third party, the client confirms that their terms allow a security check or that the client has obtained the necessary permission.

How the check works and its risks

A security check is an active test. We send requests to the website and the services named in the permission the way an attacker would, to find weaknesses before an attacker does. We use automated tools and manual checks.

We do not knowingly delete or change the client's data, we do not run denial-of-service (DoS) attacks, we do not use a weakness further than needed to show it exists, and we keep the volume of requests moderate.

Even so, we cannot rule out that the check affects how systems run. Possible effects include:

• the website or server slows down, returns errors or stops working for a while;
• test records, orders or emails are created through forms or interfaces;
• logs and security systems raise alerts, and the hosting company or a firewall blocks our requests;
• outdated, poorly maintained or already compromised systems behave unpredictably.

If we notice that the check is disrupting a system, we stop and tell the client. The client may stop the check at any time by writing to tere@halden.ee.

The client's responsibilities

Before the check starts, the client:

• makes sure there is a working, restorable backup of the website, database and other systems being checked;
• informs their hosting company, IT partner or security provider where needed, so the activity is not mistaken for a real attack;
• names a contact person who can be reached by email during the check, and tells us if any system or time period is especially sensitive.

If the client wants certain parts (for example payment or order forms) left untested, or tested only at a set time, we agree this in the permission.

Results

The report describes what was found during the check. A security check reduces risk but doesn't guarantee that there are no other weaknesses. Making the fixes is the responsibility of the client or their IT partner unless agreed otherwise.

Price and payment

Prices exclude VAT, which is added. A security check is paid by card when ordering, or by invoice. With card payment, we start the check once the payment has been made. With invoice payment, we send the invoice together with the report and it is due in 14 days.

The obligation to pay arises when the service is provided and does not depend on the number or severity of findings. Amounts not paid on time bear statutory late interest (Law of Obligations Act, § 113).

The security-check price is credited toward the first months of monitoring if monitoring is ordered within 30 days. For services provided on a quote, the price and payment terms are set out in the quote.

Monitoring

Monitoring is a monthly service that can be cancelled at the end of any month. It is not real-time surveillance.

Confidentiality

We keep information obtained during a check confidential and use it only to provide the service.

Liability

The client is aware of the possible effects described under "How the check works and its risks" and accepts them. We are not liable for interruption or slowdown of the website or service, test records, loss of data, or loss of profit, reputational harm or other indirect loss arising from the agreed check being carried out in the normal way.

In all other cases our liability is limited to the amount paid for the service in question. These limits do not apply in cases of intent or gross negligence, or where the law does not allow liability to be limited.

If the person ordering was not entitled to authorise the check, or a third party's terms did not allow it, the client is responsible for the resulting claims and compensates us for third-party claims and related costs.

Validity of these terms

These terms apply from 23 October 2026. An order is governed by the terms the client accepted when ordering.