Last updated: September 27, 2026
These Terms of Use govern your access to and use of the ovniTEK Solutions LLC ("ovniTEK," "we," "us," or "our") website, including its content, educational resources, cybersecurity information, assessments, paid reports, customer accounts, services, and contact features.
By accessing or using this website, you agree to be bound by these Terms of Use. If you do not agree with these terms, please do not use the website.
ovniTEK provides a free 20-question cybersecurity assessment, paid assessment reports, a separate 80-question Full NIST CSF 2.0 Assessment, educational content, and related review or support services intended to help organizations understand and improve their cybersecurity posture. A separate free Personal Cyber Health Assessment and optional $39 Personal Cybersecurity Action Plan serve individuals.
Information presented on this website is provided for general informational and educational purposes. Accessing or using this website does not, by itself, create a client, consulting, or other professional relationship between you and ovniTEK.
You agree to use this website only for lawful purposes and in a manner that does not interfere with the operation, security, availability, or integrity of the website or its services.
You must not:
The Security Contact & Vulnerability Disclosure Policy explains how to report a suspected issue. It is a reporting channel, not general authorization to scan, test, access, or exploit the website or any connected system. Testing requires specific written authorization unless the policy expressly states otherwise.
ovniTEK may publish cybersecurity news, vulnerability information, defensive guidance, infrastructure information, educational materials, and other technical content.
This content is provided for informational and educational purposes only. Cybersecurity information may change rapidly, and content published on this website may become outdated, incomplete, or inaccurate despite reasonable efforts to maintain its quality.
You are responsible for evaluating information before applying it to your environment. You should consider applicable vendor documentation, organizational policies, security requirements, and regulatory obligations before implementing technical changes.
Nothing on this website should be interpreted as authorization to access, scan, test, exploit, or otherwise interact with systems that you do not own or have explicit permission to assess.
The free assessment provides a high-level view across the six NIST CSF 2.0 Functions. A detailed-report purchase uses the answers from that free assessment. The separately purchased Full NIST CSF 2.0 Assessment contains 80 evidence-oriented questions and includes its extended PDF report after completion.
The free personal checkup adapts questions to the selections you make and displays a limited, self-reported snapshot. The separately purchased Personal Cybersecurity Action Plan is a PDF based on that completed checkup. It does not inspect a device or account, perform a breach search on your behalf, or include ongoing monitoring or hands-on remediation.
Any actual assessment, consulting engagement, or other professional service is subject to a separate agreement between ovniTEK and the client.
The scope, methodology, deliverables, access requirements, responsibilities, confidentiality requirements, pricing, limitations, and other terms applicable to a particular engagement will be established separately with the client.
The business assessments and reports are independently developed by ovniTEK and aligned with NIST CSF 2.0. They are not created, certified, endorsed, or conducted by NIST and do not constitute an official NIST assessment or certification.
Website results and automatically generated reports rely on the information you provide and generally do not independently test or verify your answers, systems, safeguards, or supporting evidence. They are informational, are separate from a separately agreed professional consulting engagement, and do not constitute a penetration test, technical audit, certification, managed security service, legal advice, or comprehensive evaluation of your organization.
Cybersecurity assessments, recommendations, and defensive measures can help identify potential weaknesses and opportunities for improvement, but no assessment or security measure can guarantee that an environment is completely secure or immune from compromise.
Security outcomes depend on many factors, including system configuration, software, personnel, vendors, operational practices, vulnerabilities, threat activity, and changes made after an assessment.
If you submit information through an ovniTEK contact form or another website feature, you represent that the information you provide is accurate and that you have the right to provide it.
Please do not submit passwords, authentication credentials, private keys, classified information, or other highly sensitive information through a contact form, assessment response, report-order form, or other general website feature.
Website feedback is optional and may be submitted without direct identity fields. If you provide contact details, we will use them to follow up only when you expressly select the follow-up permission on the form. Feedback is not a secure vulnerability-disclosure channel, urgent-support service, or marketing subscription.
If you submit information about an organization, you represent that you are authorized to provide and use that information for the assessment and report. You are responsible for the completeness and accuracy of your responses.
Information submitted through the website is handled in accordance with our Privacy Notice .
Prices and currency are displayed before checkout. Payments are processed by PayPal under PayPal's applicable terms and privacy practices. ovniTEK does not receive or store full payment-card numbers or PayPal account passwords.
Promotional prices, reference prices, and sale availability may change or end before purchase. The product, price, currency, and included deliverables shown in the final checkout presented to you govern that transaction, subject to applicable law.
A detailed-report purchase is based on the completed free checkup. A Full NIST CSF 2.0 Assessment purchase unlocks the separate 80-question assessment and includes its extended PDF report after completion; no second report payment is required. The personal action plan is available only after the free personal checkup is completed and is a separate purchase. Checkout and assessment-access sessions are temporary and may expire. Transactional email may confirm payment and provide purchase-access instructions with a general Report Vault sign-in link. It does not include the report, assessment results, a PDF attachment, private access tokens, or a direct report-download link.
The Full NIST CSF 2.0 Assessment requires you to create or sign in to a customer account before purchase, so your assessment and included report can be connected to that account. Other eligible report purchases do not automatically create an account; you may choose to sign in and connect them. Account authentication alone does not establish ownership of a report; the paid checkout or another verified recovery process must authorize the connection.
If you use an optional Google or GitHub sign-in method, you authorize the selected provider to supply the basic identity information permitted by the sign-in flow to our authentication service. ovniTEK uses that information only to authenticate and maintain your account, protect access, and provide account-related support as described in our Privacy Notice. Third-party sign-in remains subject to the provider's applicable terms, privacy practices, availability, and account requirements.
If email/password authentication is enabled and you use it, you are responsible for providing accurate account information, maintaining a strong and confidential password, and promptly notifying ovniTEK if you suspect unauthorized account access. Authentication credentials and password-recovery activity are processed through Neon Auth as described in the Privacy Notice.
You may stop using a third-party sign-in provider or revoke its authorization through that provider. Revoking a provider may prevent future access through that sign-in method and does not automatically delete ovniTEK transaction, report, security, or account records that we are otherwise permitted or required to retain.
A signed-in customer may permanently delete the customer account through the Danger Zone on the My Reports page. The deletion is irreversible and removes the authentication identity and the saved reports, linked assessment responses, scores, findings, report-order details, and access records connected to that account. It does not remove report copies already downloaded to a device or records that cannot be safely connected to the account without additional ownership verification. A restricted deletion audit record may retain the account name and email for up to 90 days for abuse and fraud review, after which the identity is hidden and removed by the daily cleanup. See the Privacy Notice for retention details.
Following account deletion, ovniTEK may retain a minimized financial transaction record—such as the product, amount, currency, payment reference, payment status, and transaction dates—for a period designed to cover the ordinary three-year federal tax-record window after the related return is filed or due, and longer where reasonably necessary for tax, accounting, payment reconciliation, fraud prevention, chargebacks, disputes, legal claims, or applicable law. The retained financial record does not include assessment responses, scores, findings, or the generated report. Additional details and the automated calendar cutoff appear in the Privacy Notice.
You are responsible for protecting your sign-in account and any downloaded report copies. If confirmed payment is followed by a technical delivery or account-access failure, contact ovniTEK with the order number so we can restore verified access or provide another copy. You will not be required to purchase the same report again solely because of an ovniTEK delivery failure.
Because paid reports are personalized digital products, purchases are generally final once report access or the paid assessment is made available. This policy does not limit refund rights that cannot be excluded under applicable law. Any other refund exception may be considered at ovniTEK's discretion. Approved refunds are processed through PayPal to the original payment method. To request a review, contact us through the Contact page or an available PayPal transaction support option. A request is not itself a refund; PayPal disputes and transaction errors are handled under PayPal's applicable processes.
Unless otherwise indicated, the ovniTEK website and its original content, including text, graphics, logos, branding, designs, layouts, articles, educational materials, and other original materials, are owned by or licensed to ovniTEK and are protected by applicable intellectual property laws.
You may view and use publicly available website content for personal, informational, and internal business purposes.
You may not reproduce, modify, distribute, republish, sell, or commercially exploit ovniTEK content without prior written permission, except where applicable law expressly permits such use.
The website may contain links to third-party websites, technologies, services, documentation, or other resources.
These third-party resources are provided for convenience or informational purposes. ovniTEK does not control and is not responsible for the content, availability, security, privacy practices, or policies of third-party websites or services.
ovniTEK does not guarantee that the website will always be available, uninterrupted, secure, or free from errors.
The website may be modified, suspended, restricted, or discontinued, in whole or in part, without prior notice.
To the extent permitted by applicable law, the website and its content are provided on an "as is" and "as available" basis without warranties of any kind, whether express or implied.
ovniTEK does not warrant that information provided through the website will always be complete, accurate, current, reliable, or suitable for a particular purpose.
To the maximum extent permitted by applicable law, ovniTEK will not be liable for indirect, incidental, consequential, special, exemplary, or other damages arising from or related to your use of, or inability to use, the website or its content.
Nothing in these Terms is intended to exclude or limit liability where such exclusion or limitation is prohibited by applicable law.
To the extent permitted by applicable law, you agree to be responsible for losses, claims, liabilities, damages, and reasonable expenses arising from your misuse of the website, violation of these Terms, or violation of another party's rights.
ovniTEK may update these Terms of Use from time to time to reflect changes to the website, services, legal requirements, or business practices.
When changes are made, we will update the "Last updated" date at the top of this page.
These Terms of Use will be governed by applicable law, without regard to conflict-of-law principles, except where applicable law requires otherwise.
If any provision of these Terms is determined to be invalid or unenforceable, the remaining provisions will remain in full force and effect to the extent permitted by law.
Questions regarding these Terms of Use may be submitted through the ovniTEK website or by email:
ovniTEK Solutions LLC
Email:
info@ovnitek.com
