Terms of Service

1. Agreement and eligibility

These Terms of Service (“Terms”) are a binding agreement between you and Mile High Cyber Solutions LLC (“MHCS,” “we,” “us,” or “our”), a Colorado limited liability company. By using this website, submitting an order, or accepting a proposal that incorporates these Terms, you agree to them. If you act for an organization, you represent that you have authority to bind it. You must be at least 18 years old and legally able to enter a contract.

If a signed statement of work, proposal, order form, marketplace agreement, or other written service agreement conflicts with these Terms, the more specific agreement controls for that engagement. Upwork purchases are also subject to Upwork’s terms and payment protections.

2. Services, scope, and authorization

Service descriptions summarize typical deliverables; they are not a guarantee that every technique or outcome applies to every environment. The accepted order, proposal, or statement of work defines the authorized systems, scope, assumptions, deliverables, timing, dependencies, exclusions, and fees.

You authorize MHCS to perform only the activities expressly identified in the applicable written scope. You represent that you own the systems in scope or have the owner’s authority to authorize the work. You will not ask us to access, test, monitor, or change a third party’s systems without documented permission. We may pause work until authorization or scope is clear.

You are responsible for timely, accurate information; backups; access to appropriate personnel; required third-party licenses and accounts; and decisions or approvals needed to perform the work. Delivery dates begin after payment, complete intake, and required access are received unless the order says otherwise. Customer-caused delays may move delivery dates.

3. Changes and production work

Unless the purchased tier expressly includes implementation, recommendations do not include production changes. Before an included production change, we may require written approval, a maintenance window, current backups, and an agreed rollback approach. We may decline a requested change that creates unreasonable risk, violates law or provider terms, or falls outside scope. Additional work requires written agreement and may require additional fees.

4. Orders, prices, and payment

Prices are shown in U.S. dollars unless stated otherwise. Applicable taxes, third-party fees, or separately approved expenses may be added where required. You authorize our payment processor to charge the selected payment method for an accepted order, deposit, or recurring service. We do not directly store full payment-card details.

A website order is subject to acceptance. We may reject or refund an order if the service is unsuitable, authorization cannot be verified, the scope is unsafe or materially different from the selected package, capacity is unavailable, or the order appears fraudulent. Deposits are applied to the applicable engagement. Unless an order states otherwise, final deliverables may be withheld until undisputed amounts are paid.

5. Cancellation, rescheduling, and refunds

For a fixed-scope service purchased directly from MHCS, you may request cancellation before work begins for a refund of amounts paid. After work begins, you are responsible for work performed and noncancelable commitments through the cancellation date; any remaining prepaid balance will be refunded. If MHCS cancels without cause, we will refund fees for work not performed. A more specific written order may state different cancellation terms.

You may cancel a recurring service before the next billing date to prevent renewal. Except where required by law or stated in an order, a billing period already started is not prorated, and service continues through the paid period. Missed customer meetings, delayed access, or incomplete intake do not automatically extend or refund a service period. Upwork transactions and refunds are handled under the applicable Upwork agreement.

6. Managed monitoring and emergency requests

“Monitoring,” scheduled reviews, and priority service mean the human review cadence and response window stated in the purchased tier. They do not mean continuous surveillance, 24/7 security operations center coverage, guaranteed detection, managed incident response, or an uptime guarantee. A “business day” means Monday through Friday, excluding U.S. federal holidays, during MHCS business hours in Mountain Time.

Website forms and voicemail are not guaranteed emergency channels. If there is an immediate threat to life or public safety, contact emergency services. If a site is actively compromised, unavailable, or exposing data, contact us before purchasing; containment, forensics, legal notification, malware removal, restoration, or application repair require separate written scope unless expressly included.

7. Cybersecurity limitations and customer decisions

Cybersecurity involves evolving threats, incomplete information, third-party systems, and operational tradeoffs. MHCS does not warrant that services will identify every vulnerability, prevent every attack, eliminate all bots or false positives, ensure compliance, or make a system completely secure. Assessments reflect the scope, access, configuration, evidence, and conditions available during the engagement.

Recommendations are professional judgments, not legal, insurance, accounting, or compliance certification advice. You retain responsibility for business decisions, risk acceptance, regulatory obligations, backups, system administration, and remediation not expressly assigned to MHCS.

8. Confidentiality and access

Each party will use reasonable care to protect the other party’s nonpublic information and use it only for the engagement, legal compliance, or enforcement of an agreement. These duties do not apply to information that is public without breach, already lawfully known, independently developed, or rightfully received from another source. Required legal disclosures may be made after notice when legally permitted.

When access is required, you agree to use the secure, least-privilege method we specify, grant only necessary permissions, and revoke access when work is complete. Do not send account passwords. You remain responsible for your accounts, identity provider, recovery methods, and authorized users.

9. Intellectual property and deliverables

Upon full payment, you may use engagement-specific reports and deliverables for your internal business purposes. MHCS retains ownership of pre-existing materials, methods, templates, know-how, software, tools, and generalized skills. To the extent those materials are embedded in a deliverable, MHCS grants you a perpetual, nonexclusive, nontransferable license to use them as part of that deliverable for internal purposes.

You retain ownership of materials you provide and grant MHCS a limited license to use them to perform the services. You may not publish security findings, benchmarks, or deliverables in a misleading way or disclose information that creates material security risk. We will not identify you in marketing or publish a case study without permission.

10. Acceptable website use

You may not misuse the site; attempt unauthorized access; interfere with availability; introduce malicious code; scrape the site in violation of law or technical controls; impersonate another person; submit unlawful, deceptive, or harmful content; or use our materials to facilitate unauthorized security activity. Website content may be used for ordinary business evaluation but may not be copied, republished, or commercially exploited without permission.

11. Disclaimers

EXCEPT FOR EXPRESS COMMITMENTS IN A WRITTEN SERVICE AGREEMENT, THE WEBSITE, CONTENT, AND SERVICES ARE PROVIDED “AS IS” AND “AS AVAILABLE.” TO THE MAXIMUM EXTENT PERMITTED BY LAW, MHCS DISCLAIMS IMPLIED WARRANTIES, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. WE DO NOT WARRANT UNINTERRUPTED OR ERROR-FREE OPERATION OR ANY PARTICULAR SECURITY OR BUSINESS RESULT. SOME JURISDICTIONS DO NOT ALLOW CERTAIN DISCLAIMERS, SO THEY MAY NOT APPLY TO YOU.

12. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, PUNITIVE, OR CONSEQUENTIAL DAMAGES, OR FOR LOST PROFITS, REVENUE, DATA, GOODWILL, OR BUSINESS INTERRUPTION, ARISING FROM THESE TERMS OR AN ENGAGEMENT, EVEN IF ADVISED OF THE POSSIBILITY.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, MHCS’S TOTAL LIABILITY ARISING FROM A PARTICULAR ENGAGEMENT WILL NOT EXCEED THE FEES PAID OR PAYABLE TO MHCS FOR THAT ENGAGEMENT DURING THE SIX MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM. THESE LIMITS DO NOT APPLY TO LIABILITY THAT CANNOT LAWFULLY BE LIMITED, AND A MORE SPECIFIC SIGNED AGREEMENT MAY PROVIDE DIFFERENT LIMITS.

13. Indemnification

You will defend and indemnify MHCS from third-party claims, damages, and reasonable costs arising from your unlawful use of the site, materials you provide, lack of authority over systems you place in scope, or instructions that violate law or third-party rights. This obligation does not apply to the extent a claim was caused by MHCS’s gross negligence, willful misconduct, or breach of the applicable agreement.

14. Suspension and termination

Either party may terminate an engagement as allowed by its written terms. We may immediately suspend work for nonpayment, unsafe conditions, suspected unlawful activity, material breach, missing authorization, abusive conduct, or risk to people or systems. Sections that by their nature should survive termination—including payment, confidentiality, intellectual property, disclaimers, liability, and disputes—will survive.

15. Governing law and disputes

Before filing a claim, the parties will make a good-faith effort to resolve it through written notice and at least 30 days of informal discussion, unless urgent injunctive relief is reasonably necessary. These Terms are governed by Colorado law, without regard to conflict-of-law principles. Subject to any controlling marketplace agreement, state and federal courts located in Denver, Colorado will have exclusive jurisdiction, and each party consents to venue there. Nothing in these Terms limits non-waivable consumer rights.

16. General terms

Neither party is liable for delay caused by events beyond its reasonable control, except payment obligations. You may not assign an engagement without our written consent; MHCS may assign it in connection with a merger, reorganization, or sale of substantially all relevant assets. If a provision is unenforceable, it will be limited to the minimum extent necessary and the remainder will continue. Failure to enforce a provision is not a waiver. These Terms and the applicable written order are the entire agreement about their subject matter and supersede earlier discussions about it.

17. Changes to these Terms

We may update these Terms prospectively by posting a revised version and updating the date above. The version accepted with an order governs that order unless the parties agree otherwise. Material changes to an active recurring service will be communicated as required by law.

18. Contact us