Legal
Refund &
cancellation policy
How refunds and cancellations work for assessments purchased through the checkout on appsec-labs.com, operated by AppSec Application Security Ltd., trading as AppSec Labs.
The seller
Who you are buying from
Purchases made through the checkout on appsec-labs.com are sold by AppSec Application Security Ltd., a company registered in Israel, company number 514521335, registered office Hataas 20, Kfar Saba, Israel. AppSec Labs is our trading name.
You can reach us at info@appsec-labs.com or +972-9-7485005 about anything on this page.
Who takes the payment
Our payment processor
Payments on this site are processed by Paddle.com (Paddle.com Market Ltd), our authorised reseller and Merchant of Record. Paddle appears on your card statement, handles the transaction, issues your receipt and tax invoice, and returns any refund to your original payment method. You can request a refund from us using the details below, or directly from Paddle via the link on your receipt.
What you are buying
A fixed-scope, fixed-price assessment
You are buying a fixed-scope, fixed-price application security assessment of software your organisation owns or is authorised to test. The scope and the price are fixed at checkout from our published price list, and the price is what you pay — scoping does not reopen it.
All work is delivered remotely and electronically through the CybeRapid platform, where you log in to see findings, evidence and retests. There is nothing physical to ship. Prices are shown and charged in US dollars; any applicable taxes are calculated and collected by Paddle at checkout.
Purchases through this checkout are made by businesses, for business purposes.
Delivery
What you receive, and when
Every purchase follows the same four steps. Nothing is tested before you have signed for it.
1. Scope confirmed
Within 2 business days of payment we confirm the scope with you and issue the authorisation-to-test, which names the systems in scope and the testing window.
2. Testing
Testing starts on the date agreed with you during scoping, and never before the authorisation-to-test is signed.
3. Findings and report
Findings appear in your CybeRapid workspace as they are confirmed, with a final report at the end of the engagement.
4. Retest
Retesting of every reported finding is included at no extra cost, as stated on our pricing page.
Cancellations & refunds
When you can cancel and get a refund
The point at which you cancel decides the outcome, because what you buy is work performed by people over time.
Before testing begins
From the moment you pay until the moment testing starts, you can cancel for any reason and receive a 100% refund. In practice that is at least the two-day scoping window plus the time it takes to sign the authorisation-to-test. Just email us.
If we cannot proceed
If we cannot confirm your authority to test the systems named, or the engagement falls outside what we can safely and lawfully deliver, we cancel it ourselves, tell you why, and refund 100%. We do not keep a fee for work we have not done.
After testing begins
You can still cancel. We refund the fee for the testing days not yet used: fee × (scoped testing days remaining ÷ total scoped testing days), rounded up to whole days in your favour. A completed assessment, or a final report already delivered, is not refundable.
Duplicate or mistaken charges
Refunded in full, whenever they come to light. Tell us and we will not argue about it.
How to request
Requesting a refund or cancellation
Email info@appsec-labs.com with the order or receipt number shown on your Paddle receipt. You can also request a refund directly from Paddle using the link on that receipt.
We acknowledge every request within 2 business days and approve or decline within 5 business days, with a written reason. Approved refunds are issued by Paddle to your original payment method and normally appear within 3 to 10 business days, depending on your bank or card issuer.
Chargebacks
If something is wrong, please contact us first — we can almost always resolve it faster than a card dispute, and the cancel-before-testing terms above mean a full refund is usually available just by asking. Raising a chargeback before contacting us may delay resolution.
Consumer rights
Your statutory rights
Nothing in this policy limits rights you cannot waive by law. Where you are a consumer with a statutory right of withdrawal — for example the 14-day cooling-off period under EU or UK law — that right applies to services. Because our service can begin during that period, if you ask us to begin work within the cooling-off period you acknowledge that you may lose the right of withdrawal once the service is fully performed.
Changes to this policy
We may update this policy from time to time. The version in effect at the time of your purchase applies to that purchase.
Contact
Get in touch
AppSec Application Security Ltd. (trading as AppSec Labs)
Registered in Israel, company number 514521335
Hataas 20, Kfar Saba, Israel
info@appsec-labs.com · +972-9-7485005
Last updated: 20 August 2026.