Terms of Service

1.Who we are

KKAA Solutions is the trading name of Κ. ΜΠΟΥΡΔΑΚΟΣ & ΣΙΑ Ε.Ε., a limited partnership registered in Greece (VAT EL801985029, General Commercial Registry — GEMI — No. 167601003000, official registry record), based in Athens, Greece. In these terms, "we", "us" and "KKAA Solutions" refer to this company; "you" and "client" refer to the person or organization using this website or our services. You can reach us at info@kbourdakos.gr.

By using this website, creating a Client Portal account, uploading material to the Secure Vault, or engaging our services, you accept these terms. If you act on behalf of a company or another person, you confirm that you are authorized to accept these terms for them.

2.Scope of services

KKAA Solutions provides website and server security services, including:

• Malware removal and cleanup — detection, analysis and removal of malicious code from websites, applications and databases.
• Incident response — investigation of active security incidents, containment and remediation.
• Security advisory — hardening recommendations, post-incident reports and ongoing guidance for site owners, web agencies and hosting providers.

The exact scope, deliverables, timeline and price of each engagement are agreed in writing (email or the written offer accompanying the engagement) before work begins. Anything not expressly included in that written scope is excluded.

3.Authorization and lawful access

Our work requires privileged access to websites, servers, control panels and databases. By engaging us, you warrant that:

• you own the systems you ask us to work on, or you are explicitly authorized by their owner to grant us access to them;
• every credential, API key or access method you provide to us is one you are entitled to share; and
• our access to and work on those systems will not violate any law, hosting agreement or third-party right.

We may decline or stop any engagement where authorization is unclear. You are solely responsible for any claim arising from access you granted without proper authority.

4.Client Portal

The Client Portal is an account-based area where clients can follow the status of their engagement and exchange information with us. Accounts are created by us for active clients. You are responsible for keeping your login credentials confidential and for all activity under your account; notify us immediately at info@kbourdakos.gr if you suspect unauthorized use. We may suspend or close accounts that are inactive, compromised, or used in violation of these terms.

5.Secure Vault

The Secure Vault is our encrypted secret-sharing service for passing sensitive material related to an engagement — such as credentials, API keys and configuration snippets — instead of sending them over email. Secrets are encrypted in your browser before they are uploaded; we never see the plaintext or the decryption key. Each secret can be retrieved exactly once and expires automatically after the period selected when it is created (at most 7 days), whichever comes first. The Vault may only be used for material related to your engagement with us, you must not upload content that is unlawful or that you have no right to share, and the Vault must not be relied on as a backup or storage service — nothing shared through it persists.

6.Client responsibilities

• Backups: you are responsible for maintaining your own complete backups of your websites, files and databases. We take reasonable precautions (including targeted backups of content we modify), but we are not a backup service.
• Accurate information: you must provide accurate, complete information about the affected systems, including all installations, domains and access paths relevant to the engagement.
• Timely cooperation: cleanups often depend on your (or your host's) timely responses — delays on your side may delay delivery.
• Post-cleanup hygiene: actions recommended in our reports (such as software updates or credential changes) are your decision and responsibility to implement.

7.Fees and payment

Fees are quoted per engagement and agreed in writing before work begins, together with the payment terms (prepayment, milestones or payment on delivery). Quoted fees exclude VAT unless stated otherwise; VAT is applied where required by law. Invoices are issued by Κ. ΜΠΟΥΡΔΑΚΟΣ & ΣΙΑ Ε.Ε. If an engagement is cancelled after work has started, work already performed is chargeable.

8.Service limitations

Security work deals with hostile, actively evolving threats. We work to professional standards and verify our cleanups, but no security service can guarantee that a site will never be compromised again. In particular:

• Reinfection can occur through vectors outside the agreed scope (for example vulnerable software the client chooses to keep, credentials reused elsewhere, or other systems we were not engaged to examine).
• Identifying the original infection vector is not always possible and is not a deliverable unless expressly included in the written scope.
• Findings and reports reflect the state of the systems at the time of the engagement.

9.Confidentiality

We treat all client material — credentials, files, databases, logs and findings — as confidential, use it only for the engagement, and restrict access to it. We do not disclose client-identifying details of an engagement without your consent, except where disclosure is required by law. Published research and articles on this site are anonymized or used with the client's permission. Our handling of personal data is described in the Privacy Policy.

10.Intellectual property

The content of this website — articles, research, reports, tooling and design — belongs to KKAA Solutions unless stated otherwise. You may link to and quote our public content with attribution; you may not republish it wholesale or present it as your own. Reports we deliver to you may be used freely within your organization and shared with your host or developers; they may not be resold.

11.Acceptable use of this website

You must not attempt to breach, probe or disrupt this website, the Client Portal or the Secure Vault, submit malicious content through our forms, or use our infrastructure to attack others. Security researchers acting in good faith should follow the disclosure process in our security.txt.

12.Third-party services and links

This website links to third-party sites and profiles (for example social networks and directories). We do not control them and are not responsible for their content or their terms. Services we rely on to operate (such as hosting and content delivery) are listed in the Privacy Policy.

13.Limitation of liability

To the maximum extent permitted by law, our total liability arising out of or related to an engagement is limited to the fees you paid for that engagement. We are not liable for indirect or consequential losses such as lost revenue, lost data (see your backup responsibility in section 6), reputational harm, or losses caused by third parties, hosting providers, or attacks occurring outside the agreed scope. Nothing in these terms limits liability that cannot be limited under applicable law, including liability for willful misconduct or gross negligence.

14.Changes to these terms

We may update these terms from time to time. The current version, with its "Last updated" date, is always published on this page. Changes apply to engagements agreed after the change is published; engagements in progress remain governed by the terms in force when they were agreed.

15.Governing law and jurisdiction

These terms are governed by Greek law. Any dispute arising from these terms or our services is subject to the exclusive jurisdiction of the courts of Athens, Greece. Mandatory consumer-protection rules of your country of residence, where applicable, are not affected.

16.Contact

Questions about these terms: info@kbourdakos.gr — Κ. ΜΠΟΥΡΔΑΚΟΣ & ΣΙΑ Ε.Ε. (KKAA Solutions), Athens, Greece.