Refund & Cancellation Policy

Last updated: July 9, 2026

This policy explains how deposits, cancellations, and refunds are handled for engagements booked with ON Security ("we," "us," or "our") through https://onsecurity.squarespace.com/. It applies to penetration testing and other security assessment services we provide. Specific terms for your engagement may also be set out in your signed statement of work (SOW); where the two differ, your signed SOW governs.

Deposits

To reserve testing dates and allocate our team's time, engagements require a deposit of [DEPOSIT %] of the total project fee, paid before work is scheduled. The deposit is applied toward your final invoice.

Cancellations

If you need to cancel or postpone a scheduled engagement, please notify us in writing as early as possible. Our cancellation terms are:

• More than [CANCELLATION DAYS] days before the scheduled start date: full refund of your deposit, minus any third-party costs already incurred on your behalf.
• Within [CANCELLATION DAYS] days of the scheduled start date: the deposit is non-refundable, as we've reserved dedicated team time that we're typically unable to reallocate on short notice.
• After testing has begun: fees for work already completed are non-refundable. Any remaining, not-yet-started portion of the engagement may be refunded at our discretion.

Rescheduling

We're generally happy to reschedule an engagement instead of cancelling it outright. Contact us as early as possible and we'll work with you to find new dates — this avoids cancellation fees in most cases if arranged with reasonable notice.

Our Right to Cancel

If we need to cancel or reschedule an engagement (for example, due to team availability or unforeseen circumstances), we will notify you promptly and either reschedule at no additional cost or refund any amounts paid for work not yet performed.

Disputed Findings or Deliverables

If you have concerns about the quality or completeness of a delivered report, contact us within 14 days of delivery. We'll work with you to address the concern; this may include revisions, clarification calls, or — where we determine the deliverable did not meet the agreed scope — a partial refund. Refunds are not issued simply because findings were fewer or different than expected, since the value of a security assessment lies in the testing process itself, not a guaranteed number of findings.

How Refunds Are Issued

Approved refunds are returned to the original payment method within 10 business days. If that's not possible, we'll contact you to arrange an alternative.

Contact Us

Questions about a deposit, cancellation, or refund? Contact us at [CONTACT EMAIL].