// community
Tools for the security research community.
Security research is hugely important, yet the law leaves researchers exposed. These projects are our contribution to closing that gap. If you need dedicated support, see our services.
pro bono
[ visit clinic ]
CC BY 4.0
Free legal clinic
// free legal advice for the security research community.
If you have a legal question about security research but can't
access specialist counsel, we'll try to help you for free. Usually
within a few days. We don't need your real name for an initial conversation.
▸ Computer misuse law
▸ Responsible disclosure
▸ Vendor threats & C&Ds
▸ Bug bounty terms
▸ Employment issues
▸ Police contact
$ tail -1 /var/log/feedback
"Rich answered all my worries and questions, arming me with a legal toolkit and responses in case the meeting did not go my way. Knowing I can call Rich anytime as he specialises in this type of law is a great relief; it gives me the confidence to carry on researching and publishing."
— Josh Allman, security researcher · attributed with consent
Open-source contracts
// production-ready legal templates for UK cyber security practitioners.
Your technical standards are exacting; your contracts should be too.
Built by a specialist cyber security lawyer. Danzell v3.3 ready.
FOR PENTESTERS
▸ Master Services Agreement
▸ Statement of Work
▸ Authorisation to Test
▸ Physical Testing Auth
▸ Data Processing Agreement
FOR IASME CBs
▸ Standard Terms + Order Form
▸ CE Danzell v3.3 schedule
▸ CE+ CMA authorisation
▸ DCC export controls
▸ IoT PSTI · Maritime IMO
|=───
researcher resources
// external organisations supporting security researchers.
EFF Cooperating Attorneys
pwn.legal is listed on the Electronic Frontier Foundation's cooperating attorneys list, connecting security researchers with legal assistance.
[ EFF legal assistance ]
Security Research Legal Defense Fund
The SRLDF provides funding for the legal defence of security researchers. If you need financial support for legal representation, they may be able to help.
[ visit SRLDF ]
pwnlegal.slack.com
// where pentesters talk contracts.
Pentesters and certification body operators comparing notes on contracts,
scoping, and the commercial side of security work. Template suggestions
and bug reports on GitHub.
[ join slack ]
|=───
start
// ready to work with us?
Ready to work with us? We offer subscriptions, fixed-fee sprints, and incident response.
[ book a call ] [ view services ]