About these terms
These terms apply to the security verification, remediation and portfolio review services provided by the service provider named below. By paying for a service or approving a written scope, you accept these terms on behalf of your organisation. If a signed engagement letter or statement of work conflicts with these terms, the signed document prevails.
Who the service is for
These services are intended for businesses and authorised agency representatives managing web and server environments. You must be authorised to request a review and approve changes to the systems in scope.
We do not provide services to consumers. Please do not order if you are acting outside your trade, business or profession.
Verification — €190
One server and one application: identification of the actual web runtime, package and vendor patch status; written findings and a proposed next step. An outcome of “already patched” or “insufficient evidence” is a valid verification result. This is a targeted assessment of the agreed vulnerability, not a full penetration test or incident investigation.
Patch & verify — €590 total
One supported server and one application, subject to assessment. Includes verification, backup and rollback preparation, the agreed supported security update, process restart and agreed application checks. A prior €190 verification fee for the same scope is credited towards the total when remediation is agreed within seven days.
Major runtime or operating-system upgrades, application code changes, complex infrastructure changes, malware removal and forensic investigation require a separate quote. There is no guarantee of zero downtime. Maintenance windows and rollback decisions are agreed before changes.
Agency portfolio review — €1,490
Inventory and prioritisation for up to 20 sites across five servers or hosting accounts, with a client-ready report. The exact runtime coverage is agreed before work starts. Remediation is quoted separately.
Ordering and payment
You can pay for a verification upfront through the Stripe checkout on this website. Payment is an order request, not a confirmed booking: after payment we contact you at the email address given at checkout to confirm the environment, the access method and a work window. No work starts and no access is requested until the scope is confirmed in writing.
Patch & verify and agency reviews are ordered after a written scope and quote. Payment instructions for these services are provided with the confirmed scope.
Prices exclude applicable taxes, which are added where required by law. Prices are fixed in each currency shown on this website and are not live exchange-rate conversions. You receive an invoice or receipt for every payment.
Access, scheduling and acceptance
Scope, permissions, required access, backup readiness, functional acceptance checks and a work window are confirmed in writing. Response time and completion time are distinct. No round-the-clock response or fixed completion time is promised unless separately agreed.
You are responsible for providing lawful and sufficient access, for keeping a current backup, and for telling us about systems or data that need special care. We use access only for the agreed scope and ask you to revoke it when the work is complete.
Cancellation and refunds
If we cannot accept your order, for example because the environment is outside the service scope or no suitable work window is available, we refund the full payment to the original payment method. You can cancel a paid verification for a full refund until the agreed work window starts.
Once work begins, the written engagement determines completed milestones and any unused amount to be refunded. A completed verification is not refundable solely because no update is required. Refunds are issued within 14 days.
Limits of the result
The report covers the agreed environment and checks at the recorded time. It is not a security certification, a guarantee against future vulnerabilities or a finding that no previous compromise occurred. Suspected compromise requires separate investigation.
Liability
We perform the services with reasonable skill and care, in line with recognised industry practice. Our total liability for an engagement is limited to the fees paid for that engagement. We are not liable for indirect or consequential loss, such as lost profit or revenue, or for loss of data that a current backup would have prevented.
Nothing in these terms limits liability that cannot be limited by law, including liability for intentional misconduct or gross negligence.
Confidentiality and data protection
We keep access details, findings and reports confidential and use them only to deliver the agreed service. Where we process personal data on your behalf while working in your systems, we act as your processor under a data processing agreement concluded before access is granted. The privacy information explains how this website handles data.
Changes, governing law and disputes
We may update these terms for future orders. The version in force when you order applies to that engagement. These terms are governed by the laws of the Republic of Lithuania. We first try to resolve any dispute in good faith by email; unresolved disputes are settled by the competent courts of the Republic of Lithuania.
Service provider
MB Programų sprendimai
Švitrigailos g. 11K-109, LT-03228 Vilnius, Lithuania
Registration: 304418651; VAT LT100011452314
hello@patchresponse.com
Last updated: 22 October 2026.