Terms of Use

By using thirdpartythreathunting.com you accept these terms. They apply to the public website, the Trust Center, published articles and podcast material, and to booking a course through this site.

They do not replace a Master Services Agreement, Statement of Work, NDA or Data Processing Agreement. Where you have signed one of those with us, it governs the engagement and these terms govern only the website.

Articles, podcast episodes, frameworks, checklists and guidance published on this site are general information about third-party risk, AI risk and cybersecurity. They are written from experience across many organizations, and yours is not one of them.

Nothing here is legal, regulatory, financial or security advice for your organization, and reading it or contacting us does not create a professional or advisory relationship. Do not substitute published material for an assessment of your own circumstances, your own regulatory obligations, or your own contracts.

Site content, training materials, course content, assessment frameworks and the Trust Center are the property of Third Party Threat Hunting LLC or its licensors. Published books are the property of their respective publishers.

• You may quote short extracts with attribution, link to any page here, and use our published frameworks inside your own organization.
• You may not reproduce or deliver our training materials, in whole or in substantial part, or present our course content as your own, without written permission.

If you want to use something here in a way these terms do not cover, ask. The answer is often yes.

Course seats are booked through our payment provider and confirmed by email. Prices are stated at booking. We do not receive or store card numbers — payment is handled entirely by the processor.

Cancellation and transfer terms are stated at the point of booking. Group sessions, private deliveries and advisory engagements are governed by a separate agreement rather than by these terms.

A certificate of completion is issued on completion of the course, stating the title, the date and the contact hours. Courses are CPE-eligible: the contact hours are recognized for continuing professional education by certification bodies that accept self-reported credit, including ISC2 and ISACA, and members submit the certificate to their own body. TPTH™ is not a NASBA Registered Sponsor and does not award NASBA CPE. Where a course is canceled by us, fees are refunded in full.

Please do not attempt to gain unauthorized access to this site or its underlying systems, scrape it at a volume that degrades availability for others, impersonate us, or use this site to distribute unlawful material.

We link to external sites, publishers and booking tools we think are useful. We do not control them and are not responsible for their content, their availability, or their privacy practices.

This site is provided as-is and as-available. We do not guarantee uninterrupted access and we may change or withdraw content at any time. No client engagement depends on this website's availability; if the site is down and you need us, email works.

To the fullest extent permitted by law, Third Party Threat Hunting LLC is not liable for indirect, incidental or consequential loss arising from your use of this website or reliance on its published content.

Nothing in these terms limits or excludes liability that cannot lawfully be limited or excluded, including liability for fraud or for death or personal injury caused by negligence.

How we handle personal data collected through this site is set out in our Privacy Notice. How we handle data entrusted to us under an engagement is set out in the Trust Center and in the relevant Data Processing Agreement.

Third Party Threat Hunting LLC is a limited liability company formed and registered in the District of Columbia. These terms are governed by the laws of the District of Columbia and the applicable federal laws of the United States, without regard to conflict of law principles. Any dispute arising out of your use of this website is subject to the exclusive jurisdiction of the Superior Court of the District of Columbia and the United States District Court for the District of Columbia, and you consent to venue there.

This clause governs the website only. Client engagements, training and certification are governed by the separate signed agreement described at §01, which sets its own governing law — and where that agreement differs from this page, that agreement controls.

If you access this site from outside the United States you do so on your own initiative and are responsible for compliance with your local law. Nothing in this section removes mandatory consumer or data protection rights that apply to you where you live, including rights under the EU General Data Protection Regulation; those rights, and the routes to exercise them, are set out in our Privacy Notice.

We may update these terms. Material changes are reflected in the effective date above and, where they touch the security program, recorded in the Trust Center change log. Continued use of the site after a change means you accept the revised terms.

Privacy and data protection — privacy@thirdpartythreathunting.com
Security and vulnerability reports — security@thirdpartythreathunting.com
Due diligence, NDAs and gated documentation — trust@thirdpartythreathunting.com
Everything else — info@thirdpartythreathunting.com

These addresses are role aliases monitored each business day by the Chief Executive Officer. There is no support queue behind them, and we would rather say so than imply a team that does not exist.