Terms of Service.
The plain rules for working with NW: what each service includes, what it costs, refunds, and what NW is and isn’t responsible for.
Effective 31 October 2026.
1. Who you are dealing with
These terms are between you and NW Cybersecurity, operated as a sole trader, Hay Al Inara Bloc A, Oujda, Morocco (“NW”). Contact: contact@nwcybersecurity.co. By using the site or ordering a service, you accept these terms.
2. Business services and learner products
The email security services (the guided kit, Done for you and monitoring) are for businesses. By ordering one, you confirm you are acting for business purposes and have authority over the domain concerned.
Ebooks, guides and templates for learners are sold and delivered through NW’s Payhip store, under the terms and refund policy shown at checkout there.
3. The free check and the free report
The free check and the free report are informational. They are based on the public DNS records of your domain at the moment they are read, which can change at any time. They are provided as they are, without any warranty, and are not a full security audit.
4. The guided kit ($39)
- You buy the kit on Payhip, then send the intake form with your order number and domain details.
- NW delivers your personalized records and step by step guide within 2 business days of a complete intake.
- The kit is final once delivered and is not refundable after delivery. If NW can’t deliver it, you get a full refund.
- You apply the changes yourself, at your own risk. Following the staged plan in the guide is strongly recommended.
5. Done for you ($149)
Scope. One domain, and the email sending services you list at booking. NW sets up SPF, DKIM and DMARC for those services and takes DMARC in stages to p=reject. Services that start sending as your domain after the job are not included.
Process and timeline. After you book, NW replies within 2 business days to confirm scope and sends a PayPal invoice. Work starts once it is paid and access is in place. The staged rollout usually takes 2 to 4 weeks, because each stage waits for reports to show your real mail passing. About 30 days after reaching enforcement, NW re-checks the domain once and fixes anything within the original scope.
Your part. Give the least access the job needs (for example a DNS token limited to your one domain), list your sending services accurately, and reply to questions in reasonable time. If NW gets no reply from you for 30 days, the job is closed and the work done so far stands.
Refunds. Full refund if you cancel before work starts. After work starts, there is no refund, unless NW fails to deliver the agreed scope. In that case NW either completes the work or refunds you.
6. Monitoring ($19 a month)
- Billing. Billed monthly in advance through PayPal, or by invoice. Monitoring starts when it is activated and renews automatically each month.
- Cancelling. Cancel any time in PayPal or by emailing NW. Cancellation takes effect at the end of the month already paid, and partial months are not refunded.
- Failed payments. If a payment fails, monitoring pauses until it is paid.
- Price changes. Prices only change with at least 30 days’ notice by email, and you can cancel before the new price applies.
- Included. Regular checks of your SPF, DKIM and DMARC records, review of your DMARC reports, an alert when something changes or starts failing, and a monthly summary.
- Not included. Incident response, mailbox or account security, and lookalike domains (addresses that only resemble yours, which DMARC can’t stop).
- When it ends. NW removes its report authorization record, stops processing your reports, and tells you how to update the report address (rua) in your DMARC record.
7. Access and security
NW never asks for passwords. Access is through scoped tokens, delegate access or a screen share where you click. NW deletes any token at the end of the job, and you should revoke it on your side too.
8. What NW can’t promise
Email authentication makes it much harder to send mail that fakes your domain, but NW can’t guarantee that every impersonation stops, or that your messages will land in the inbox. Mailbox providers make their own decisions. Lookalike domains and compromised accounts are not covered by SPF, DKIM or DMARC.
9. Liability
To the extent the law allows, NW’s total liability for any claim about a service is limited to the fees you paid for that service in the 12 months before the claim, and NW is not liable for indirect or consequential losses, such as lost profit or lost data. Nothing in these terms limits liability that can’t be limited by law.
10. Law and disputes
These terms are governed by the law of Morocco. If something goes wrong, email NW first, and both sides will try in good faith to settle it that way. If that fails, the courts of Oujda, Morocco have jurisdiction.
11. Changes
NW may update these terms. The version that applies to an order is the one posted when you placed it. Changes affecting active monitoring customers are sent by email at least 30 days ahead.