Legal Notice.

This website is published by Eshay Ltd., a company incorporated under the laws of the State of Israel.

• Company name: Eshay Ltd.
• Registered office: Aba Even 10, Jerusalem, Israel
• Company registration number: 516252525
• General enquiries: contact @ eshay-advisory.com

Eshay Ltd. provides cybersecurity advisory, security engineering, assurance and proprietary security software under the Eshay Advisory name.

Registered office — Israel
Aba Even 10
Jerusalem
Israel

Jerusalem contact
Gan HaTechnologia (Malha)
1 Agoudat Sport Hapoal
Jerusalem
Israel
+972 52 389 26 56

This website is hosted by:

• Hosting provider: Société OVH
• Registered office: 140, quai du Sartel 59100 - ROUBAIX FRANCE
• Server location: France

Hosting and infrastructure providers may retain technical information where necessary to operate, secure and maintain their services, subject to their own legal obligations.

This website provides information about Eshay Advisory, its services, products, methodology, research and career opportunities.

It is intended primarily for organisations, professional clients, prospective clients, partners and candidates.

No advisory engagement, contractual relationship or professional duty arises solely from visiting this website, submitting a form or exchanging preliminary correspondence with us.

Commercial engagements are governed exclusively by the written terms agreed between Eshay Ltd. and the relevant client.

Unless otherwise stated, this website and its original content — including its design, text, visual identity, diagrams, interfaces, iconography and software — are owned by or licensed to Eshay Ltd.

No part of the site may be reproduced, adapted, translated, distributed or made available to the public without prior written permission, except where permitted by applicable law.

Short quotations may be used for commentary, research, teaching or news reporting where the source is clearly attributed and the use is fair and proportionate.

DevSec Champions, Threat Sentinel and AgentForce Shield are proprietary products of Eshay Ltd.

Third-party names, trademarks and logos remain the property of their respective owners. Their use on this website is descriptive only and does not imply endorsement, certification, partnership or affiliation unless expressly stated.

You may use this website only for lawful purposes and in a way that does not interfere with its security, integrity or availability.

You must not:

• attempt to gain unauthorised access to the site, its systems or its underlying infrastructure;
• introduce malicious code or attempt to bypass security controls;
• disrupt, overload or degrade the availability of the service;
• access, collect or extract information by automated means in a way that places an unreasonable load on the service or reproduces a substantial part of it;
• use the site in a way that infringes the rights of Eshay Ltd. or any third party.

Good-faith security research is governed by the vulnerability disclosure section below.

Our processing of personal information through this website is described in our Privacy Policy.

Our use of cookies, Google Analytics, Google reCAPTCHA and similar technologies is described in our Cookie Policy.

Questions or requests relating to personal information may be sent to privacy@eshay-advisory.com .

We welcome responsible security research.

If you discover a vulnerability affecting this website or one of our products, report it to security@eshay-advisory.com .

Please include, where possible:

• a clear description of the issue;
• the affected page, product, service or component;
• steps required to reproduce the issue;
• the potential impact;
• your contact details if you would like a reply.

We ask researchers to:

• act in good faith;
• test only systems they are lawfully authorised to access;
• access only the minimum information necessary;
• avoid altering, deleting or exfiltrating data;
• avoid social engineering and denial-of-service testing;
• avoid disrupting our services or those of our clients;
• give us a reasonable period to investigate and remediate before making information public;
• stop testing if we ask them to do so.

Client environments and third-party services used by Eshay Ltd. are outside scope unless we expressly confirm otherwise in writing.

We aim to acknowledge valid reports within 48 hours and provide an initial assessment within five business days.

We will not initiate legal action against researchers for accidental, good-faith violations of this policy where they respect its scope, avoid harm and cooperate with our investigation. This commitment does not authorise access to client systems or third-party infrastructure.

We do not currently operate a paid bug bounty program.

We take reasonable care to keep this website available, accurate and secure. However, access may be interrupted for maintenance, upgrades, incident response or reasons outside our control.

The information published here is provided for general informational purposes. It does not constitute a security assessment, legal opinion or professional advice applicable to a specific organisation or environment.

Although we seek to keep the content accurate and current, we do not guarantee that every page is complete, error-free or suitable for a particular purpose.

To the extent permitted by applicable law, Eshay Ltd. shall not be liable for indirect, incidental or consequential loss arising from the use of, or inability to use, this website.

Nothing in this notice excludes or limits liability that cannot lawfully be excluded or limited.

Links to third-party websites are provided for convenience. Eshay Ltd. does not control those websites and is not responsible for their content, availability, security or privacy practices.

Unless mandatory law provides otherwise, this legal notice and the use of this website are governed by the laws of the State of Israel.

Any dispute relating solely to this website shall be subject to the exclusive jurisdiction of the competent courts of Jerusalem, Israel.

Commercial engagements entered into with Eshay Ltd. remain governed by the contractual terms agreed with each client.

General legal enquiries may be sent to contact@eshay-advisory.com .

The current version of this notice is 2.0, dated 2 July 2026.