Legal Documents
Contract Documents
Agreements
The Master Terms and Conditions, Order Form, Data Protection Agreement (as applicable), Service Descriptions (including dependencies and assumptions) (as applicable), Trustwave End User License Agreement (as applicable), third party end user license agreements (as applicable), and any non-disclosure agreement executed between the parties, will apply to the services you purchase from Trustwave.
- (PDF) Trustwave Master Terms and Conditions
- (PDF) Trustwave EMEA Master Terms and Conditions
- (PDF) Data Protection Agreement
- (PDF) Trustwave End User License Agreement (EULA)
Service Descriptions
The following service descriptions will apply to the Trustwave services under the categories below purchased through the Trustwave Order Form. Trustwave Services are categorized into Managed Security Services (MSS), Global Compliance and Risk Services (GCRS), Non-Managed Services, SpiderLabs Services, Cyber Security Education Services and Third Party Product (TPP) Implementation and Support Services. Client understands and agrees that each category of services will have a set of dependencies and assumptions that equally apply to all services under that category.
Managed Security Services (MSS)
Global Compliance and Risk Services (GCRS)
Non-Managed Services
SpiderLabs Services
Digital Forensics and Incident Response (DFIR) Services
Cyber Security Education Services
Third Party Product (TPP) Implementation and Support Services
Managed Security Services (MSS)
- (PDF) MSS Transition Service
- (PDF) Managed 3rd Party SOC & Security Monitoring
- (PDF) Managed 3rd Party Vulnerability Scanning
- (PDF) Managed Application Control (MAC)
- (PDF) Managed Detection and Response Essential (MDR Essential)
- (PDF) Managed Detection and Response Complete (MDR Complete)
- (PDF) Managed Secure Email Gateway Cloud (SEG)
- (PDF) Managed Secure Web Gateway (Not Cloud)
- (PDF) Managed Secure Web Gateway Cloud (SWG)
- (PDF) Managed Security and Compliance (MSC)
- (PDF) Managed Security and Compliance (MSC) – Compliance Essentials
- (PDF) Managed Security and Compliance (MSC) – P2PE
- (PDF) Threat Detection and Response: Managed Detection
- (PDF) Security and Compliance Monitoring
- (PDF) Security Services for Cloud Access Security Broker (CASB)
- (PDF) Security Services for Secure Web Gateway (SWG)
- (PDF) Proactive Threat Hunting
- (PDF) Information Security Advisor (ISA)
- (PDF) Client Success Manager (CSM)
- (PDF) Managed DbProtect
Security Technology Management Services
To the extent that Client purchases Security Technology Management Services, the main “Security Technology Management” service description will apply.
- (PDF) Security Technology Management (On Premise/Hybrid)
- (PDF) Security Technology Management (Cloud)
The following addenda to the main "Security Technology Management" service description should also apply for any relevant supported solutions purchased by Client.
- (PDF) IDPS/NGFW Solution
- (PDF) Endpoint Protection Solution
- (PDF) Multi Factor Authentication (MFA)
- (PDF) Security Technology Management - Cloud WAF Addendum
- (PDF) Security Technology Management - Cloud WAF Addendum (MSS Transition)
- (PDF) Public Cloud Security (IaaS)
Legacy Managed Security Services (MSS)
Global Compliance and Risk Services (GCRS)
Payment Card Industry Data Security Standards (PCI DSS) Services
- (PDF) PCI DSS Readiness Workshop
- (PDF) PCI DSS Readiness Subject Matter Expert (SME) Consulting
- (PDF) PCI DSS Gap Assessment
- (PDF) PCI DSS Remediation Service
- (PDF) PCI DSS Policy and Procedures Service (PPS)
- (PDF) PCI DSS Policy Template
- (PDF) PCI DSS General Consulting
- (PDF) PCI DSS Self-Assessment Consulting
- (PDF) PCI DSS Self-Assessment Validation
- (PDF) PCI DSS Validated Gap Assessment
- (PDF) PCI DSS Compliance Validation Service
- (PDF) PCI Three Domain Secure (3DS) Core Assessment
Payment Application Data Security Standards (PA-DSS) Services
Point-to-Point Encryption (P2PE) Services
- (PDF) Non-listed Encryption Implementation Review (NEIR)
- (PDF) Non-listed Encryption Solution Assessment (NESA)
- (PDF) P2PE Pre Assessment Workshop
- (PDF) P2PE Delta Change Assessment
- (PDF) P2PE Gap Assessment
- (PDF) P2PE Component Assessment
- (PDF) P2PE Solution Assessment
- (PDF) P2PE Designated Change Assessment
- (PDF) P2PE Application Assessment
- (PDF) P2PE Application No-Impact Change Assessment
- (PDF) P2PE General Consulting
Other PCI and Payment Services
- (PDF) PCI PIN Service
- (PDF) PCI Three Domain Secure (3DS) Core Assessment
- (PDF) PCI PIN Gap Assessment
- (PDF) PCI Token Service Provider (TSP) Assessment
- (PDF) APRA CPS 234 Information Security Gap Assessment
- (PDF) Payment Services Directive Gap Assessment
Privacy and Data Protection Services
- (PDF) CCPA Gap Assessment
- (PDF) CCPA General Consulting
- (PDF) Privacy Workshop
- (PDF) Privacy Workshop Subject Matter Expert (SME) Consulting
- (PDF) Privacy Information Security Risk Assessment (P-ISRA)
- (PDF) Privacy Impact Assessment (PIA)
- (PDF) HIPAA Gap Assessment
- (PDF) HIPAA Policy and Procedure Service
- (PDF) HIPAA Risk Assessment
- (PDF) HIPAA Remediation Consulting
Risk Assessment Services
- (PDF) Information Security Risk Assessment (ISRA)
- (PDF) Information Security Risk Assessment (ISRA) Remediation Consulting
- (PDF) International Standards Organization (ISO) Gap Assessment
General Consulting Services
- (PDF) General Consulting
- (PDF) General Consulting – Incident Response Planning
- (PDF) NIST Controls Assessment
- (PDF) Onsite Chief Information Security Officer (Onsite-CISO)
Partner Services
- (PDF) Merchant PCI Compliance Validation Services (Acquirer)
- (PDF) PCI Sponsor View Compliance Validation Service (Self-Managed)
- (PDF) Web Risk Monitoring (WRM)
Non-Managed Services
- (PDF) DbProtect
- (PDF) Detection and Response Consulting (DARC)
- (PDF) Data Loss Prevention – Discover
- (PDF) Endpoint Protection Suite
- (PDF) Extended Validation (EV) SSL Certificate
- (PDF) Licensed SIEM (Non-Managed)
- (PDF) Managed Network Access Control (NAC)
- (PDF) Network Access Control (NAC) Service
- (PDF) Non-Managed Secure Web Gateway
- (PDF) Non-Managed Web Application Firewall
- (PDF) Security Testing for Networks and Applications
- (PDF) Trustwave MyIdentity
- (PDF) Trustwave MODSecurity Rules
- (PDF) Trustwave Secure Email Gateway (Non-Managed)
- (PDF) Trustwave WebMarshal
- (PDF) Web Filtering and Reporting Suite
SpiderLabs Services
Managed Security Testing (MST) Services
Trusted Advisor and Consulting Services
Bespoke Penetration Testing Services
- (PDF) Trustwave SpiderLabs Testing
- (PDF) Active Directory Review
- (PDF) Amazon Web Services
- (PDF) Application Penetration Testing
- (PDF) Application Source Code
- (PDF) Azure Cloud Assessment
- (PDF) ATM Technical Security Review
- (PDF) Embedded Security Assessment
- (PDF) External Network Penetration Testing
- (PDF) Internal Network Penetration Testing
- (PDF) Mobile Application Penetration Testing
- (PDF) Operational Technology Security Assessment
- (PDF) Physical Security Assessment
- (PDF) Purple Teaming
- (PDF) Red Teaming
- (PDF) Segmentation Test Discovery Scan
- (PDF) Social Engineering
- (PDF) Virtualization Technology Assessments
- (PDF) Wireless Penetration Testing
Digital Forensics and Incident Response (DFIR) Services
- (PDF) Comprehensive IR Retainer
- (PDF) Essentials IR Retainer
- (PDF) Standard IR Retainer
- (PDF) Data Exposure
- (PDF) Digital Forensics Investigation
- (PDF) Incident Response Investigation
- (PDF) IR Readiness Program
- (PDF) PCI Forensics Investigation
- (PDF) PFI Lite
Cyber Security Education Services
Security Awareness Education (SAE)
- (PDF) SAE Trustwave Hosted
- (PDF) SAE Client Hosted
- (PDF) SAE Content Updates
- (PDF) SAE Custom Content Development
- (PDF) SAE Translation Service
Secure Development Training (SDT)
- (PDF) SDT Trustwave Hosted
- (PDF) SDT Client Hosted
Third Party Product (TPP) Implementation and Support Services
- (PDF) Carbon Black Response Technology Implementation Service
- (PDF) Carbon Black Technical Support Center Services
- (PDF) Cybereason Technology Implementation Service
- (PDF) DarkTrace Technology Implementation Service
- (PDF) FortiGate Next Generation Firewall Deployment Service
- (PDF) Palo Alto Next Generation Firewall Deployment Service
- (PDF) Palo Alto Technical Support Center Services
- (PDF) Splunk Technical Support Center Services
- (PDF) Splunk Technology Implementation Service
Third Party End User License Agreements
To the extent that Client purchases (i) a third party product or (ii) a service with third party product that is integrated into or used in the provision of services (“Third Party Bundle”), the following end user license agreements (“EULA”) shall apply. Client agrees to be bound by an applicable EULA when purchasing an applicable Third Party Bundle in addition to the terms and conditions between Trustwave and Client.
- Akamai Privacy Policies
- Akamai AUP
- (PDF) Akamai EULA
- (PDF) Carbon Black
- Cisco
- (PDF) Cybereason
- Fortinet
- Netskope
- Palo Alto
- Symantec VIP