ThetaSecurity is operated under the corporate framework of CODES LTD. All rights reserved.
Orders
An order is a request for provisioning or for a hardening engagement. Submitting the portal locks an invoice. It does not, by itself, mean a device has been sourced or that payment has arrived. CODES LTD confirms the request on the contact channel you provided.
Prices
The complete hardened device package is priced by Pixel model and storage. Pixel 8 with 128 GB is $1,365.60. Each later generation and each larger storage tier is priced above that floor. The amount on the invoice is the published price of the configuration you selected. The professional security and hardening service is $599.00 and does not include hardware. If a storage tier is not manufactured for the model you chose, we tell you before any payment is treated as final and we do not keep the higher figure for a smaller device. Custom system work, including a forked build, is quoted separately and is not included in either published price.
Payment
Invoices can be settled in Monero (XMR), Bitcoin (BTC), or Tether (USDT). Prices are denominated in US dollars. USDT invoices are requested 1:1 with the dollar price. For Monero and Bitcoin, you send the market equivalent of the dollar price. Network fees are yours. Theta does not operate an exchange or a card processor.
When automatic collection is on, the invoice shows an address and an exact coin amount issued for that invoice by NOWPayments, a third-party cryptocurrency payment processor. The coin amount is calculated by that processor when the request is issued. The invoice is marked paid when the processor reports the transfer as confirmed. A request can expire. Reloading the invoice issues a new one. Send the exact amount shown. An underpayment is held as partial until the difference arrives or CODES LTD resolves it with you.
Otherwise, a treasury address is shown on an invoice only when CODES LTD has bound one to that asset, and the coordinates are returned on your contact channel when it has not. An invoice reference is not proof of payment. Work starts after settlement is confirmed.
Send the asset you selected, on the network named for that invoice. A transfer on the wrong network can be unrecoverable. That risk stays with the sender.
Device checks
A check with the IMEI and the purchase code is free. The purchase code is the warranty credential. When it matches a record that still has warranty, warranty and free support follow that record. Marking the purchase code as missing starts an IMEI-only check at $3.99. That fee pays for the answer, including an answer of no record. It does not create a warranty, and it does not include free support. The check runs once the transfer is confirmed. The IMEI is deleted from the invoice once a verdict is stored.
Devices
Device packages are Google Pixel hardware in the Pixel 8, Pixel 9, Pixel 10, or Pixel 11 series, sourced factory-sealed. Keys are bound in Titan M2 with verified boot left intact. While the image and the keys are written, radios are held down so the provisioning host is the only writer. The boot chain is checked again before the device is handed over. The properties we stand behind are the ones in the threat model: no telemetry, a hardware-checked boot, memory corruption that faults, encrypted sessions, and an order record that is not a dossier. They are properties of the build. They are not a claim that every future bug, or every later action by the holder, is already defeated.
Service-only work
The hardening service covers auditing, zero-trust communications setup, and advisory. A client-supplied device remains your property. Remote work is limited to what can be done honestly without physical custody. If the device needs to be in the room, we say so.
What we do not promise
Hardening closes known classes of risk: setup-time radio staging, a broken boot chain, naive memory corruption, readable carrier media, and vendor telemetry. It is not a claim that compromise is impossible, that every future bug is already defeated, or that a determined attacker with physical custody after delivery can do nothing. We will not describe the work as impenetrable.
Lawful use
You are responsible for using the device and the services in line with the law that applies to you. Theta does not provide the fleet or the advisory work for unlawful surveillance or intrusion.
Liability
To the extent the law allows, liability for an order is limited to the amount you paid for that order. CODES LTD is not liable for loss of communications, market movement in a cryptocurrency between invoice and transfer, or a payment sent to the wrong asset or network.
Changes
These terms may be updated on this page. The terms in effect when you lock an invoice apply to that invoice. Questions go through the contact channel on your order.