PLEASE READ CAREFULLY BEFORE ACCESSING ANY SERVICES FROM THIS WEBSITE.
This agreement is a legal agreement between you (the "Customer") and EXPLOITR LIMITED (CRN: 15939324) whose registered office is at Bradbury House, Mission Court, Newport, Gwent, NP20 2DW ("Exploitr"), whereby Exploitr has agreed to provide and the Customer has agreed to take and pay for the Services, subject to the terms and conditions of this agreement.
The definitions and rules of interpretation in this clause apply in this agreement.
Advanced Services: the advanced subscription services, as more particularly described in the Documentation.
Assets: means any business asset including, but not limited to, IP addresses, systems, hostnames, subdomains, domains, cloud storage, applications, cloud accounts (Azure, AWS, Google Cloud Platform, etc.), user accounts, email addresses, etc. that would be used for the purposes of recording Output Data within the Software, scanning, or automations.
Attack Surface Center: the online platform provided by Exploitr as part of the Services.
Authorised Users: those employees, agents and independent contractors of the Customer who are authorised by the Customer to use the Services and the Documentation.
Automation: means any automated feature or functionality within the Services, beyond Scanning, that allows the Customer to perform tasks related to the management, monitoring, analysis, or reporting of Assets. This may include, but is not limited to, automated data collection, automated report generation, automated alerting, automated configuration checks, and automated integration with other systems.
Business Day: a day other than a Saturday, Sunday or public holiday in England when banks in London are open for business.
Confidential Information: means all confidential information (however recorded or preserved) disclosed by a party or its Representatives (as defined below) to the other party and that party's Representatives after the date of this agreement in connection with this agreement, including but not limited to: (i) the existence and terms of this agreement; (ii) any information that would be regarded as confidential by a reasonable business person relating to (A) the business, assets, affairs, customers, clients, suppliers, or plans, intentions, or market opportunities of the disclosing party and (B) the operations, processes, product information, know-how, designs, trade secrets or software of the disclosing party; (iii) any information developed by the parties in the course of carrying out this agreement.
Customer Data: the data inputted by the Customer, Authorised Users, or Exploitr on the Customer's behalf for the purpose of using the Services or facilitating the Customer's use of the Services.
Data Protection Legislation: means (i) to the extent the UK GDPR applies, the law of the United Kingdom or of a part of the United Kingdom which relates to the protection of personal data; and (ii) to the extent the EU GDPR applies, the law of the European Union or any member state of the European Union to which Exploitr is subject, which relates to the protection of personal data.
Documentation: the document made available to the Customer by Exploitr online via https://exploitr.com/pricing/ or such other web address notified by Exploitr to the Customer from time to time which sets out a description of the Services and the user instructions for the Services.
Effective Date: as defined in clause 2.5.
Enterprise Services: the enterprise subscription services, as more particularly described in the Documentation.
EU GDPR: the General Data Protection Regulation ((EU) 2016/679).
Force Majeure Event: means any circumstance not within a party's control including: (i) acts of God, flood, drought, earthquake, or other natural disaster; (ii) epidemic or pandemic; (iii) terrorist attack, civil war, civil commotion or riots, war, threat of or preparation for war, armed conflict, imposition of sanctions, embargo, or breaking off of diplomatic relations; (iv) nuclear, chemical or biological contamination or sonic boom; (v) any law or action taken by a government or public authority, including imposing an export or import restriction, quota or prohibition; (vi) collapse of buildings, fire, explosion or accident; (vii) any labour or trade dispute, strikes, industrial action or lockouts (other than by the staff of the party seeking to rely on clause 16 or those of its subcontractors; (ix) non-performance by suppliers or subcontractors; and (x) interruption or failure of utility service.
Initial Subscription Term: the initial term of this agreement as selected by the Customer on the Website at the time of purchasing the Services.
Normal Business Hours: 8.00 am to 6.00 pm local UTC, each Business Day.
Output Data: the data or information in whatever form, provided by Exploitr or made available to the Customer, in the course of providing the Services (excluding any Customer Data).
Platform: the online platform 'Attack Surface Center' provided by Exploitr as part of the Services.
Renewal Period: the period described in clause 15.1.
Representatives: means in relation to a party, its employees, officers, contractors, subcontractors, representatives and advisers.
Scanning: means any automated process or feature within the Software used to systematically interact with and analyse Assets for the purpose of identifying their configuration, status, potential vulnerabilities, performance characteristics, or other relevant data. This includes, but is not limited to, the examination of systems, networks, applications, and cloud environments (such as AWS, Azure, or Google Cloud Platform) to detect open ports, services, misconfigurations, vulnerabilities, compliance deviations, or other points of interest.
Service Modification: as defined in clause 6.10.
Services: the subscription services (being the Standard, Advanced or Enterprise Services) provided by Exploitr to the Customer under this agreement via the Website or any other website notified to the Customer by Exploitr from time to time, as more particularly described in the Documentation. For the avoidance of doubt, the Standard Services are the lowest-tier services and the Enterprise Services are the highest-tier services.
Software: the online software applications provided by Exploitr as part of the Services.
Standard Services: the standard subscription services, as more particularly described in the Documentation.
Subscription Fees: the subscription fees payable by the Customer to Exploitr for the User Subscriptions, as made available to the Customer on the Website.
Subscription Term: has the meaning given in clause 15.1 (being the Initial Subscription Term together with any subsequent Renewal Periods).
Trial: has the meaning given in clause 3.1.
Trial Effective Date: has the meaning given in clause 3.3.
Trial Period: has the meaning given clause 3.4.
UK GDPR: has the meaning given in section 3(10) (as supplemented by section 205(4)) of the Data Protection Act 2018.
User Subscriptions: the user subscriptions purchased by the Customer entitle Authorised Users to access and use the Services and the Documentation in accordance with this agreement.
UTC: co-ordinated universal time.
Virus: any thing or device (including any software, code, file or programme) which may: prevent, impair or otherwise adversely affect the operation of any computer software, hardware or network, any telecommunications service, equipment or network or any other service or device; prevent, impair or otherwise adversely affect access to or the operation of any programme or data, including the reliability of any programme or data (whether by re-arranging, altering or erasing the programme or data in whole or part or otherwise); or adversely affect the user experience, including worms, trojan horses, viruses and other similar things or devices.
Vulnerability: a weakness in the computational logic (for example, code) found in software and hardware components that when exploited, results in a negative impact to the confidentiality, integrity, or availability, and the term Vulnerabilities shall be interpreted accordingly.
Website: means Exploitr's website which can be accessed at https://exploitr.com/ or https://exploitr.io, or such other website as notified to the Customer by Exploitr from time to time.
Clause, schedule and paragraph headings shall not affect the interpretation of this agreement.
A person includes an individual, corporate or unincorporated body (whether or not having separate legal personality) and that person's legal and personal representatives, successors or permitted assigns.
A reference to a company includes any company, corporation or other body corporate, wherever and however incorporated or established.
Unless the context otherwise requires, words in the singular includes the plural and in the plural includes the singular.
Unless the context otherwise requires, a reference to one gender includes a reference to the other genders.
A reference to a statute or statutory provision is a reference to it as amended, extended or re-enacted from time to time and a reference to a statute or statutory provision includes all subordinate legislation made from time to time.
A reference to writing or written excludes fax but not email.
The terms and conditions in this agreement apply to the order by the Customer and supply of the Services by Exploitr to the Customer (this "agreement"). These terms and conditions apply to the exclusion of any other terms that the Customer seeks to impose or incorporate, or which are implied by law, trade custom, practice or course of dealing.
The Customer will be able to place an order for the Services by following the onscreen prompts on the Website. The Customer may only submit an order using the method set out on the Website. Each order is an offer by the Customer to buy the Services specified in the order, subject to the terms and conditions of this agreement.
The Services are intended for use by businesses located within the United Kingdom. By registering for an account and accessing or using the Services, the Customer represents and warrants that it is located within the United Kingdom. Exploitr reserves the right to reject the order, or suspend or terminate the account of, any Customer that it reasonably believes is located outside of the United Kingdom. The Customer agrees not to misrepresent its location or use any means to circumvent this geographic restriction.
The Customer is responsible for ensuring that the order is complete and accurate. Therefore, the Customer must check the order carefully before confirming it.
Exploitr's acceptance of the order takes place when Exploitr sends an email to the Customer confirming the same or the Customer is granted access to the Services (whichever occurs first) at which point and on which date, the agreement between Exploitr and the Customer will come into existence ("Effective Date").
Exploitr's Website (as amended from time to time) may give the Customer the opportunity to request a free trial to access and use the Services ("Trial") subject to the terms of this Agreement.
A Customer may, via the Website, request a Trial.
Exploitr's acceptance of the Trial request takes place when Exploitr sends an email to the Customer confirming the same or the Customer is granted access to the Services (whichever occurs first) at which point and on which date, the agreement between Exploitr and the Customer will come into existence ("Trial Effective Date").
The Trial shall commence on the Trial Effective Date and shall continue, unless terminated early in accordance with clause 15, for a fixed period of 7 days ("Trial Period"), after which the Customer's access shall automatically terminate, unless the Customer purchases a subscription, in accordance with clause 2.
If the Customer is granted a Trial, the Customer will be granted a single User Subscription for the duration of the Trial Period.
Clauses 2, 5, 10, 15.1 and 15.3(a) of this Agreement shall not apply to Customers who request a Trial.