End User License Agreement

1. Definitions

• "Software" means the SentriKat vulnerability management application, including all components, documentation, updates, and patches provided under this Agreement.
• "License Key" means the unique activation key provided to the Licensee upon purchase that enables the licensed features of the Software.
• "Demo Edition" (also marketed as "DEMO") means the free, feature-limited version of the Software.
• "Pro Edition" (also marketed as "PRO") means the paid version of the Software with expanded features and limits.
• "Organization" means a single legal entity (company, institution, or individual) and its subsidiaries or affiliates that share the same license.
• "Agent" means a SentriKat agent instance deployed within the Licensee's infrastructure for data collection purposes.
• "License Server" means the server operated by the Licensor at license.sentrikat.com for the purpose of license validation.

2. Licensor

3. License Grant

3.1 Grant of License

Subject to your compliance with the terms of this Agreement and payment of the applicable license fees, the Licensor grants you a perpetual, non-exclusive, non-transferable, non-sublicensable license to install and use the Software in accordance with the edition and tier purchased.

3.2 Scope of License

• Per-organization license: One (1) license entitles one (1) Organization to one (1) installation of the Software.
• Edition tiers: The licensed features, user limits, and agent limits are determined by the edition purchased (Demo or Pro), as described on the SentriKat website at the time of purchase.
• On-premises only: The Software is licensed for installation on the Licensee's own infrastructure. The Licensee may not offer the Software as a hosted or cloud service to third parties.

3.3 Demo Edition

The Demo Edition is provided free of charge with reduced feature limits. It is intended primarily for evaluation and testing purposes. It is subject to the same restrictions in Section 4 of this Agreement but does not require a paid license or License Key.

• The Demo Edition is provided "AS IS" without any warranty, service-level agreement, or support obligation of any kind.
• The Licensor assumes no liability for any damages, data loss, service disruption, or security incidents arising from the use of the Demo Edition. The Licensee deploys and operates the Demo Edition entirely at its own risk.
• The Licensor is under no obligation to provide updates, security patches, bug fixes, or technical support for the Demo Edition.
• The Licensee is solely responsible for evaluating the suitability of the Software for its intended use before deploying it in any environment.
• The Licensor reserves the right to modify, limit, or discontinue the Demo Edition at any time without notice.

4. Restrictions

You may NOT:

• Reverse engineer, decompile, or disassemble the Software, except to the extent expressly permitted by applicable mandatory law.
• Redistribute, sublicense, rent, lease, or resell the Software or License Keys to any third party.
• Modify, adapt, or create derivative works based on the Software.
• Remove, alter, or obscure any proprietary notices, labels, or license verification mechanisms in the Software.
• Circumvent or disable the license verification system or any technical protection measures.
• Use the Software to provide services to third parties (e.g., as a managed service, SaaS offering, or service bureau) without a separate Hosted Service license from the Licensor.
• Transfer the license to another organization without prior written consent from the Licensor.
• Use the Software to develop a competing product.

5. Intellectual Property

5.1 Ownership

The Software, including all source code, object code, documentation, designs, and trademarks, is and shall remain the exclusive property of the Licensor. This Agreement does not grant you any ownership rights in the Software. All rights not expressly granted herein are reserved by the Licensor.

5.2 Customer Data

The Licensee retains all rights, title, and interest in any data entered into, generated by, or stored within the Licensee's SentriKat installation ("Customer Data"). The Licensor claims no ownership of Customer Data and has no access to it.

6. License Verification

6.1 Heartbeat Mechanism

The Software periodically contacts the Licensor's License Server (license.sentrikat.com) to validate the License Key and verify compliance with the licensed tier. This heartbeat occurs approximately every 24 hours.

6.2 Data Transmitted

The following data is transmitted during license validation and activation:

• License Key and Installation ID
• SentriKat version installed
• Number of active agents and/or assets (for tier validation)
• Server hostname and operating system information (at activation only, for license binding and support)

The server IP address and HTTP user-agent of the SentriKat installation are recorded in connection logs for security and abuse prevention. No vulnerability data, user accounts, LDAP data, configuration, or any other Customer Data is sent to the Licensor.

6.3 Knowledge Base Contributions (PRO Edition)

PRO Edition installations may transmit locally discovered CPE (Common Platform Enumeration) vendor/product mapping patterns to the Licensor's central knowledge base. These contributions contain only:

• Standardized software vendor and product name patterns (e.g., "apache" → "http_server")
• The pseudonymized Installation ID of the contributing installation
• A confidence score for the mapping accuracy

These contributions do not include vulnerability scan results, software inventories, or any Customer Data. Contributions are published to other users only after 3 or more independent installations confirm the same mapping. This mechanism improves vulnerability matching accuracy for all SentriKat users.

6.4 Verification Failure

If the Software is unable to verify the license (e.g., due to network unavailability, expired license, or license violation), it may operate in a degraded mode with functionality limited to the Demo Edition feature set. The Licensee is responsible for ensuring network connectivity to the License Server.

7. Warranty Disclaimer

THE SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. THE LICENSOR DOES NOT WARRANT THAT THE SOFTWARE WILL BE ERROR-FREE, UNINTERRUPTED, OR FREE OF VULNERABILITIES, OR THAT IT WILL MEET THE LICENSEE'S SPECIFIC REQUIREMENTS.

The Licensee acknowledges that the Software is a vulnerability management tool and that its use does not guarantee the security of the Licensee's infrastructure. The Licensee remains solely responsible for its own security posture.

8. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW:

• THE LICENSOR SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, LOSS OF DATA, BUSINESS INTERRUPTION, LOSS OF GOODWILL, OR COST OF PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES.
• THE LICENSOR'S TOTAL AGGREGATE LIABILITY UNDER THIS AGREEMENT SHALL NOT EXCEED THE LICENSE FEE ACTUALLY PAID BY THE LICENSEE FOR THE SOFTWARE.

These limitations apply regardless of the cause of action (contract, tort, strict liability, or otherwise) and even if the Licensor has been advised of the possibility of such damages. Nothing in this Agreement excludes or limits liability for death or personal injury caused by negligence, fraud, or any other liability that cannot be excluded under applicable law.

9. Maintenance and Support

9.1 Maintenance Contract

An annual maintenance and support contract is available as an optional add-on, purchased separately from the license. The maintenance contract includes:

• Software updates and new feature releases
• Security patches and bug fixes
• Email-based technical support

9.2 Exclusions

The maintenance contract does NOT include:

• Custom development or feature requests
• On-site support or consulting
• Phone support
• Support for modified or altered versions of the Software
• Support for issues caused by third-party software or the Licensee's infrastructure

9.3 Without Active Maintenance

If the Licensee does not have an active maintenance contract, the Licensee may continue to use the current installed version of the Software indefinitely (the license is perpetual), but will not receive software updates, security patches, or technical support.

10. Termination

10.1 License Duration

The license granted under this Agreement is perpetual, meaning it does not expire, unless terminated in accordance with this Section.

10.2 Termination by Licensor

The Licensor may terminate this Agreement immediately upon written notice if the Licensee:

• Breaches any term of this Agreement and fails to cure such breach within 30 days of written notice
• Attempts to circumvent or disable the license verification system
• Redistributes, sublicenses, or resells the Software or License Keys
• Uses the Software in a manner that violates applicable law

10.3 Termination by Licensee

The Licensee may terminate this Agreement at any time by ceasing all use of the Software and destroying all copies in its possession.

10.4 Effect of Termination

Upon termination of this Agreement:

• All rights granted under this Agreement cease immediately
• The Licensee must uninstall the Software and destroy all copies (including backups) in its possession or control
• The Licensee must certify in writing, upon request, that all copies have been destroyed
• Sections 5 (Intellectual Property), 7 (Warranty Disclaimer), 8 (Limitation of Liability), and 11 (Governing Law) shall survive termination

11. Governing Law and Jurisdiction

This Agreement shall be governed by and construed in accordance with the substantive laws of Switzerland, excluding the United Nations Convention on Contracts for the International Sale of Goods (CISG) and any conflict of law provisions.

Any disputes arising out of or in connection with this Agreement shall be subject to the exclusive jurisdiction of the courts of Bellinzona, Canton of Ticino, Switzerland.

12. Export Compliance

The Licensee agrees to comply with all applicable export control laws and regulations, including Swiss and EU export regulations. The Licensee shall not export or re-export the Software to any country, entity, or person prohibited by applicable law.

13. Severability

If any provision of this Agreement is found to be invalid, illegal, or unenforceable by a court of competent jurisdiction, the remaining provisions shall remain in full force and effect. The invalid provision shall be modified to the minimum extent necessary to make it valid and enforceable while preserving the original intent of the parties.

14. Entire Agreement

This Agreement constitutes the entire agreement between the Licensor and the Licensee with respect to the Software and supersedes all prior or contemporaneous oral or written agreements, representations, or understandings regarding the Software. This Agreement may only be modified in writing signed by both parties.

15. Contact

For questions about this End User License Agreement, please contact: