Terms of Service

1. Acceptance of Terms

By creating an account or using the Service, you confirm that you are at least 18 years old, have the authority to bind yourself or your organization to these Terms, and agree to comply with all applicable laws and regulations. If you are accepting on behalf of a company or other legal entity, you represent that you have the authority to do so.

2. Description of Service

Vulnaguard Sentinel is a software-as-a-service (SaaS) platform that helps government contractors and other organizations analyze vulnerability scan results and map findings to cybersecurity compliance frameworks including CMMC Level 2, NIST 800-171, SOC 2, FedRAMP, and others.

The Service generates compliance documentation, gap analyses, Plans of Action and Milestones (POA&Ms), and System Security Plans (SSPs) based on data you provide. The Service is a tool to assist your compliance efforts and does not constitute legal, regulatory, or professional advice. You remain solely responsible for your compliance with applicable laws and regulations.

3. Account Registration

You must register for an account to use most features of the Service. You agree to:

• Provide accurate, current, and complete registration information
• Maintain and promptly update your account information
• Keep your password confidential and not share it with others
• Notify us immediately of any unauthorized use of your account
• Accept responsibility for all activities that occur under your account

We reserve the right to suspend or terminate accounts that violate these Terms or that we determine, in our sole discretion, are being used fraudulently or harmfully.

4. Subscriptions and Payment

Certain features of the Service require a paid subscription. By subscribing, you agree to:

• Pay all applicable fees as described on our pricing page
• Authorize us to charge your payment method on a recurring basis
• Provide accurate and complete billing information

Subscriptions automatically renew unless cancelled before the renewal date. Fees are non-refundable except as required by applicable law or as expressly stated in these Terms. We reserve the right to modify pricing with 30 days' notice to active subscribers.

5. Your Data and Content

You retain ownership of all data, files, and content you upload to the Service ("Customer Data"). By uploading Customer Data, you grant Vulnaguard a limited, non-exclusive license to process that data solely for the purpose of providing the Service to you.

You represent and warrant that you have all necessary rights to upload Customer Data and that doing so does not violate any applicable law, regulation, or third-party rights.

We will not access, use, or disclose your Customer Data except as necessary to provide the Service, comply with legal obligations, or as described in our Privacy Policy.

6. Acceptable Use

You agree not to use the Service to:

• Violate any applicable law, regulation, or third-party rights
• Upload malicious code, viruses, or other harmful software
• Attempt to gain unauthorized access to the Service or other users' accounts
• Reverse engineer, decompile, or disassemble any part of the Service
• Scrape or systematically extract data from the Service without authorization
• Interfere with or disrupt the integrity or performance of the Service
• Impersonate any person or entity, or falsely represent your affiliation
• Share your account credentials or allow others to access the Service through your account (beyond licensed seats)

7. Intellectual Property

The Service, including all software, algorithms, models, designs, text, graphics, and other content created by Vulnaguard, is owned by Vulnaguard and protected by copyright, trademark, and other intellectual property laws.

We grant you a limited, non-exclusive, non-transferable, revocable license to access and use the Service for your internal business purposes during your subscription term. You may not sublicense, sell, resell, or otherwise transfer this license.

8. Compliance Disclaimer

Vulnaguard Sentinel is designed to assist — not replace — your compliance program. Important limitations include:

• Output from the Service is not a guarantee of compliance with CMMC, NIST 800-171, SOC 2, FedRAMP, or any other framework
• Certifications and authorizations must be obtained through official channels (e.g., accredited C3PAOs for CMMC)
• Vulnaguard Sentinel is not affiliated with the U.S. Department of Defense, CMMC Accreditation Body, NIST, or any other government agency
• You should seek qualified legal, security, and compliance counsel for matters requiring professional judgment

9. Confidentiality

Each party agrees to keep confidential any non-public information of the other party disclosed in connection with the Service ("Confidential Information") and to use it only for the purpose of performing obligations or exercising rights under these Terms. Confidential Information does not include information that is publicly available, already known to the receiving party, or independently developed without reference to the disclosing party's information.

10. Disclaimer of Warranties

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND ACCURACY. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS.

11. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, VULNAGUARD SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING LOST PROFITS, LOST DATA, LOSS OF GOODWILL, OR COST OF SUBSTITUTE SERVICES, ARISING FROM OR RELATED TO YOUR USE OF THE SERVICE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. VULNAGUARD'S TOTAL AGGREGATE LIABILITY TO YOU SHALL NOT EXCEED THE GREATER OF (A) THE AMOUNT YOU PAID TO VULNAGUARD IN THE 12 MONTHS PRECEDING THE CLAIM OR (B) ONE HUNDRED U.S. DOLLARS ($100).

12. Indemnification

You agree to indemnify, defend, and hold harmless Vulnaguard, its officers, directors, employees, agents, and licensors from and against any claims, liabilities, damages, judgments, awards, losses, costs, or expenses (including reasonable attorneys' fees) arising out of or related to your violation of these Terms, your use of the Service, or your Customer Data.

13. Termination

Either party may terminate these Terms at any time. You may terminate by cancelling your account. We may terminate or suspend your access immediately, without prior notice, for conduct that we determine violates these Terms or is harmful to other users, us, or third parties.

Upon termination, your right to use the Service will cease immediately. We will retain your Customer Data for 90 days following termination, after which it will be deleted. Provisions that by their nature should survive termination will do so, including ownership provisions, warranty disclaimers, indemnity, and limitations of liability.

14. Governing Law and Disputes

These Terms are governed by the laws of the State of Delaware, without regard to its conflict-of-law provisions. Any dispute arising from these Terms or the Service shall be resolved through binding arbitration under the rules of the American Arbitration Association, conducted in English. You waive any right to participate in a class-action lawsuit or class-wide arbitration. Nothing herein prevents either party from seeking emergency injunctive relief in a court of competent jurisdiction.

15. Changes to These Terms

We reserve the right to modify these Terms at any time. We will provide at least 30 days' notice of material changes via email or a prominent notice within the Service. Your continued use of the Service after the effective date of the revised Terms constitutes your acceptance. If you do not agree to the changes, you must stop using the Service and cancel your account.

16. Contact Us

If you have questions about these Terms, please contact us at: