Terms of Use

1. Introduction and Acceptance

These Terms of Use ("Terms") constitute a legally binding agreement between you ("User", "you", or "your") and the applicable Secure Blink entity (as determined by Section 14 of these Terms), governing your access to and use of:

• www.secureblink.com and all associated subdomains;
• ThreatSpy — Secure Blink's AI-powered autonomous application and API security management product (DAST);
• ThreatTrace — Secure Blink's AI-powered IP & Domain Threat Intelligence product;
• Any related software, APIs, documentation, and ancillary services (collectively, the "Platform").

By accessing or using the Platform in any manner, you confirm that you have read, understood, and agree to be bound by these Terms, the Privacy Policy, Cookies Policy, and any other policies incorporated herein by reference. If you do not agree, you must immediately discontinue use of the Platform.

If you are accessing the Platform on behalf of a company or other legal entity, you represent that you have the authority to bind that entity to these Terms.

2. The Secure Blink Group

"Secure Blink", "we", "us", or "our" means Secure Blink Tech Private Limited (incorporated in India) and Secure Blink Inc. (incorporated in the United States), collectively operating as the "Secure Blink Group", and any of their current or future subsidiaries, affiliates, or successor entities. The specific Secure Blink entity you are contracting with is determined by your location as set out in the Contracting Entity table in Section 14 of these Terms.

Until such time as one entity becomes a wholly-owned subsidiary of another, each entity contracts independently and is solely liable for its own obligations under these Terms.

3. Eligibility

Use of the Platform is subject to the following:

• You must be at least eighteen (18) years of age. Minors may access the Platform only with the express consent and supervision of a parent or legal guardian.
• You must not be barred from using the Platform under the laws of India, the United States, or any other applicable jurisdiction.
• You must not be listed on any applicable government sanctions list, including OFAC's Specially Designated Nationals (SDN) list or any equivalent Indian, EU, or UN sanctions list.
• If accessing on behalf of an organization, you represent that the organization is duly incorporated and legally authorized to conduct its business.

4. User Accounts

4.1 Account Registration

When registering, you agree to provide accurate, current, and complete information; maintain and update account information; keep login credentials confidential; and notify Secure Blink immediately at [email protected] if you suspect unauthorized access.

4.2 Account Responsibility

You are solely responsible for all activities conducted through your account. You may not share, transfer, or permit third-party use of your credentials without prior written consent.

4.3 Account Termination

Secure Blink may suspend or terminate any account if you breach these Terms, your use poses a security risk, your account is involved in fraudulent or illegal activity, or your account has been inactive for an extended period as defined in the applicable subscription agreement.

5. Intellectual Property Rights

5.1 Ownership

All intellectual property rights in and to the Platform — including software code, algorithms, user interfaces, design elements, logos, trademarks, trade names, documentation, and proprietary methodologies — are exclusively owned by or licensed to Secure Blink. These rights are protected under Indian, US, and applicable international intellectual property laws.

5.2 Limited License

Subject to your compliance with these Terms and any applicable subscription agreement, Secure Blink grants you a limited, non-exclusive, non-transferable, revocable license to access and use the Platform solely for your own internal, lawful business purposes during the applicable subscription or access period.

5.3 Restrictions

Without prior written authorization from Secure Blink, you must not:

• Copy, reproduce, republish, upload, transmit, or distribute any portion of the Platform or its content.
• Modify, adapt, translate, reverse engineer, decompile, disassemble, or create derivative works based on the Platform.
• Use the Platform or any part of it to develop a competing product or technology.
• Remove, alter, or obscure any copyright, trademark, or proprietary notice.
• Scrape, crawl, or use automated tools to extract data from the Platform without express written consent.
• Sublicense, sell, resell, rent, lease, or otherwise commercially exploit the Platform or your access to it.

5.4 Feedback

If you submit Feedback (suggestions, ideas, or recommendations) regarding the Platform, you grant Secure Blink a perpetual, irrevocable, royalty-free, worldwide license to use, incorporate, modify, and commercialize such Feedback without any obligation to you.

6. Acceptable Use Policy

You agree to use the Platform only for lawful purposes and in a manner consistent with all applicable laws and regulations. The following are strictly prohibited:

6.1 Security and Integrity Violations

• Probing, scanning, or testing the vulnerability of Secure Blink's systems or networks without express written authorization.
• Introducing malware, ransomware, spyware, viruses, or any other malicious code.
• Bypassing, disabling, or circumventing authentication, access controls, or security measures.
• Performing denial-of-service (DoS) or distributed denial-of-service (DDoS) attacks.
• Stress testing or load testing Secure Blink's infrastructure without prior written authorization.

6.2 Unauthorized Scanning

• Using ThreatSpy to conduct security scanning, penetration testing, or vulnerability assessment against systems, APIs, or domains that you do not own or for which you do not have explicit written authorization from the asset owner.
• Using ThreatTrace threat intelligence data to conduct surveillance, stalking, harassment, or any unauthorized investigation of individuals.

6.3 Unlawful Activities

• Transmitting, distributing, or storing content that is illegal, defamatory, or infringes third-party rights.
• Engaging in activities that violate applicable data protection laws, export control regulations, or economic sanctions.
• Impersonating any person or entity, or misrepresenting your affiliation with any organization.

Secure Blink reserves the right to investigate suspected violations and may cooperate with law enforcement in prosecuting users who violate applicable law.

7. Third-Party Services and Links

The Platform may link to or integrate with third-party services (e.g., Slack, Jira, PagerDuty, Splunk). Secure Blink does not endorse, control, or assume responsibility for such services. Your use of third-party services is governed solely by their respective terms. Secure Blink bears no liability for any loss arising from your interaction with third-party services.

Third-party products used in connection with the Platform are activated and used at the Customer's sole risk and are not warranted, supported, or endorsed by Secure Blink.

8. DMCA Safe Harbor — Notice and Takedown (US Entity)

This section applies to users interacting with Secure Blink Inc. (USA) and is provided pursuant to Section 512 of the Digital Millennium Copyright Act (DMCA).

Secure Blink respects the intellectual property rights of others. If you believe that content on the Platform infringes your copyright, please send a written notice to Secure Blink's designated DMCA Agent including:

• A physical or electronic signature of the copyright owner or authorized agent.
• Identification of the copyrighted work claimed to be infringed.
• Identification of the material claimed to be infringing, with sufficient information to locate it.
• Your contact information (address, telephone number, email address).
• A statement that you have a good faith belief that use of the material is not authorized by the copyright owner, its agent, or the law.
• A statement under penalty of perjury that the information in the notice is accurate.

DMCA Agent: Email: [email protected] Subject line: DMCA Takedown Notice

Counter-notifications may be submitted in accordance with Section 512(g) of the DMCA. Secure Blink reserves the right to terminate accounts of repeat infringers.

9. Export Controls and Sanctions Compliance

The Platform and Products may be subject to export control laws and regulations, including the US Export Administration Regulations (EAR), the International Traffic in Arms Regulations (ITAR), and applicable Indian export control regulations. You represent and warrant that:

• You are not located in, or a national or resident of, any country subject to US, Indian, EU, or UN embargo or sanctions, including Cuba, Iran, North Korea, Russia, Syria, and the Crimea, Donetsk, and Luhansk regions.
• You are not listed on any applicable US Government denied-party list, including OFAC's SDN list, the Bureau of Industry and Security Entity List, or any equivalent Indian, EU, or UN sanctions list.
• You will not use the Platform or Products in violation of any applicable export control law, regulation, or sanctions program.

Secure Blink reserves the right to suspend or terminate access immediately without notice if it determines, in its sole judgment, that continued access would violate applicable export control or sanctions obligations.

10. Disclaimers

10.1 No Warranty

THE PLATFORM AND ALL PRODUCTS ARE PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED. SECURE BLINK EXPRESSLY DISCLAIMS ALL WARRANTIES, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND ACCURACY.

10.2 Security Findings Advisory

ThreatSpy and ThreatTrace are designed to assist with identifying application, API, and infrastructure security vulnerabilities and threats. Secure Blink does not warrant that the Products will detect all vulnerabilities or that findings are free from false positives or false negatives. The Products' output is advisory in nature and does not constitute a complete security assessment. Users are responsible for validating findings and implementing remediation.

10.3 Beta Features

Features designated as "alpha", "beta", "preview", "early access", or "demo" are experimental, provided "as is" without warranty of any kind, and are excluded from SLA commitments. Secure Blink has no obligation to continue developing, productizing, or supporting any beta feature.

11. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, SECURE BLINK, ITS DIRECTORS, EMPLOYEES, AFFILIATES, PARTNERS, AND LICENSORS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES; LOSS OF PROFITS, REVENUE, DATA, BUSINESS OPPORTUNITIES, OR GOODWILL; OR DAMAGES ARISING FROM UNAUTHORIZED ACCESS OR SERVICE INTERRUPTION, REGARDLESS OF THE FORM OF ACTION AND EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

SECURE BLINK'S TOTAL CUMULATIVE LIABILITY SHALL NOT EXCEED THE AMOUNTS PAID BY YOU IN THE THREE (3) MONTHS PRECEDING THE CLAIM.

Limitations in this section do not apply to: (i) death or personal injury caused by negligence; (ii) fraud or fraudulent misrepresentation; or (iii) any liability that cannot be limited by applicable law.

12. Indemnification

You agree to defend, indemnify, and hold harmless Secure Blink and its officers, directors, employees, agents, and affiliates from and against any claims, liabilities, damages, losses, and expenses arising out of: your access to or use of the Platform; your violation of these Terms; your violation of any third-party rights; or any content you submit through the Platform.

13. Modifications to Terms

Secure Blink may modify these Terms at any time. Updated Terms will be posted at www.secureblink.com/terms-of-use with a revised "Last Updated" date. For material changes, Secure Blink will provide notice via email or a prominent website notification at least thirty (30) days in advance. Continued use of the Platform after the effective date of revised Terms constitutes acceptance.

14. Contracting Entity and Governing Law

The applicable Secure Blink entity you are contracting with, and the governing law and jurisdiction that apply to these Terms, are determined by your location as follows:

*EU/EEA and UK routing will transfer to a Secure Blink Luxembourg entity upon its formation, with governing law updated accordingly.

In the absence of a confirmed location, the default contracting entity is Secure Blink Tech Private Limited, governed by the laws of India.

Parties will first attempt to resolve any dispute through good-faith negotiation before seeking formal legal remedies.

15. General Provisions

• Severability: If any provision is found invalid or unenforceable, the remaining provisions remain in full force.
• Waiver: Failure to enforce any provision does not constitute a waiver of that right.
• Entire Agreement: These Terms, together with the Privacy Policy, Cookies Policy, and any applicable subscription agreement, constitute the entire agreement regarding the Platform.
• Assignment: You may not assign rights or obligations under these Terms without prior written consent. Secure Blink may assign these Terms in connection with a merger, acquisition, or restructuring of the Secure Blink Group without consent, provided the Customer is notified within thirty (30) days.
• Force Majeure: Secure Blink is not liable for failure to perform due to causes beyond its reasonable control.
• No Third-Party Beneficiaries: There are no third-party beneficiaries to these Terms.
• Electronic Signatures: The Parties agree to the use of electronic signatures, contracts, and records.

16. Contact Information

Secure Blink Tech Private Limited (India) | Secure Blink Inc. (USA) Legal: [email protected] General: [email protected] Website: www.secureblink.com