This Master Subscription Services Agreement (this "Agreement"), effective as of the date you click the box to indicate acceptance (the "Effective Date"), is by and between ContraForce Group, Inc., a Delaware corporation, with offices at 7540 SH 121, Suite 200, McKinney, TX 75070 ("ContraForce") and you (“you”, “End User”, “Customer”). ContraForce and Customer may be referred to herein collectively as the "Parties" or individually as a "Party."

1. Definitions.

(a) "Authorized User" means an employee, consultant, or independent contractor of Customer, and identified by Customer as such, who i) has received a valid password and login ID from ContraForce or from Customer’s User Administrator (see Section 3 below) to access the Software and ii) has accepted and agreed to the ContraForce Privacy Policy, ContraForce Terms of Service and the terms of this Agreement.

(b) “Customer Data" means all electronic information provided by Customer to ContraForce under this Agreement.

(c) “Deliverables" means the Software and Documentation, any tangible and intangible materials, including reports, studies, base cases, drawings, findings, manuals, and procedures that are prepared by ContraForce in the course of furnishing the Software and Documentation.

(d) “Documentation" means the standard ContraForce help materials, user documentation, and training materials normally made available by ContraForce in connection with specific Software tools and / or products.

(e) “Order Form" means ContraForce’s standard order form documentation for ordering certain Software products through the ContraForce Site (as defined in ContraForce’s Terms of Service).

(f) “Software" means the software products for cybersecurity operations and related services that are included in Customer’s subscription as identified in the Order Form in object code format, including any Updates provided to Customer pursuant to this Agreement.

(g) "Services" means any the services to be performed by ContraForce for Customer, other than Software Services, in accordance with Section 4 herein and as further detailed in a Statement of Work.

(h) "Software Services" means the access for Authorized Users through the Site to use the Software on a software as a service (SaaS) basis and cybersecurity operation services performed on a subscription or recurring basis as set forth in an Order Form.

(i) "Statement of Work" (also referred to as an “SOW”) means a document in writing signed by both Parties, that: (a) details the scope of work of the Services to be performed by ContraForce under this Agreement, including identification of deliverables and other materials to be provided to Customer, if any; (b) identifies the locations at which the Services shall be performed; and (c) specifies the applicable payment terms for performing the Services.

(j) "Term" means the duration of this Agreement as identified in the Order Form, as the subscription term (the “Initial Term”), or any extension period thereof (each, a “Renewal Term”).

(k) "Update" means any updates, bug fixes, patches, maintenance releases, or other error corrections to the PatchRx Software that ContraForce generally makes available free of charge to all customers of the Software.

2. Limited Licenses

(a) License to Customer. To enable Customer to use the Software Services, ContraForce grants to Customer, during the Term, a personal, non-exclusive, non-sublicensable, non-transferable and non-assignable license for Authorized Users solely to (i) access and use the Software and applicable Documentation strictly for the benefit of Customer’s internal business operations.

(b) License to ContraForce.  To enable ContraForce to provide the Software Services, Customer grants to ContraForce, during the Term, a personal, non-exclusive, non-sublicensable license to use, reproduce, transmit and modify the Customer Data solely in connection with ContraForce provision of the Software Services, which for the avoidance of doubt includes ContraForce’ testing, monitoring, reporting, modeling, and benchmarking Software Services and use thereof.

3. Customer Obligations. 

(a) Security & Infrastructure Obligations. Customer will be responsible for designating an employee or other person (“User Administrator”) who shall be responsible for (i) notifying ContraForce of each Authorized User for which it wishes to have access to the Software Services; (ii) identifying the roles and rights of each Authorized User; and (iii) facilitating Customer’s review of usage logs and other auditing or reporting information provided by ContraForce. Customer will be responsible for maintaining the confidentiality and security of such passwords and login IDs and all activities that occur under these IDs, regardless of whether such passwords and login IDs are generated and managed by Customer or by ContraForce. Customer will ensure that each login ID and password issued to an Authorized User will be used only by that Authorized User. Customer agrees to notify ContraForce promptly of any actual or suspected unauthorized use of any account, login ID or passwords, or any other breach or suspected breach of these security requirements. ContraForce reserves the right to suspend or terminate any login ID which ContraForce reasonably believes may have been used by an unauthorized third party or by any user or individual other than the Authorized User to whom such login ID and password was rightfully assigned. Customer is also responsible for maintaining the required hardware, software, Internet connections and other resources necessary for Customer and Authorized Users to access the Services through the Site. 

(b) Other Customer Responsibilities. During the term of this Agreement, Customer will provide ContraForce with reasonable access to requested resources such as (i) information about Customer personnel, facilities, equipment, hardware, software, network and information, and (ii) timely decision-making, notification of relevant issues or information, identification of bugs in Software or Software Services, and granting of approvals or permissions as reasonably necessary for ContraForce to provide the Software Services and/or Services under this Agreement.

4. Services.

ContraForce shall perform the Services set forth in the Order Form and as detailed in any agreed Statement of Work. If the Parties desire changes to the Services, including alterations in, additions to, or deletions from the Services, or changes in the sequence of the performance of the Services, and such request affects the completion, substance, and/or fees, as defined therein, the change shall be mutually agreed to in writing. ContraForce shall perform all Services in a professional and workmanlike manner using appropriately skilled, qualified, and competent personnel.

5. Ownership and Proprietary Rights.

(a) ContraForce Intellectual Property. ContraForce owns or is an authorized licensee for all intellectual property used for purposes of providing the Software Services under this Agreement, whether developed prior to the commencement of this Agreement or anytime thereafter (the “ContraForce Properties”). All right, title, and interest in and to the ContraForce Properties (including, without limitation, all copyright, patent, trade secret, trademark and other intellectual property rights) and any customizations, corrections, updates, adaptations, enhancements, improvements, translations or copies of the foregoing shall remain or vest exclusively with ContraForce. Additionally, ContraForce shall own any aggregated and anonymized data compiled from various data sources, provided that such aggregated and anonymized data is not attributable to source data.

(b) Customer Intellectual Property. All right, title, and interest in and to the Customer Data shall be owned exclusively by Customer, provided that Customer grants to ContraForce a non-exclusive, worldwide license to copy, transmit, modify and use the Customer Data solely for purposes of providing the Software Services and Services.

6. Confidential Information.

From time to time during the Term, either Party may disclose or make available to the other Party information about its business affairs, products, confidential intellectual property, trade secrets, third-party confidential information, and other sensitive or proprietary information, whether orally or in written, electronic, or other form or media, and whether or not marked, designated, or otherwise identified as "confidential" (collectively, "Confidential Information"). Without limiting the foregoing, the Software Services, Services, Customer Data, and terms of this Agreement shall be considered Confidential Information. Confidential Information does not include information that the receiving Party can demonstrate that, at the time of disclosure is: (a) in the public domain; (b) known to the receiving Party; (c) rightfully obtained by the receiving Party on a non-confidential basis from a third party; or (d) independently developed by the receiving Party. The receiving Party shall not disclose the disclosing Party's Confidential Information to any person or entity, except to the receiving Party's employees, agents, contractors, consultants and representatives, including its bankers, attorneys and accountants (collectively “Representatives”)  who have a need to know the Confidential Information for the receiving Party to exercise its rights or perform its obligations hereunder, and then only under a written confidentiality agreement or other binding confidentiality obligation no less restrictive than this Section 6. The receiving Party on behalf of itself and its Representatives agrees that it will treat Confidential Information of the disclosing Party with the same degree of care as it accords to its own confidential information of like sensitivity, but in no event less than a reasonable level of care. The receiving Party further ensures that it and its Representatives will use the disclosing Party’s Confidential Information only for the purposes contemplated by this Agreement. Notwithstanding the foregoing, each Party may disclose Confidential Information to the limited extent required (i) in order to comply with the order of a court or other governmental body, or as otherwise necessary to comply with applicable law, provided that the Party making the disclosure pursuant to the order shall first have given written notice to the other Party and made a reasonable effort to obtain a protective order; or (ii) to establish a Party's rights under this Agreement, including to make required court filings. On the expiration or termination of the Agreement, the receiving Party shall promptly return to the disclosing Party all copies, whether in written, electronic, or other form or media, of the disclosing Party's Confidential Information, or destroy all such copies and certify in writing to the disclosing Party that such Confidential Information has been destroyed. In the event the terms of this Agreement conflict or are otherwise inconsistent with terms of any nondisclosure agreement the Parties entered into prior to the Effective Date concerning Confidential Information disclosed during the course of performance under this Agreement, the terms of this Agreement shall control.

7. Restrictions.

Customer shall not sell, rent, lease, sublicense, distribute, transfer, copy, reproduce, download, display, timeshare, modify, alter, or create any derivative work, derivation, enhancement and/or improvement of the Software Services or the Software or use such as a component of or a base for products or services prepared for commercial sale, sublicense, lease, access or distribution. Customer shall not itself, or cause or permit any Authorized User to, translate, reverse engineer, or otherwise disassemble the Software. Customer shall not cause or allow any third party or unlicensed user or computer system, other than an Authorized User, to access or use the Software Services or Software. Customer shall not introduce any infringing or otherwise unlawful data or material or any virus, spyware, malware or disabling code into the Software Services or into ContraForce systems or environment, nor shall Customer remove, obscure or alter any intellectual property right or confidentiality notices or legends appearing in or on any aspect of the Software or the Software Services. 

8. Warranties and Warranty Disclaimers. 


(b) Mutual Warranties. Each Party represents, warrants, and covenants that (i) it is a business entity duly organized and in good standing in all jurisdictions where it does business; (ii) has the full power and authority to enter into and perform its obligations under this Agreement; (iii) it will comply with all applicable laws in connection with its performance hereunder, including all export control laws.

9. Limitations of Liability.


10. Indemnification. 

(a) ContraForce Indemnification. ContraForce, at its expense, shall defend, indemnify and hold Customer harmless from and against any loss, damages or liability from any claim, suit or proceeding (collectively, a “Claim”), to the extent arising out of, or related to, the use by Customer of the Software Services in strict accordance with this Agreement and alleging infringement of a United States patent issued on or before the Effective Date or a copyright or trade secret right of any third party; provided that Customer: (i) promptly notifies ContraForce of such Claim; (ii) provides ContraForce with full control of the defense and settlement of each such Claim; (iii) cooperates with ContraForce in such defense and settlement, and (iv) does not settle any such Claim or suit without ContraForce’ prior written consent. Customer may participate in the defense and settlement of any Claim with counsel of its choice at its own expense provided that ContraForce shall continue to have sole control of such defense or settlement. If any portion of the Software Services becomes, or in ContraForce’s opinion is likely to become, the subject of a claim of infringement, ContraForce may, at its option: (a) procure for Customer the right to continue using the Software Services; (b) replace the Software Services with non-infringing services which do not materially impair the functionality of the Software Services; (c) modify the Software Services so that it becomes non-infringing; or (d) terminate this Agreement and refund any unused fees actually paid by Customer to ContraForce for the remainder of the term then in effect, and upon such termination, Customer will immediately cease all use of the Software Services. Notwithstanding the foregoing, ContraForce shall have no obligation under this section or otherwise with respect to any infringement claim based upon (I) any use of the Software Services not in accordance with this Agreement or not as specified in the Documentation; (II) any use of the Software Services in combination with other products, equipment, software or data not supplied by ContraForce if the Software Services without such combination does not infringe; (III) any modification of the Software Services by any person other than ContraForce or its authorized agents; or (IV) a superseded Software version if a corrective Update has been made available to Customer. This Section 10(a) states the sole and exclusive remedy of Customer and the entire liability of ContraForce with respect to infringement claims and actions.

(b) Customer Indemnification. Customer, at its expense, shall defend, indemnify,  and hold ContraForce harmless to the extent any Claims relate to or arise from:  (i) Customer’s use of the Software Services other than as specified by ContraForce or for any illegal purposes; (ii) ContraForce’s use of the Customer Data; or (iii) any modification to a Deliverable not made by or at the direction of ContraForce, provided that ContraForce: (1) promptly notifies Customer of such Claims; (2) provides Customer with full control of the defense and settlement of each such Claim; (3) cooperates with Customer in such defense and settlement, and (4) does not settle any such Claim without Customer’s prior written consent. ContraForce may participate in the defense and settlement of any Claim with counsel of its choice at its own expense provided that Customer shall continue to have sole control of such defense or settlement.

11. Fees. 

(a) Customer shall pay ContraForce the Software Services subscription fees in the amount and according to the Order Form. Customer shall pay ContraForce the Service fees and/or expenses either (i) on the Effective Date or (ii) on a monthly basis in accordance with an automated billing cycle, the options of which will be selected by Customer in the Order Form process (collectively, the “Fees”). If Customer believes that ContraForce charged Customer incorrectly and not in accordance with Customer’s Order Form or applicable Statement of Work, it must notify ContraForce no later than ten (10) days after the date payment is due. If any payment of an undisputed Fee is not received within ten (10) days of when due, interest shall accrue on the unpaid balance at a rate of 1.5% per month, or the maximum rate allowed under law, whichever is lower, from the date such payment was due until the date paid. Customer shall be responsible for all sales taxes, use taxes, withholdings and any other taxes and charges of any kind imposed by any federal, state or local governmental entity on the transactions contemplated by this Agreement, excluding only federal and state taxes on ContraForce’ gross income.

(b) Customer is charged per machine used to process data, where each machine has a data cap of five gigabytes per machine per month (“Data Cap”). Subject to availability, if Customer’s usage of the Software Services exceeds the usage purchased under Customer’s Order Form (“Overage Use”), ContraForce has the right to charge Customer for the subscription service applicable to the amount of Overage Use on a pro rata basis at the price per machine as specified in the Order Form for the remaining period of such Subscription Term. No refunds or credits for paid Fees will be issued to Customer, except as stated otherwise in this Agreement. 

(c) Customer further authorizes ContraForce to use a third party to process payments of Fees, and hereby consents to the disclosure of Customer’s billing information to such third party. Customer shall promptly provide ContraForce with updated credit card information in the event that Customer’s credit card on file is no longer valid. If the credit card information on file with ContraForce is not valid at any time during the Term, or if Customer’s credit card cannot be processed on any payment date, (i) Customer hereby authorizes ContraForce to continue to attempt to charge the amounts due until such amounts are paid in full; and (ii) ContraForce reserves the right to immediately terminate this Agreement, or suspend Customer’s access to the Software Services and / or Services. If at any time Customer’s access to the Software Services or Services is suspended or disabled (as applicable) for non-payment, ContraForce may charge a reactivation fee to reinstate the Services. ContraForce reserves the right to stop accepting credit card payments from one or more issuers upon written notice to Customer.

(d) ContraForce may, at its sole discretion, at the beginning of or during a Term, authorize free trial periods to particular functions of the Software Services or entire licenses (each a “Free Trial Period”). Once a Free Trial Period of a particular function ends, and upon notice to Customer, ContraForce will begin billing Customer’s payment method for periodic subscription fees (plus any applicable taxes), unless Customer cancels prior to the end of the Free Trial Period.

12. Term and Termination.

(a) Term. This Agreement shall commence on the Effective Date and continue for the Term unless and until terminated in accordance with this Section 12.

(b) The Initial Term shall commence on the Effective Date provided in the Order Form and shall be automatically renewed for additional periods of the same duration as the Initial Term, each a Renewal Term, unless either Party requests termination at least thirty (30) days prior to the end of the then-current Term. ContraForce reserves the right to discontinue any particular service, feature, or function (i) prior to the start of an Initial Term, or (ii) before any Renewal Term upon thirty (30) days’ notice to Customer. 

(c) Termination for Cause. Either Party may terminate this Agreement, an Order Form and/or Statement of Work for cause upon thirty (30) days’ written notice of a material breach by the other Party of its obligations under this Agreement or the affected Order Form or Statement of Work, if such breach remains uncured at the expiration of such period.

(d) Customer Nonpayment. ContraForce reserves the right to suspend Customer’s access to and/or use of the Subscription Services upon Customer’s failure to pay amounts when due, after ten (10) days’ written notice thereof and failure to cure. Customer agrees that ContraForce shall not be liable to Customer or any third party for any suspension of the Subscription Services pursuant to this Section 12(d). 

(e) Effects of Termination. Upon termination of this Agreement or expiration of its Term: (i) the Parties shall work together in good faith to address any and all post-termination issues concerning this Agreement, including but not limited to the retrieval or destruction of Customer Data, any business processes created for Customer during on-boarding,  and each Party’s Confidential Information, and (ii) all licenses granted to Customer hereunder with respect to the Software Services and Software shall automatically terminate and Customer shall immediately discontinue its use thereof. If Customer makes no written request regarding treatment of its Customer Data after termination or expiration of this Agreement within thirty (30) days after the date of termination, ContraForce shall have no obligation to maintain the Customer Data, and will have no liability to Customer in respect of the same. Any and all unpaid fees and expenses incurred in connection with the Software Services or Services prior to termination shall become due and payable within thirty (30) days after the date of termination. All subscription fees paid are non-refundable.  Sections 1, 5-7, 8(a), 9, 12, and 14(a)-(i) shall survive any termination or expiration of this Agreement, and with respect to Confidential Information that constitutes a trade secret under applicable law, the rights and obligations set forth in Section 6 will survive the termination or expiration of this Agreement until, if ever, such Confidential Information loses its trade secret protection other than due to an act or omission of the receiving Party or its Representatives.

13. Equitable Relief.

The Parties agree that in the event of any breach or threatened breach of this Agreement; the non-breaching party may suffer an irreparable injury, such that no remedy at law will afford that party adequate protection against or appropriate compensation for such injury.  Accordingly, in addition to remedies available at law, the Parties hereby agrees that the non-breaching party shall be entitled to seek specific performance as well as such injunctive relief as may be granted by a court of competent jurisdiction.

14. Miscellaneous.  

(a) Assignment. Customer may not assign or transfer any of its rights or delegate any of its obligations hereunder, in each case whether voluntarily, involuntarily, by operation of law, or otherwise, without the prior written consent of ContraForce, which consent shall not be unreasonably withheld, conditioned, or delayed; provided, however, the Parties agree that either Party may assign its rights or delegate its obligations, in whole or in part, without consent of the other Party and upon ninety (90) days prior written notice to the other Party, to (i) one or more of its affiliates, or (ii) an entity that acquires all or substantially all of the business or assets of such Party to which this Agreement pertains, whether by merger, reorganization, acquisition, sale, or otherwise. Any purported assignment, transfer, or delegation in violation of this Section 14(a) will be null and void. No assignment, transfer, or delegation will relieve the assigning or delegating Party of any of its obligations hereunder. This Agreement is binding upon and inures to the benefit of the Parties hereto and their respective permitted successors and assigns.

(b) Amendment and Modification; Waiver. This Agreement may not be amended or modified except in a writing executed by duly authorized representatives of each Party. No waiver by any Party of any of the provisions hereof will be effective unless explicitly set forth in writing and signed by the Party so waiving. Except as otherwise set forth in this Agreement, (i) no failure to exercise, or delay in exercising, any rights, remedy, power, or privilege arising from this Agreement will operate or be construed as a waiver thereof and (ii) no single or partial exercise of any right, remedy, power, or privilege hereunder will preclude any other or further exercise thereof or the exercise of any other right, remedy, power, or privilege.

(a) Entire Agreement.
This Agreement, together with any other documents incorporated herein by reference, including but not limited to the ContraForce Privacy Policy, the ContraForce Terms of Service, the Order Form, and all related Exhibits, constitutes the sole and entire agreement of the Parties with respect to the subject matter of this Agreement and supersedes all prior and contemporaneous understandings, agreements, and representations and warranties, both written and oral, with respect to such subject matter. In the event of any inconsistency between the statements made in the body of this Agreement, the related documents mentioned herein, and any other documents incorporated herein by reference, the following order of precedence governs: (i) first, this Agreement, excluding its Exhibits; (ii) second, the Exhibits to this Agreement as of the Effective Date; and (iii) third, any other documents incorporated herein by reference. 

(b) Force Majeure. In no event shall either Party be liable to the other Party, or be deemed to have breached this Agreement, for any failure or delay in performing its obligations under this Agreement, if and to the extent such failure or delay is caused by any circumstances beyond the other Party's reasonable control, including but not limited to acts of God, flood, fire, earthquake, explosion, pandemic, war, terrorism, invasion, riot or other civil unrest, strikes, labor stoppages or slowdowns or other industrial disturbances, or passage of law or any action taken by a governmental or public authority, including imposing an embargo.

(c) Governing Law. This Agreement is governed by and construed in accordance with the internal laws of the State of Texas without giving effect to any choice or conflict of law provision or rule that would require or permit the application of the laws of any jurisdiction other than those of the State of Texas. Any legal suit, action, or proceeding arising out of or related to this Agreement or the licenses granted hereunder will be instituted exclusively in the federal courts of the United States or the courts of the State of Texas, in each case located in the city of Dallas, and each Party irrevocably submits to the exclusive jurisdiction of such courts in any such suit, action, or proceeding. The Parties exclude in its entirety the application to this Agreement of the United Nations Convention on Contracts for the International Sale of Goods. 

(d) Notices. All notices, requests, consents, claims, demands, waivers, and other communications hereunder (each, a "Notice") must be in writing and addressed to the Parties at the addresses set forth on the first page of this Agreement (or to such other address that may be designated by the Party giving Notice from time to time in accordance with this Section 14(f)). All Notices must be delivered by personal delivery, nationally recognized overnight courier (with all fees pre-paid), facsimile, or email (with confirmation of transmission), or certified or registered mail (in each case, return receipt requested, postage pre-paid). Except as otherwise provided in this Agreement, a Notice is effective only: (i) upon receipt by the receiving Party, and (ii) if the Party giving the Notice has complied with the requirements of this Section 14(f).

(e) Relationship of the Parties. The Parties to this Agreement are independent contractors and nothing in this Agreement will be deemed or construed as creating a joint venture, partnership, agency relationship, franchise, or business opportunity between ContraForce and Customer. Neither Party, by virtue of this Agreement, will have any right, power, or authority to act or create an obligation, express or implied, on behalf of the other Party.

(f) Severability. If any provision of this Agreement is invalid, illegal, or unenforceable in any jurisdiction, such invalidity, illegality, or unenforceability will not affect any other term or provision of this Agreement or invalidate or render unenforceable such term or provision in any other jurisdiction.

(g) Publicity. ContraForce may publicly identify Customer as a customer and use Customer’s logo on ContraForce’s corporate website, in sales materials, and in print media in accordance with Customer’s usage guidelines, all for the limited purpose of recognizing Customer as a ContraForce customer.