These Terms govern your access to and use of the Obexum software, website and hosted portal (the “Service”). By creating an account, downloading a build, or using the Service you agree to these Terms. If you use the Service on behalf of an organisation, you represent that you are authorised to bind it.
“Obexum”, “we” or “us” means [Legal Entity Name], of [Registered Address]. “You” means the individual or organisation using the Service. “Scanner” means the Obexum binary; “Portal” means the optional hosted web application; “Target” means any system you scan; “Engagement Data” means scans, findings, evidence and reports you produce.
Obexum is a deterministic, pericial-grade hardening-audit tool for Windows, Linux and BSD systems, delivered as a self-contained binary plus an optional hosted Portal for dashboards, history and shared engagements. We may improve, change or discontinue features; we will give reasonable notice of material adverse changes to paid features.
Subject to these Terms and payment of applicable fees, we grant you a non-exclusive, non-transferable, revocable licence to install and use the Scanner and Portal for your internal business purposes (and, for MSSP/MSP plans, to audit your clients under your engagement). You must not:
Critical.
Obexum is a defensive security tool. You may only scan systems you own or are explicitly authorised in writing to audit. You are solely responsible for obtaining that authorisation before running any scan. Unauthorised scanning of systems may be illegal and is strictly prohibited.
You further agree not to use the Service to:
We may suspend access immediately for suspected violations that risk harm or legal exposure.
The Service, including the Scanner, the check catalogue, remediation playbooks, documentation and trademarks, is owned by Obexum and protected by law. Except for the licence in Section 5, no rights are granted. Feedback you provide may be used by us without obligation.
The Service is provided “as is” and “as available” without warranties of any kind, whether express, implied or statutory, including merchantability, fitness for a particular purpose and non-infringement, to the maximum extent permitted by law.
Obexum reduces risk; it does not guarantee that it will detect every misconfiguration or vulnerability, nor that a host audited with Obexum is secure or compliant. The Service is not a substitute for professional security or legal advice, and findings/remediation must be reviewed by a qualified person before action. Remediation scripts can change system state; run them with the supplied dry-run first and at your own risk.
To the maximum extent permitted by law, Obexum will not be liable for any indirect, incidental, special, consequential or punitive damages, or for loss of profits, data, goodwill or business, arising out of or relating to the Service. Our total aggregate liability for all claims will not exceed the amounts you paid us for the Service in the twelve (12) months preceding the event giving rise to the claim.
Nothing in these Terms excludes liability that cannot be excluded by law (e.g. death or personal injury caused by negligence, or fraud).
You will indemnify and hold harmless Obexum from claims, damages and costs arising from your use of the Service in breach of these Terms, your unauthorised scanning of any system, or your violation of law or third-party rights.
These Terms apply while you use the Service. You may stop and close your account at any time. We may suspend or terminate access for material breach (including Section 6), non-payment, or where required by law, with notice where practicable. On termination your licence ends; you may export your Engagement Data for [30 days], after which it may be deleted. Sections that by nature should survive (5, 7–11, 13–14) survive termination.
These Terms are governed by the laws of [Country / State], excluding its conflict-of-laws rules, and the courts of [venue / city] have exclusive jurisdiction, unless a mandatory consumer law grants you a different forum. The parties will first attempt to resolve disputes in good faith for 30 days before formal proceedings.
Highlighted fields are placeholders to finalise with counsel before publication (legal entity, address, governing law/venue, export window). This is a thorough, standards-aligned draft, not legal advice; have it reviewed by a qualified lawyer for your jurisdiction.