Terms of Service

1. Acceptance of Terms

These Terms of Service (the "Terms") form a binding agreement between you ("you" or "Customer") and Exultia Technologies, PBC ("Exultia," "we," "us," or "our"), a public benefit corporation organized under the laws of the State of Georgia. They govern your access to and use of our websites, APIs, software, and services, including the Exultia Unified Daemon (exultia / xul / exultia.exe), Vantage, Argent, Daedelus, Praxis, and Axiom (collectively, the "Services").

By creating an account, purchasing a subscription, downloading software, calling our APIs, or otherwise using the Services, you agree to these Terms. If you are using the Services on behalf of an organization, you represent that you have authority to bind that organization, and "you" includes that organization. If you do not agree, do not use the Services.

2. The Services

Exultia provides cybersecurity software and intelligence, including aggregated threat and vulnerability data, operating system patch advisories, remediation and hotpatch content, hardened development environments, container images, binary packages, and security education materials.

Much of our software is designed to be self-hosted and run in your own environment. We may add, change, or discontinue features at any time. We will make reasonable efforts to give notice of material changes that reduce the core functionality of a paid plan.

3. Accounts and Security

You must provide accurate registration information and keep it current. You are responsible for all activity under your account, for safeguarding your credentials and API tokens, and for promptly notifying us of any unauthorized use. We are not liable for losses caused by unauthorized use of your account that occurs before you notify us.

4. Subscriptions, Fees, and Billing

• Paid plans are billed in advance on the cycle shown at purchase and renew automatically until cancelled.
• You may cancel at any time; cancellation takes effect at the end of the current billing period. Except where required by law or stated in writing, fees are non-refundable and no credit is given for partial periods.
• Fees are exclusive of taxes. You are responsible for all applicable sales, use, VAT, and similar taxes, other than taxes on our net income.
• We may change pricing on at least 30 days' notice before your next renewal. Continued use after the effective date constitutes acceptance.
• Enterprise customers may be invoiced on negotiated terms under our standard Master Services Agreement (Form MSA-2026-EX) with Net-30 invoicing via ACH, Wire Transfer, or Corporate Credit Card. Late amounts may accrue interest at the lesser of 1.5% per month or the maximum rate permitted by law, and we may suspend access for accounts that remain overdue.

5. License and Restrictions

Subject to these Terms and payment of applicable fees, Exultia grants you a limited, non-exclusive, non-transferable, revocable license to access and use the Services and any software we provide for your internal business or personal security purposes, within the limits of your plan (including seat, host, and rate limits).

The Exultia daemon and associated software utilities operate alongside standard open-source components (including the Linux kernel, systemd, glibc, and system utilities) governed by their respective licenses (such as GPLv2, GPLv3, and LGPL). In accordance with open-source licensing standards and the 'mere aggregation' doctrine, third-party open-source components are subject to their upstream terms. Exultia's proprietary technologies—including Exultia™, Vantage™, Argent™, Daedelus™, Praxis™, and Axiom™—remain the proprietary and confidential property of Exultia Technologies, PBC.

You agree not to:

• Offline Cryptographic Licensing and Never-Brick Architecture: Offline Ed25519 license keys delivered for self-hosted nodes are verified locally. Consistent with Section 2 of our standard Master Services Agreement, software contains no remote kill-switches, and transient network failure, disconnection, or billing true-up delays will never halt, disable, or brick active host defenses.
• resell, sublicense, or redistribute the Services, data feeds, or derived datasets except as your plan expressly allows;
• scrape, mirror, or bulk-extract data in a manner that circumvents rate limits, access controls, or plan restrictions;
• reverse engineer, decompile, or attempt to derive source code from non-open-source components, except where law permits despite this restriction;
• remove or alter proprietary notices, license keys, or provenance and signature metadata;
• use the Services to build a competing product or to benchmark for public release without our written consent.

6. Acceptable Use

You may use the Services only for lawful purposes and in accordance with these Terms. You will not:

• use threat intelligence, remediation content, or any Service to attack, compromise, or gain unauthorized access to systems you do not own or have explicit written permission to test;
• interfere with or disrupt the integrity, security, or performance of the Services or their underlying infrastructure;
• upload malware or other malicious code to the Services, other than samples or indicators submitted through channels we designate for research;
• attempt to probe, scan, or test the vulnerability of the Services without our prior written authorization;
• violate any applicable law, regulation, or third-party right, including export control and sanctions laws.

We may investigate suspected violations and suspend or terminate access where we reasonably believe these Terms have been breached.

7. Support Model and Service Levels

Exultia is a lean, independent cybersecurity lab. We prioritize deterministic code, self-hosted deployment, and sub-second atomic rollbacks, and we are deliberately transparent about our support model:

• Threat Feed SLA and Host Autonomy. As set forth in Section 3 of our Master Services Agreement (Form MSA-2026-EX), Exultia guarantees 99.9% monthly availability for hosted threat feed APIs and real-time advisory synchronization. Standard self-hosted software deployed on Customer-managed nodes operates autonomously offline with zero outbound network dependencies.
• No human SLAs on standard subscriptions. Routine technical assistance, installation commands, license sizing, and error explanations are provided around the clock by our autonomous AI Support Agent and published documentation. Dedicated human response SLAs or bespoke on-site engineers require an executed Master Services Agreement with retainer pricing.
• Autonomous and self-verifying software. Our software (Exultia Unified Daemon, Vantage, Argent, Daedelus, Praxis, and Axiom) is engineered to be self-hosted and self-verifying, with built-in dry-run validation and SHA-256 pre-image rollback to reduce the risk of production downtime.
• Master Services Agreement (MSA). Enterprise fleet deployments exceeding 100 hosts operate under our transparent, standard Master Services Agreement (Form MSA-2026-EX), which supersedes these Terms with respect to covered fleet commitments.

Hosted components are provided on a commercially reasonable efforts basis. We may perform scheduled or emergency maintenance and are not responsible for downtime caused by factors outside our reasonable control, including upstream data-source outages, internet or cloud-provider failures, and force majeure events.

8. Threat Data, Advisories, and Remediation Boundaries

Threat intelligence, vulnerability records, severity scores, patch advisories, and remediation content are aggregated from verified registries, vendor disclosures, and our proprietary analysis.

• Exact Surgical Remediation. In accordance with Section 4.1 of our Master Services Agreement, Exultia executes deterministic, mathematically verified remediation actions strictly tailored to isolate, mitigate, or patch identified vulnerabilities and threat vectors. Exultia does exactly what is required to fix the security issue—nothing more, nothing less.
• No Environmental Impact Liability. In accordance with Section 4.2 of our Master Services Agreement, Exultia is not responsible or liable for any downstream, collateral, operational, or environmental impacts resulting from legitimate security remediation actions or defensive posture adjustments.
• Customer Responsibility for Environmental Adaptability. It is Customer's sole responsibility to ensure that Customer's operating environment, application runtime, dependencies, microservices, and orchestration configurations are adaptable and resilient to required security updates, configuration changes, port/socket isolation, and patched software binaries.
• Customer Environment and Deployment Control. Exultia does not administer, manage, or control Customer's internal host infrastructure, orchestrators, or local execution pipelines. Consequently, Exultia cannot and shall not be held responsible or liable for remediation deployment speed, execution timing, or scheduling latency on Customer-administered environments.

9. Your Content, Data Sovereignty, and Redacted Neural Self-Healing

You retain all rights in the data, configurations, and materials you submit to the Services ("Customer Content"). Where software is self-hosted, Customer Content remains within your environment.

Unidirectional Pulls, Policy-Gated Redaction & Corporate Internal LLM Routing. In accordance with Section 6 of our Master Services Agreement, Exultia warrants that Customer source code, proprietary algorithms, full host package inventories, CycloneDX CBOM reports, memory snapshots, and unredacted environment variables are NEVER transmitted to Exultia. Routine threat matching, patch verification, compliance drift checks, and Daedelus container and workstation builds occur strictly within Customer's local computing perimeter via unidirectional advisory pulls. If Customer enables the optional Exultia Neural Self-Healing Engine (`manual` or `auto` governance mode; disabled in `off` mode), the endpoint transmits only tokenized, PII/path/IP/secret-redacted command failure signatures (`<PATH_1>`, `<IP_1>`, `<HOST_1>`, `<SECRET_REDACTED>`) to the Exultia Neural Self-Heal Relay—or, if configured via `xul self-heal --endpoint <URL>`, directly to Customer's own internal corporate LLM gateway—to synthesize a POSIX-verified repair command, which is detokenized locally in memory on Customer's host.

10. Intellectual Property

The Services, including their software, design, documentation, trademarks (including Exultia™, Vantage™, Argent™, Daedelus™, Praxis™, and Axiom™), and aggregated datasets, are owned by Exultia Technologies, PBC or its licensors and are protected by United States and international intellectual property laws. Except for the limited rights expressly granted in these Terms, no rights or titles are transferred to you. If you provide feedback or suggestions, you grant us a perpetual, irrevocable, royalty-free license to use them without obligation to you.

11. Third-Party Services and Open Source

The Services integrate with or depend on third-party data sources, registries, cloud platforms, and open-source software. We do not control and are not responsible for third-party services, their availability, or their content. Your use of third-party services is governed by their own terms.

12. Confidentiality

Each party may receive non-public information from the other that is marked confidential or that a reasonable person would understand to be confidential. The receiving party will use it only to perform under these Terms, protect it with reasonable care, and not disclose it except to personnel and advisors with a need to know who are bound by similar obligations, or as required by law. These obligations do not apply to information that is public through no fault of the recipient, already known to it, independently developed, or rightfully received from a third party.

13. Disclaimer of Warranties

THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE." TO THE FULLEST EXTENT PERMITTED BY LAW, EXULTIA DISCLAIMS ALL WARRANTIES, EXPRESS, IMPLIED, OR STATUTORY, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICES OR ANY DATA OR CONTENT WILL BE UNINTERRUPTED, ERROR-FREE, SECURE, COMPLETE, OR ACCURATE, OR THAT THEY WILL DETECT, PREVENT, OR REMEDIATE ALL THREATS OR VULNERABILITIES. NO SECURITY PRODUCT CAN GUARANTEE PROTECTION AGAINST ALL ATTACKS.

14. Limitation of Liability

TO THE FULLEST EXTENT PERMITTED BY LAW, EXULTIA AND ITS AFFILIATES, OFFICERS, EMPLOYEES, AND LICENSORS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, DATA, GOODWILL, OR BUSINESS OPPORTUNITY, ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICES, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

OUR TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICES WILL NOT EXCEED THE GREATER OF (A) THE AMOUNTS YOU PAID TO EXULTIA FOR THE SERVICES GIVING RISE TO THE CLAIM IN THE TWELVE (12) MONTHS PRECEDING THE EVENT, OR (B) ONE HUNDRED U.S. DOLLARS (US$100). Some jurisdictions do not allow certain limitations, so some of the above may not apply to you.

15. Indemnification

You will defend, indemnify, and hold harmless Exultia and its affiliates, officers, employees, and licensors from and against any claims, damages, liabilities, costs, and expenses (including reasonable attorneys' fees) arising out of your Customer Content, your use of the Services in violation of these Terms or applicable law, or your deployment of any remediation, advisory, or configuration obtained through the Services.

16. Term, Suspension, and Termination

These Terms apply from your first use of the Services until terminated. You may stop using the Services and cancel your subscription at any time. We may suspend or terminate your access immediately if you breach these Terms, if required by law, or if your use poses a security risk or legal exposure to us or others.

Upon termination, your license ends and you must cease using the Services and delete or return any proprietary materials as applicable. Sections that by their nature should survive (including intellectual property, confidentiality, disclaimers, limitation of liability, indemnification, and governing law) will survive termination.

17. Privacy & Telemetry Scope

Routine feed synchronization (Vantage and Argent), local vulnerability correlation, SOX/PCI compliance drift auditing, and Daedelus workstation/container builds operate via unidirectional pulls and transmit zero behavioral analytics or host inventory telemetry. When the optional Exultia Neural Self-Healing Engine is enabled by the operator (`manual` approval mode by default, `auto` mode if configured, or `off` for air-gapped environments), the daemon performs local bidirectional redaction?replacing custom file paths (`<PATH_1>`), IP addresses (`<IP_1>`), hostnames (`<HOST_1>`), usernames (`<USER_1>`), and credentials (`<SECRET_REDACTED>`) before transmitting a minimal command diagnostic to the Exultia Neural Self-Heal Relay. We also collect administrative and billing data needed to operate user accounts, such as email addresses, payment transactions managed securely by PCI-compliant payment processors, and cryptographic license generation records.

18. Export and Compliance

You agree to comply with all applicable export control, sanctions, and anti-corruption laws. You represent that you are not located in, or a national or resident of, a jurisdiction subject to comprehensive sanctions, and that you are not on any applicable restricted-party list.

19. Governing Law and Disputes

These Terms are governed by the laws of the State of Georgia and the United States, without regard to conflict-of-laws principles. The parties agree to first attempt in good faith to resolve any dispute informally. Any dispute not resolved informally will be brought exclusively in the state or federal courts located in Georgia, and each party consents to personal jurisdiction and venue there. To the extent permitted by law, each party waives any right to a jury trial and to participate in a class or representative action.

20. General Provisions

• Entire agreement. These Terms, together with any order form or Master Services Agreement (Form MSA-2026-EX) signed by both parties, are the entire agreement regarding the Services and supersede all prior understandings. An executed MSA controls over these Terms in the event of conflict.
• Changes. We may update these Terms from time to time. Material changes will be posted on this page with a new "Last updated" date and, where practical, communicated by email or in-product notice. Continued use after changes take effect constitutes acceptance.
• Severability. If any provision is held unenforceable, the remaining provisions remain in full effect.
• No waiver. Failure to enforce any provision is not a waiver of our right to do so later.
• Assignment. You may not assign these Terms without our prior written consent. We may assign them in connection with a merger, acquisition, or sale of assets.
• Force majeure. Neither party is liable for delays or failures caused by events beyond its reasonable control.
• Notices. We may provide notices by posting on the Services or by email to the address associated with your account.

21. Contact

Questions about these Terms can be submitted through the support options in your account or via our AI Support Agent. Requests for a negotiated MSA or enterprise terms can be made from the Enterprise section of your subscription page.