Template — commercial terms are set out in the applicable order form
This Client Agreement ("Agreement") is a template master services agreement between Melcosoft LLC, a Colorado limited liability company ("Provider", "CVE.GMBH"), and the customer identified in the applicable order form ("Client"), governing Client's use of the CVE.GMBH external attack-surface analysis platform beyond the standard Terms of Service. Specific commercial terms (fees, scope, term) are set out in an accompanying order form or statement of work and incorporated by reference.
Provider will make the CVE.GMBH platform available to Client for passive reconnaissance and, for targets Client has authorized in the platform, active vulnerability scanning, CVE correlation, AI-assisted remediation guidance, and reporting, as described in the order form.
Client represents and warrants that, for every target it submits for active scanning, it either owns that target or holds documented written authorization from the owner to have it scanned. Client's in-platform attestation or signed consent for a target constitutes Client's binding instruction to Provider to scan that target, and Client is solely responsible for the accuracy of that instruction.
Client will promptly deauthorize or remove any target it no longer owns or has permission to scan, including where an IP address has been released back to a hosting or cloud provider.
Fees, billing cadence, and any usage quotas are set out in the applicable order form.
This Agreement begins on the effective date of the applicable order form and continues for the term stated there. Either party may terminate for the other's uncured material breach, including Client's breach of Section 2.
Each party will protect the other's confidential information with the same degree of care it uses for its own confidential information, and will not disclose it except as needed to perform this Agreement or as required by law.
Provider will process Client's target and findings data as described in the CVE.GMBH Privacy Policy and will not disclose Client's findings to any other customer of the platform.
The limitation of liability and indemnification terms in the CVE.GMBH Terms of Service apply to this Agreement and are incorporated by reference; Client's indemnification obligation for unauthorized scanning under Section 2 above survives termination.
The parties are independent contractors. Nothing in this Agreement creates a partnership, joint venture, or employment relationship.
This Agreement is governed by the laws of the State of Colorado, United States, unless the applicable order form states otherwise.
This Agreement, together with the applicable order form and the Terms of Service, is the entire agreement between the parties regarding the Service and supersedes prior discussions on the subject.
Client's authorized representative signs below, identifying the individual and the organization on whose behalf they are contracting — the same name/title/organization fields recorded for platform attestations, so that responsibility under this Agreement and under in-platform scan authorizations is traceable to the same person.
Provider: Melcosoft LLC By: __________________ Date: ______
Client: __________________ By: __________________ Date: ______