New: Major version 1.0 officially released
New: Major version 1.0 officially released
New: Major version 1.0 officially released
New: Major version 1.0 officially released
New: Major version 1.0 officially released
These Terms and Conditions ("Terms") govern access to and use of the website located at https://www.endurasecurity.com (the "Website"), related documentation, and the Endura Security software, hosted services, APIs, integrations, and related services (collectively, the "Services") provided by Infrared Security, LLC d/b/a Endura Security ("Endura," "Endura Security," "Company," "we," "us," or "our").
By accessing or using the Website or Services, you agree to these Terms. If you use the Services on behalf of a company, organization, or other entity ("Customer"), you represent that you have authority to bind that entity to these Terms, and "you" and "Customer" refer to that entity.
If you do not agree to these Terms, do not access or use the Services.
The Services are intended primarily for business and professional use.
Your use of paid Services may also be governed by an order form, quote, statement of work, master services agreement, service agreement, data processing agreement, or other written agreement executed by Endura and Customer (each, as applicable, an "Order" or "Service Agreement").
If a conflict exists between these Terms and a mutually executed Service Agreement or Order, the mutually executed agreement controls to the extent of the conflict. A data processing agreement controls with respect to the processing of personal data within its scope.
Terms contained solely in a Customer purchase order, procurement portal, or similar document do not modify these Terms unless expressly accepted in writing by Endura.
The Endura documentation available at https://docs.endurasecurity.com (the "Documentation") describes current product functionality, configuration, supported environments, and deployment requirements. The Documentation may be updated as the Services evolve.
Endura provides runtime security and policy enforcement technology for CI/CD pipelines and supported Linux workloads. The Services may include the following components and capabilities.
Team Server is Endura's centralized management plane. Depending on configuration, Team Server may receive Runtime Sensor telemetry, distribute security policies, discover CI/CD pipelines, record and display policy violations, manage integrations, and control user access.
Team Server may be provided as an Endura-managed service or deployed by Customer in Customer-controlled infrastructure, depending on the applicable subscription or Order.
Runtime Sensor is a Linux security agent that uses eBPF and Linux Security Module ("LSM") capabilities, where supported, to observe security-relevant runtime operations and apply Endura security policies.
Runtime Sensor may protect CI/CD builds and supported Linux workloads and may operate:
Runtime Sensor functionality varies based on operating system, Linux kernel capabilities, deployment method, policy configuration, and operating mode.
Endura may integrate with supported CI/CD platforms to discover pipelines, associate builds with pipelines, apply security policies, and record runtime activity and violations.
Supported integrations and their capabilities are identified in the Documentation and may change over time.
Endura security policies define permitted runtime behavior for protected builds and workloads. Depending on configuration, policies may govern file access, process execution and control, networking, containers, memory operations, kernel operations, capabilities, and other supported runtime activity.
Team Server may integrate with supported third-party systems to deliver policy-violation notifications, authenticate users, discover pipelines, or provide other functionality.
Any implementation, training, consulting, or other professional services are provided only if expressly included in an applicable Order or Service Agreement.
When Customer purchases or receives an Endura-managed Team Server deployment, Endura operates the Team Server infrastructure and associated managed components identified in the applicable Order.
Endura-managed operations may include infrastructure provisioning, database operation, backups, software updates, and maintenance.
Unless expressly stated in an applicable Service Agreement or service level agreement, Endura does not guarantee any specific level of availability, uptime, response time, recovery time, or support response.
Customer remains responsible for:
When Customer deploys Team Server within Customer-controlled infrastructure, Customer is responsible for operating and securing that infrastructure.
Customer responsibilities include, as applicable:
Endura is not responsible for failures attributable to Customer infrastructure, Customer configuration, unsupported environments, insufficient resources, Customer-managed dependencies, or Customer's failure to follow the Documentation or apply applicable updates.
Runtime Sensor executes within Customer-controlled infrastructure unless otherwise expressly agreed.
Customer acknowledges that Runtime Sensor is systems-level security software and may require elevated operating-system privileges, including root access, privileged container execution, kernel capabilities, host namespace access, Kubernetes permissions, or access to security-relevant Linux interfaces.
Customer authorizes Endura software to exercise the privileges necessary to provide the configured functionality on systems where Customer installs or operates Runtime Sensor.
Customer will install Runtime Sensor only on systems Customer owns or is authorized to monitor and protect.
Endura security policies may support multiple operating modes, including:
Available modes and behavior are described in the Documentation.
Customer acknowledges that policy derivation reflects behavior that actually occurred during the observed workload.
Derived policies may:
Customer is responsible for reviewing, validating, refining, and approving derived policies before using them for enforcement.
When enforcement is enabled, Endura may deny unauthorized covered operations, terminate offending processes, report policy violations, cause protected builds to fail, or otherwise prevent configured activity from completing.
Enforcement behavior may vary depending on the capabilities of the host kernel and Runtime Sensor operating mode. On systems where pre-operation LSM enforcement is unavailable, certain protections may rely on detection and process termination rather than pre-execution denial.
Customer acknowledges that an incorrectly configured or insufficiently tested security policy may interfere with legitimate applications, builds, processes, network connections, or other system activity.
Customer is responsible for appropriate testing, staged rollout, backups, recovery procedures, and change management before enabling enforcement in production or other critical environments.
Team Server may provide user authentication, roles, access scopes, policy ownership, personal access tokens, Sensor tokens, and other access-control mechanisms.
Customer is responsible for:
Credentials may not be shared with unauthorized persons.
Customer must promptly notify Endura if Customer becomes aware of unauthorized access to a managed Team Server account or Endura-issued credential.
Subject to Customer's compliance with these Terms and payment of applicable fees, Endura grants Customer a limited, non-exclusive, non-transferable, non-sublicensable license during the applicable subscription term to install, access, and use the Services solely for Customer's internal business purposes and within the quantities, deployments, pipelines, users, or other limitations specified in the applicable Order.
Customer may permit its employees and contractors to use the Services solely on Customer's behalf, provided Customer remains responsible for their compliance with these Terms.
Endura grants you a limited, revocable, non-exclusive right to access the Website and Documentation for lawful purposes relating to evaluating, purchasing, deploying, or using Endura Services.
Except to the extent expressly permitted by applicable law, an applicable open-source license, or a written agreement with Endura, you may not:
The Services may include open-source components. Open-source components are governed by their applicable licenses to the extent those licenses require terms different from these Terms.
Customer will use the Services only for lawful and authorized purposes.
Customer will not:
Customer is responsible for ensuring that its systems meet the prerequisites and supported-environment requirements described in the Documentation.
The Services may interoperate with third-party services, including CI/CD platforms, identity providers, notification platforms, container registries, cloud providers, and other infrastructure.
When Customer configures an integration, Customer authorizes Endura to communicate with and process information from the applicable third-party service as necessary to provide the configured functionality.
Customer is responsible for obtaining and maintaining all permissions, accounts, tokens, credentials, and licenses required for Customer's use of third-party services.
Third-party services are governed by their own terms and privacy practices. Endura does not control and is not responsible for third-party services, including their availability, security, APIs, changes, errors, or discontinuation.
Changes made by third-party providers may affect Endura integrations.
Fees, subscription quantities, subscription periods, and pricing are specified in the applicable Order.
Unless otherwise expressly stated in an Order, fees are non-refundable.
Unless otherwise specified in an Order:
Fees are exclusive of sales, use, value-added, withholding, and similar taxes.
Customer is responsible for applicable taxes arising from its purchase of the Services, excluding taxes based on Endura's net income.
"Customer Data" means information submitted to or processed through the Services on Customer's behalf, which may include pipeline information, build information, runtime telemetry, logs, security policies, violations, configuration information, integration metadata, user information, and other information generated through Customer's use of the Services.
As between Customer and Endura, Customer retains ownership of Customer Data.
Customer grants Endura a limited, non-exclusive right to host, copy, transmit, process, and otherwise use Customer Data solely as reasonably necessary to provide, secure, maintain, support, and administer the Services and as otherwise permitted by the applicable Service Agreement, Privacy Policy, or Data Processing Agreement.
Customer represents that it has all rights and permissions necessary for Endura to process Customer Data as contemplated by these Terms.
Customer is responsible for determining what information its systems make available to Runtime Sensor, Team Server, and configured integrations.
Customer should not intentionally use the Services to process sensitive personal information, regulated data, authentication secrets, or other highly sensitive data unless such processing is necessary for the intended use of the Services and is covered by appropriate contractual and security safeguards.
For self-hosted Team Server and standalone Runtime Sensor deployments, Customer controls the infrastructure in which applicable Customer Data is stored and is responsible for its retention, backup, security, and deletion.
If Customer provides logs, diagnostics, exports, or other information to Endura for support or other purposes, that information will be treated as Customer Data under these Terms.
Endura may collect operational information concerning use and performance of the Services, such as feature usage, software versions, error information, license information, and service performance data.
Endura may use aggregated or de-identified information that does not identify Customer or any individual to operate, secure, analyze, and improve the Services.
Endura will not claim ownership of Customer Data through such use.
Endura's collection and use of personal information is governed by its Privacy Policy.
Where Endura processes personal data on Customer's behalf and applicable law requires a data processing agreement, the parties may enter into an appropriate Data Processing Agreement.
Customer is responsible for complying with applicable privacy and data-protection laws relating to Customer Data and Customer's use of the Services.
"Confidential Information" means non-public information disclosed by one party ("Disclosing Party") to the other ("Receiving Party") that is identified as confidential or that reasonably should be understood to be confidential given its nature and the circumstances of disclosure.
Confidential Information may include technical information, source code, product designs, security policies, pipeline configurations, credentials, vulnerability information, business plans, pricing, Customer Data, and other proprietary information.
The Receiving Party will:
Confidentiality obligations do not apply to information that the Receiving Party can demonstrate:
If disclosure is required by law or legal process, the Receiving Party may disclose the required information and, where legally permitted, will provide reasonable advance notice to the Disclosing Party.
For Endura-managed Services, Endura will use commercially reasonable administrative, technical, and organizational safeguards appropriate to the nature of the Services.
Customer acknowledges that no security product, software platform, network, or system can be guaranteed to be completely secure or free from vulnerabilities.
For Customer-managed deployments, Customer is responsible for securing its infrastructure, networks, databases, operating systems, credentials, configuration, authentication systems, and other components under Customer's control.
Customer is responsible for implementing appropriate security controls independent of Endura based on Customer's risks and requirements.
Endura may release updates, bug fixes, security updates, new versions, or changes to the Services and Documentation.
For managed Services, Endura controls the deployment of updates unless otherwise stated in an applicable Order.
For self-hosted deployments, Customer is responsible for applying updates and maintaining supported versions.
Certain Endura components must maintain compatible software versions to exchange data correctly. Customer is responsible for following compatibility and upgrade guidance provided in the Documentation.
Endura may discontinue support for obsolete versions upon reasonable notice or as otherwise specified in an applicable support policy or Service Agreement.
Endura may perform maintenance on managed Services. Except where expressly specified in an applicable Service Agreement, scheduled or emergency maintenance does not create a guarantee of uninterrupted availability.
Support, response times, support channels, and any service-level commitments are governed by the applicable subscription, Order, support policy, or Service Agreement.
Nothing in these Terms creates a service-level agreement or guaranteed support response time.
Endura and its licensors retain all rights, title, and interest in and to:
No rights are granted except those expressly stated in these Terms or an applicable Service Agreement.
Customer retains all rights in Customer Data as described in Section 11.
If Customer provides suggestions, ideas, enhancement requests, or other feedback relating to the Services ("Feedback"), Customer grants Endura a worldwide, perpetual, irrevocable, royalty-free right to use, reproduce, modify, incorporate, and otherwise exploit the Feedback without restriction or obligation.
Feedback does not include Customer Confidential Information or Customer Data.
EXCEPT FOR WARRANTIES EXPRESSLY PROVIDED IN AN APPLICABLE SERVICE AGREEMENT, THE WEBSITE AND SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE."
TO THE MAXIMUM EXTENT PERMITTED BY LAW, ENDURA DISCLAIMS ALL IMPLIED OR STATUTORY WARRANTIES, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.
WITHOUT LIMITING THE FOREGOING, ENDURA DOES NOT WARRANT THAT:
ENDURA IS A SECURITY CONTROL AND DOES NOT REPLACE CUSTOMER'S RESPONSIBILITY FOR SECURE SOFTWARE DEVELOPMENT, VULNERABILITY MANAGEMENT, IDENTITY AND ACCESS MANAGEMENT, BACKUPS, INCIDENT RESPONSE, BUSINESS CONTINUITY, OR OTHER APPROPRIATE SECURITY PRACTICES.
Customer will defend, indemnify, and hold harmless Infrared Security, LLC, its affiliates, and their respective officers, directors, employees, and agents from third-party claims, liabilities, damages, judgments, losses, costs, and reasonable attorneys' fees arising from:
Endura will provide Customer reasonable notice of an indemnified claim and reasonable cooperation in the defense. Customer may control the defense and settlement, provided Customer may not enter into a settlement that admits liability by Endura or imposes non-monetary obligations on Endura without Endura's prior written consent.
Any Endura indemnification obligations will be governed by the applicable Service Agreement, if any.
TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR LOSS OF PROFITS, REVENUE, BUSINESS, GOODWILL, ANTICIPATED SAVINGS, OR BUSINESS OPPORTUNITY, ARISING FROM OR RELATING TO THE SERVICES, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
TO THE MAXIMUM EXTENT PERMITTED BY LAW, ENDURA'S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICES WILL NOT EXCEED THE GREATER OF:
ENDURA WILL NOT BE LIABLE FOR LOSS, FAILURE, INTERRUPTION, OR SECURITY INCIDENTS TO THE EXTENT CAUSED BY:
THE LIMITATIONS IN THIS SECTION DO NOT LIMIT CUSTOMER'S PAYMENT OBLIGATIONS, CUSTOMER'S LIABILITY FOR UNAUTHORIZED USE OR MISAPPROPRIATION OF ENDURA INTELLECTUAL PROPERTY, OR LIABILITY THAT CANNOT LAWFULLY BE LIMITED.
Endura may suspend access to managed Services where reasonably necessary because of:
Where reasonably practicable, Endura will provide notice and an opportunity to cure before suspension.
These Terms remain effective while you access the Website or Services.
Paid subscription terms are governed by the applicable Order.
Either party may terminate an applicable Service Agreement or Order for a material breach if the breaching party fails to cure the breach within the cure period stated in the applicable agreement or, if no period is stated, within thirty (30) days after written notice.
Endura may terminate or suspend access immediately for unlawful or malicious use that presents a material security or legal risk.
Upon expiration or termination:
Termination does not relieve Customer of payment obligations incurred before termination.
Customer will comply with applicable U.S. and international export-control and economic-sanctions laws, including the U.S. Export Administration Regulations and sanctions administered by the U.S. Department of the Treasury's Office of Foreign Assets Control.
Customer will not export, re-export, transfer, provide, or make the Services available in violation of applicable export restrictions or sanctions, including to prohibited persons, entities, or destinations.
Customer represents that it is not prohibited from receiving the Services under applicable export-control or sanctions laws.
Each party will comply with laws applicable to its performance under these Terms.
Customer is responsible for laws applicable to Customer's use of the Services, including applicable privacy, computer-access, export, anti-corruption, employment, industry-specific, and security requirements.
The Services and Documentation are commercial computer software and commercial computer software documentation.
If Customer is a U.S. Government entity, use, reproduction, release, modification, disclosure, or transfer of the Services is governed by these Terms and the applicable provisions governing commercial computer software, except to the extent otherwise expressly agreed in a government contract signed by Endura.
Endura may update these Terms from time to time.
When changes are made, Endura will update the "Last Updated" date and may provide additional notice for material changes.
For general Website use, continued use after revised Terms become effective constitutes acceptance of the revised Terms.
For an existing paid subscription, a materially adverse change to these Terms will generally take effect upon the next renewal unless the change is required sooner by law, regulation, security necessity, or a mutually executed agreement.
Neither party will be liable for failure or delay in performing an obligation, other than payment obligations, caused by circumstances beyond its reasonable control, including natural disasters, fire, flood, war, terrorism, civil unrest, government action, widespread internet or telecommunications failures, utility failures, labor disruptions, epidemics, pandemics, or significant cyberattacks not caused by that party's failure to exercise reasonable care.
The affected party will use commercially reasonable efforts to mitigate the effects of the event.
These Terms are governed by the laws of the State of Delaware, without regard to its conflict-of-law rules.
Any action arising out of or relating to these Terms will be brought exclusively in the state courts located in Sussex County, Delaware, or, where federal jurisdiction exists, the United States District Court for the District of Delaware.
Each party consents to the personal jurisdiction and venue of those courts.
Customer may not assign or transfer these Terms or an applicable subscription without Endura's prior written consent, except as otherwise provided in an applicable Service Agreement.
Endura may assign these Terms in connection with a merger, acquisition, corporate reorganization, sale of substantially all relevant assets, or by operation of law.
The parties are independent contractors.
These Terms do not create any partnership, joint venture, franchise, fiduciary, employment, or agency relationship between the parties.
Neither party may bind the other except as expressly agreed in writing.
Except as expressly provided in these Terms, no person or entity other than the parties has any right to enforce these Terms.
If a provision of these Terms is found invalid or unenforceable, that provision will be enforced to the maximum extent permitted by law, and the remaining provisions will remain in effect.
A party's failure to enforce a provision of these Terms does not waive that provision or any other provision.
A waiver is effective only if made in writing by the party granting it.
These Terms, together with any applicable Order, Service Agreement, Data Processing Agreement, and incorporated policies, constitute the entire agreement between the parties concerning the subject matter of the applicable Services.
They supersede prior or contemporaneous understandings concerning that subject matter.
Endura may provide operational and contractual notices electronically through Team Server or to the email address associated with Customer's account or Order.
Formal legal notices to Endura should be sent to:
Infrared Security, LLC
d/b/a Endura Security
18376 Southampton Drive
Lewes, DE 19958
United States
Questions regarding the Services or these Terms may be sent to:
support@endurasecurity.com
Provisions that by their nature should survive expiration or termination will survive, including provisions concerning:
By accessing or using the Website or Services, you acknowledge that you have read, understood, and agree to these Terms and Conditions.
