COMMERCIAL MASTER SERVICES AGREEMENT

Terms of Service

Effective Date: September 23, 2026 • Version 4.0

LEGAL REVIEW NOTICE: This agreement governs your use of the Shieldmix One SaaS security platform. Enterprise organizations executing custom Master Services Agreements (MSA) or Purchase Orders supersede standard online click-through terms.

1. Authorized Use & Scope Warranty

By enrolling target perimeters or launching security assessments, you expressly represent and warrant that you are the verified legal owner of the targeted domain, network, or application, or possess explicit written authorization from the target asset owner to conduct defensive security testing. Unauthorized testing against third-party targets is strictly prohibited and constitutes grounds for immediate account termination without refund.

2. Service Tiers & Commercial Billing

Shieldmix One offers Developer, Startup, Business, and Enterprise subscription tiers. Recurring subscriptions are billed in advance on either a monthly or discounted annual basis. Enterprise tiers may be billed via Net-30 purchase order invoicing. Fees are non-refundable except as required by applicable consumer protection laws.

3. Delineation of Assessment Categories

Shieldmix One provides three clearly separated security assessment categories:

AUTOMATED SECURITY ASSESSMENT: Algorithmic, non-destructive evaluations assessing SSL/TLS handshakes, HTTP security headers, DNS records, public exposures, and static source code indicators.
CONTINUOUS MONITORING: Background worker probes tracking perimeter configuration drift and credential exposures over time.
HUMAN-VERIFIED PENTEST: Scoped, time-bounded engagements executed under an executed Rules of Engagement charter by qualified security specialists to identify complex business logic and access control vulnerabilities.

4. Compliance Framework Mapping Disclaimer

Shieldmix One provides automated technical posture mapping against industry standards including SOC 2, ISO/IEC 27001, and PCI DSS. These technical readiness mappings do not constitute formal, independent, or accredited certification. Formal accreditation requires independent examination by an accredited audit firm (e.g., licensed CPA firm or accredited Certification Body).

5. Emergency Stop & Platform Safeguards

Both customer administrators and Shieldmix operations maintain unilateral authority to engage an Emergency Stop on automated scans or pentest engagements at any time if target anomalies, latency spikes, or service disruptions are detected.

6. Limitation of Liability

To the maximum extent permitted by applicable law, in no event shall Shieldmix Inc. be liable for any indirect, incidental, special, consequential, or punitive damages, or loss of profits or revenues, arising out of or related to your use of the platform.

7. Governing Law & Inquiries

These Terms shall be governed by and construed in accordance with the laws of the jurisdiction specified in your commercial order form or Master Services Agreement. For legal inquiries, contact legal@shieldmix.com.