Please read these Terms of Service ("Terms") carefully before using the website at reaochsecurity.org (the "Site") or the Reach Security cybersecurity platform ("Platform") operated by Reach Security, Inc. ("Reach Security," "we," "us," or "our").
By accessing the Site or Platform, you agree to be bound by these Terms. If you are entering into these Terms on behalf of a company or other legal entity, you represent that you have the authority to bind that entity to these Terms, and references to "you" mean that entity. If you do not have such authority, or if you do not agree with these Terms, you must not access or use our Site or Platform.
These Terms constitute a legally binding agreement between you and Reach Security governing your access to and use of the Site, Platform, and related documentation, software, features, and other services provided by Reach Security (collectively, the "Services"). Your access to and use of the Services is conditioned upon your acceptance of and compliance with these Terms.
We reserve the right to modify these Terms at any time. We will provide notice of material changes by updating the "Last updated" date at the top of this page and, where appropriate, by sending an email notification to registered account holders. Your continued use of the Services after any modification constitutes your acceptance of the modified Terms. If you do not agree to the modified Terms, you must stop using the Services.
These Terms should be read together with our Privacy Policy, Cookie Policy, and any subscription or service agreements you have entered into with Reach Security. In the event of a conflict between these Terms and a separately executed subscription agreement, the subscription agreement shall prevail.
You must be at least 18 years of age to use our Services. By using the Services, you represent and warrant that you are at least 18 years old and have the legal capacity to enter into binding agreements. If you are using the Services on behalf of a company or organization, you represent and warrant that you are authorized to act on behalf of that entity and to bind it to these Terms.
Our Services are intended for business and professional use. They are not designed for consumer use, and we do not direct our Services to consumers. The Platform is specifically designed for enterprise security professionals and organizations operating cybersecurity programs.
To access certain features of the Platform, you must register for an account. When registering, you agree to provide accurate, complete, and current information. You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account.
You agree to: (a) create a strong, unique password for your account; (b) maintain the security of your credentials and immediately notify us at security@reaochsecurity.org of any unauthorized access to your account or any other security breach; (c) ensure that you exit from your account at the end of each session when accessing the Services on a shared or public device; and (d) not share your account credentials with any other person.
We reserve the right to suspend or terminate your account if we reasonably believe your credentials have been compromised, or if we detect activity inconsistent with authorized use. We will not be liable for any loss or damage arising from your failure to maintain the security of your account credentials.
Subject to these Terms and any applicable subscription agreement, Reach Security grants you a limited, non-exclusive, non-transferable, revocable license to access and use the Services for your internal business security purposes. This license does not include the right to sublicense, resell, or provide the Services to third parties.
When using the Services, you agree to:
You agree not to use the Services to:
The Services, including the Platform, Site, software, algorithms, documentation, and all content made available through the Services, are and remain the exclusive property of Reach Security and its licensors. All intellectual property rights in the Services, including patents, copyrights, trademarks, trade secrets, and other proprietary rights, are owned by or licensed to Reach Security. Nothing in these Terms grants you any right to use any of Reach Security's trademarks, service marks, logos, domain names, or other distinctive brand features without our prior written consent.
The Reach Security name, the "ReachSec" mark, the shield logo, and all related marks and logos are trademarks or registered trademarks of Reach Security, Inc. in the United States and other countries. All other trademarks mentioned in the Services are the property of their respective owners.
You retain all intellectual property rights in the security telemetry, configurations, and other data you provide to or collect through the Platform ("Customer Data"). You grant Reach Security a limited, non-exclusive license to access, process, and use Customer Data solely for the purpose of providing and improving the Services pursuant to our data processing agreement.
Reach Security will not use Customer Data to train machine learning models in ways that would expose your specific security configurations, vulnerabilities, or incident data to other customers. We may use aggregated, anonymized, and de-identified data derived from Customer Data for the purposes of improving our threat detection capabilities, provided that such data cannot reasonably be used to identify you or your organization.
If you provide Reach Security with any feedback, suggestions, or ideas regarding the Services, you grant Reach Security a perpetual, irrevocable, royalty-free, worldwide license to use, incorporate, and commercialize such feedback without restriction or compensation to you.
Certain features of the Platform are available only through paid subscriptions. Subscription terms, pricing, and features are described on our pricing page and in any subscription agreement you execute with Reach Security. By subscribing to the Platform, you agree to pay the applicable subscription fees and to the payment terms set forth in your subscription agreement.
Unless otherwise stated in your subscription agreement, subscription fees are due in advance and are non-refundable, except as required by applicable law or as expressly stated in your subscription agreement. We reserve the right to modify subscription pricing with reasonable advance notice. Continued use of the Platform after a price change takes effect constitutes your acceptance of the new pricing.
Failure to pay applicable fees may result in suspension or termination of your access to paid features of the Platform. Reach Security is not responsible for any loss of data or security incidents arising from suspension of services due to non-payment.
In connection with your use of the Services, you may have access to non-public information about Reach Security's technology, business, products, clients, and operations ("Confidential Information"). You agree to: (a) maintain the confidentiality of Reach Security's Confidential Information with at least the same degree of care you use to protect your own confidential information, but no less than reasonable care; (b) use Confidential Information only for the purpose of using the Services; and (c) not disclose Confidential Information to any third party without Reach Security's prior written consent.
Similarly, Reach Security treats all Customer Data and non-public information about your security environment, infrastructure, and incidents as confidential and will not disclose it except as described in our Privacy Policy and Data Processing Agreement.
The Platform may integrate with or provide access to third-party services, applications, and data sources. Your use of any third-party services is subject to the terms and conditions of those third parties. Reach Security does not control third-party services and is not responsible for their availability, accuracy, security, or content. We encourage you to review the terms and privacy policies of any third-party services before integrating them with our Platform.
THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT ANY WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, REACH SECURITY DISCLAIMS ALL WARRANTIES, INCLUDING WITHOUT LIMITATION: (A) WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT; (B) WARRANTIES THAT THE SERVICES WILL BE UNINTERRUPTED, ERROR-FREE, OR COMPLETELY SECURE; (C) WARRANTIES THAT THE SERVICES WILL DETECT ALL SECURITY THREATS OR PREVENT ALL SECURITY INCIDENTS; AND (D) WARRANTIES REGARDING THE ACCURACY, COMPLETENESS, OR TIMELINESS OF ANY THREAT INTELLIGENCE OR DETECTION OUTPUT PROVIDED THROUGH THE SERVICES.
Cybersecurity is an inherently complex field, and no security product or service can guarantee complete protection against all threats. The Services are designed to improve your security posture and detection capabilities, but they do not guarantee that your systems will not be compromised. You remain solely responsible for maintaining adequate security measures for your organization's systems, data, and infrastructure.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL REACH SECURITY BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR EXEMPLARY DAMAGES, INCLUDING WITHOUT LIMITATION DAMAGES FOR LOSS OF PROFITS, REVENUE, DATA, BUSINESS, GOODWILL, OR SECURITY INCIDENTS, ARISING OUT OF OR IN CONNECTION WITH YOUR USE OF THE SERVICES, EVEN IF REACH SECURITY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, REACH SECURITY'S TOTAL CUMULATIVE LIABILITY TO YOU FOR ALL CLAIMS ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICES SHALL NOT EXCEED THE GREATER OF: (A) THE AMOUNTS PAID BY YOU TO REACH SECURITY IN THE TWELVE MONTHS PRECEDING THE CLAIM; OR (B) ONE HUNDRED DOLLARS ($100).
The limitations of liability above shall apply regardless of the form of action, whether in contract, tort (including negligence), strict liability, or otherwise, and whether or not Reach Security has been advised of the possibility of such damages. Some jurisdictions do not allow the exclusion or limitation of incidental or consequential damages, so the above limitations may not apply to you.
You agree to indemnify, defend, and hold harmless Reach Security, its affiliates, officers, directors, employees, agents, licensors, and service providers from and against any claims, liabilities, damages, judgments, awards, losses, costs, expenses, or fees (including reasonable attorneys' fees) arising out of or relating to: (a) your violation of these Terms; (b) your use of the Services in violation of applicable law; (c) your Customer Data or any other data or content you provide to the Services; (d) any unauthorized use of your account; or (e) any claims that your use of the Services infringes the rights of a third party.
These Terms are governed by and construed in accordance with the laws of the District of Columbia and the federal laws of the United States, without regard to its conflict of law principles.
Any dispute arising out of or relating to these Terms or the Services shall first be subject to good-faith negotiation between the parties. If the dispute cannot be resolved through negotiation within 30 days, it shall be resolved through binding arbitration administered by the American Arbitration Association under its Commercial Arbitration Rules. The arbitration shall take place in Washington, DC. The arbitral award shall be final and binding, and judgment may be entered in any court of competent jurisdiction.
Notwithstanding the foregoing, either party may seek injunctive or other equitable relief in any court of competent jurisdiction to prevent unauthorized use of intellectual property or breach of confidentiality obligations.
You agree that any claim arising from or related to these Terms must be filed within one year after the cause of action arises, regardless of any statute of limitations to the contrary.
You may terminate your account at any time by contacting us at support@reaochsecurity.org. Reach Security may suspend or terminate your access to the Services at any time with or without notice if we believe you have violated these Terms, if required by applicable law, or for any other business reason at our sole discretion.
Upon termination: (a) your license to use the Services immediately terminates; (b) you must cease all use of the Services and delete any software components provided by Reach Security; and (c) Sections 5, 6, 8, 10, 11, 12, 13, and 15 shall survive termination and continue in full force and effect.
Entire Agreement: These Terms, together with the Privacy Policy, Cookie Policy, and any applicable subscription agreement, constitute the entire agreement between you and Reach Security regarding the Services and supersede all prior agreements, representations, and understandings.
Severability: If any provision of these Terms is found to be unenforceable or invalid, that provision shall be limited or eliminated to the minimum extent necessary so that the remaining provisions of these Terms shall continue in full force and effect.
Waiver: The failure of Reach Security to enforce any right or provision of these Terms shall not constitute a waiver of that right or provision.
Assignment: You may not assign or transfer these Terms or your rights under them without our prior written consent. Reach Security may freely assign these Terms in connection with a merger, acquisition, or sale of assets.
Force Majeure: Reach Security shall not be liable for any delay or failure in performance resulting from causes beyond its reasonable control, including acts of God, natural disasters, government actions, labor disputes, or failures of third-party service providers.
Contact: If you have questions about these Terms, please contact us at legal@reaochsecurity.org or by mail at Reach Security, Inc., 1150 Connecticut Avenue NW, Suite 900, Washington, DC 20036, United States.