Kilasec Free Plan Agreement

This Free Plan Agreement (the "Agreement") is between Kilasec ("we", "us") and the organization on whose behalf you accept it ("Customer", "you"). It governs Kilasec workspaces on the Free plan.

1. Definitions

• "Service" — the Kilasec cloud console and APIs at kilasec.com and its subdomains.
• "Software" — the Kilasec collector container, device client, and any other Kilasec components we make available to you, including installers, SDKs, directory agents, identity connectors, and associated documentation.
• "Free Plan" — the no-charge Kilasec plan described in Section 3.
• "Device" — a computer enrolled in Customer's workspace with the Kilasec device client, counted as described in the Service's documentation.
• "Customer Data" — data you or your network transmit to or through the Software or Service, including inspected traffic metadata, policy events, and audit records.
• "Feedback" — suggestions, bug reports, feature requests, or other input about the Software or Service that you provide to us.

2. License

Subject to this Agreement, Kilasec grants Customer a limited, non-exclusive, non-transferable, non-sublicensable, revocable license to install and run the Software on infrastructure Customer owns or controls, and to use the Service, in each case solely for Customer's internal business purposes and within the Free Plan limits in Section 3.

3. Free Plan Limits

The Free Plan includes, per Customer workspace:

• up to five (5) Devices;
• up to one (1) collector;
• event history kept in the Service for up to thirty (30) days (Customer may choose a shorter period);
• the guardrail, redaction, spend-control, and approval features available on the Free Plan at the time of use.

The Service enforces these limits at enrollment. Customer will not circumvent them — for example, by creating multiple workspaces for the same organization, or by routing traffic from more than five people or machines through a collector to avoid enrolling Devices. One Free Plan workspace per organization. To go beyond these limits, contact ops@kilasec.com; paid plans are offered under a separate written agreement or order.

We may change the Free Plan's limits or features on at least thirty (30) days' notice. A reduction never removes Devices or collectors Customer has already enrolled; it applies to new enrollments.

4. Restrictions

Customer will not, and will not permit anyone else to:

1. redistribute, sell, rent, lease, sublicense, or host the Software or Service for any third party, or operate it as a service bureau or managed offering (MSPs using the Free Plan on behalf of a client must get our written approval first — email ops@kilasec.com);
2. reverse engineer, decompile, or disassemble the Software, except to the extent applicable law expressly permits despite this restriction;
3. remove or alter proprietary notices;
4. publish benchmarks or performance comparisons without our prior written consent;
5. use the Software or Service to build, train, or improve a competing product;
6. use the Software or Service in violation of applicable law, or attempt to probe or bypass its security other than good-faith testing on Customer's own workspace (which we encourage — report findings to ops@kilasec.com).

5. Network Interception Authorization

The Software's core function is to intercept, decrypt, inspect, and act on network traffic, which may include the content of employee and system communications with AI model providers. Customer represents and warrants that:

• Customer owns, or is expressly authorized by the owner to administer, every network segment, Device, and system on which it deploys the Software;
• Customer has full legal authority to intercept, decrypt, and inspect traffic on those networks and Devices;
• Customer has given all notices to, and obtained all consents from, its network and Device users (including employees and contractors) that are required by applicable law — including, as applicable, wiretap and electronic communications privacy laws, employee-monitoring notification laws, and data protection laws such as the GDPR and CCPA;
• Customer will scope TLS decryption only to endpoints appropriate for inspection and will use the Software's scoping controls to exclude traffic it is not entitled to inspect.

Customer is solely responsible for its compliance with this Section, and will indemnify, defend, and hold harmless Kilasec from any third-party claim arising out of Customer's breach of it.

6. Customer Data and Privacy

• Processor role. Kilasec processes Customer Data on Customer's behalf and under Customer's configuration. Customer controls what is inspected, what is redacted, and retention settings. Our Privacy Policy describes how we handle data.
• What we store. The Service stores traffic metadata, policy decisions, audit events, and — where Customer's policies capture it — inspected request content. The collector buffers events locally if the Service is unreachable and drains them when connectivity returns.
• No training. We do not use Customer Data to train machine-learning models.
• Safeguards. We protect Customer Data with reasonable administrative and technical safeguards. The Service is not yet SOC 2 certified (we are on the readiness track); do not route data into the Service that your own compliance obligations prohibit placing with an uncertified processor.
• Telemetry. The Software reports operational telemetry (version, health, and usage metrics) to the Service so we can operate it, including offline-collector alerting and plan-limit enforcement.
• Your data, your export. Customer Data belongs to Customer. Customer may download its events and audit records from the console or API, or deliver them continuously to its own SIEM or storage, at any time. Records older than the retention period in Section 3 are deleted automatically — export anything Customer needs to keep longer.
• Our access. Kilasec personnel access Customer Data only (a) with Customer's approval through the console's "View as" request, for the scope and time Customer approves, (b) as needed to operate, secure, and troubleshoot the Service in aggregate (for example, health and usage metrics), or (c) where required by law or to respond to a security incident. Every View as request and session is recorded in Customer's audit log.
• Deletion. After termination, Customer has thirty (30) days to export its Customer Data. We then delete it from the Service, excluding backups that age out on our standard cycle. Customer may ask us to delete it sooner by emailing ops@kilasec.com.

7. Feedback

Customer grants Kilasec a perpetual, irrevocable, worldwide, royalty-free license to use Feedback for any purpose, without obligation or attribution. Feedback is voluntary.

8. Confidentiality

"Confidential Information" means non-public information disclosed by either party in connection with this Agreement, including (for Kilasec) unreleased features and non-public documentation, and (for Customer) Customer Data and Customer's network and security configuration. Each party will use the other's Confidential Information only for purposes of this Agreement, protect it with at least reasonable care, and not disclose it to third parties except to employees and advisors under equivalent obligations. These obligations survive for three (3) years after termination and do not apply to information that is or becomes public through no fault of the recipient, was known before disclosure, or is independently developed.

9. No Support or Service Commitment

The Free Plan is provided without charge and:

• no service level, uptime, or support commitment applies; we may help on a best-effort basis at ops@kilasec.com;
• features may change or be removed; we will give at least thirty (30) days' notice before removing a feature Customer is actively using, except where required sooner for security or legal reasons;
• the Software must not be relied on as Customer's sole or primary security control. It is an additional enforcement layer; Customer remains responsible for its own security program, and for the conduct of its users and AI agents;
• if the Service is unreachable beyond the collector's buffering limits, or the workspace is suspended, the Software behaves as documented (fail-open pass-through by default for non-scoped traffic; documented fail-closed semantics for workload-identity rules). Customer is responsible for choosing the failure mode appropriate to its network.

10. Fees

The Free Plan is free of charge for the Free Period (Section 11) and requires no payment method. Customer is under no obligation to purchase anything. Customer remains responsible for its own costs, including the third-party AI provider fees of traffic that transits the Software.

11. Term, Suspension, and Termination

The Free Plan lasts ninety (90) days from the date Customer's workspace is activated (the "Free Period"); for workspaces activated before this version, the Free Period starts on the date this version takes effect for them under Section 15. This Agreement ends when the Free Period ends, unless terminated earlier under this Section; we will remind workspace admins by email at least thirty (30) days before then. To keep using the Service after the Free Period, Customer must move to a paid plan under a separate written agreement or order; otherwise the workspace is deactivated and the post-termination terms below and in Section 6 apply. Customer may terminate at any time by deleting its workspace or emailing ops@kilasec.com. We may terminate the Free Plan for any Customer on thirty (30) days' notice, or discontinue the Free Plan for everyone on ninety (90) days' notice. We may suspend a workspace immediately if Customer breaches Sections 3, 4, or 5, or if its use threatens the security or availability of the Service. On termination: the license in Section 2 ends, Customer will stop using the Service and uninstall the Software, and Sections 5–8 and 12–15 survive.

12. Warranty Disclaimer

THE SOFTWARE AND SERVICE ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTY OF ANY KIND. KILASEC DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND ANY WARRANTY THAT THE SOFTWARE WILL DETECT, REDACT, OR BLOCK ANY PARTICULAR DATA OR THREAT. NO DETECTION TECHNOLOGY IS PERFECT; FALSE POSITIVES AND FALSE NEGATIVES WILL OCCUR.

13. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW: (a) NEITHER PARTY WILL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, OR DATA; AND (b) KILASEC'S TOTAL LIABILITY UNDER THIS AGREEMENT WILL NOT EXCEED ONE HUNDRED U.S. DOLLARS (US $100). THESE LIMITS DO NOT APPLY TO CUSTOMER'S OBLIGATIONS UNDER SECTIONS 3 (FREE PLAN LIMITS), 4 (RESTRICTIONS), AND 5 (INTERCEPTION AUTHORIZATION) OR EITHER PARTY'S BREACH OF SECTION 8 (CONFIDENTIALITY).

14. Governing Law

This Agreement is governed by the laws of the State of California, excluding its conflict-of-laws rules. The exclusive venue for disputes is the state and federal courts located in El Dorado County, California, and each party consents to personal jurisdiction there.

15. General

This Agreement, together with our Terms of Service and Privacy Policy, is the entire agreement about the Free Plan; where they conflict, this Agreement controls. For workspaces that joined the Kilasec beta, this Agreement replaces the Beta Program Agreement from the date the workspace moved to the Free Plan. Customer may not assign this Agreement without our consent; we may assign it in connection with a merger, acquisition, or sale of assets. A waiver must be in writing. If a provision is unenforceable, the rest remains in effect. We may update this Agreement by posting a new version at kilasec.com/free-terms.html and notifying workspace admins by email at least thirty (30) days before it takes effect; continued use after that is acceptance. Notices to Kilasec: ops@kilasec.com.

---

Questions about these terms: ops@kilasec.com