Terms of Service

1. Acceptance of Terms

By accessing or using Vigilante by Scalewidth's cyber defense platforms, including but not limited to SIEM, SOAR, EDR, SOC services, threat intelligence feeds, MISP integration, GRC tools, vCISO services, and post-quantum cryptography solutions (collectively the "Security Services"), you agree to be bound by these Terms of Service.

These terms constitute a legally binding agreement between you ("Client") and Vigilante by Scalewidth ("Vigilante", "we", "us"), a division of Scalewidth Infrastructure Inc., registered in New Delhi, India.

2. Definitions

Security Services

Vigilante's proprietary cyber defense platform including SIEM, SOAR, EDR, SOC operations, threat intelligence, MISP, GRC, vCISO advisory, and adversarial AI defense systems.

Client Data

Logs, events, telemetry, threat indicators, configurations, and intelligence data processed through the Security Services.

Threat Intelligence

Contextualized cyber threat information including IOC feeds, TTP descriptions, adversary profiles, and vulnerability intelligence.

3. Security Services

Vigilante provides enterprise-grade cyber defense solutions as detailed in your Service Order. Services include real-time threat detection, autonomous incident response, security monitoring, threat intelligence, compliance management, and cryptographic security advisory. All services are provided under a zero-trust architecture framework.

4. Account Security

Multi-factor authentication is mandatory for all Vigilante platform access. Clients must enforce least-privilege access controls and maintain strict credential hygiene. Any suspected compromise must be reported immediately to our SOC.

5. Fees

Fees are specified in your Service Order. All fees are non-refundable except as provided in these Terms. Vigilante reserves the right to suspend Security Services if payment is overdue by more than fifteen (15) days.

6. Client Obligations

Clients must not: use Security Services for unauthorized access or illegal purposes; attempt to bypass security controls; reverse engineer Vigilante's proprietary AI defense models; or share threat intelligence feeds with unauthorized third parties.

7. Data Handling

Client Data is processed exclusively within Vigilante's security enclave. Data is encrypted at rest (AES-256-GCM) and in transit (TLS 1.3). Threat intelligence shared across the Vigilante mesh is anonymized. Data retention follows regulatory requirements and contractual terms.

8. Security Commitments

Vigilante maintains SOC 2 Type II certification, ISO 27001, and undergoes quarterly penetration testing. Our SOC operates 24/7/365. We maintain incident response protocols aligned with NIST CSF and execute annual tabletop exercises with clients.

9. Service Levels

Vigilante guarantees 99.95% platform uptime. Mean time to detect (MTTD) for critical threats is under 60 seconds. Mean time to respond (MTTR) for automated responses is under 5 seconds. SLA credits apply for breaches of these commitments.

10. Intellectual Property

Vigilante retains all IP rights in its AI defense models, threat detection algorithms, SOAR playbooks, and platform technology. Client retains IP rights in its own threat intelligence contributions and security configurations.

11. Limitation of Liability

To the maximum extent permitted by law, Vigilante's liability is limited to fees paid in the preceding twelve months. This excludes breaches of confidentiality, IP infringement, and fraud. Security services are provided on an "as-is" basis; no security solution eliminates all risk.

12. Termination

Either party may terminate with thirty (30) days notice. Immediate termination for material breach. Upon termination, Client Data is exportable for thirty (30) days, then securely purged.

13. Governing Law

Governed by Indian law. Disputes resolved through arbitration in New Delhi under the Arbitration and Conciliation Act, 1996.

14. Contact