TERMS OF SERVICE

By accessing or using Fix First Security ("the Service"), you agree to be bound by these Terms of Service. If you do not agree to these terms, do not use the Service. These terms constitute a legally binding agreement between you and 1001549742 Ontario Inc.

Fix First Security is an exposure validation platform that scans domains, IP addresses, URLs, and container images for security vulnerabilities. The Service validates findings against public threat intelligence including CISA KEV, EPSS, MITRE ATT&CK, and CWE, generates Fix First Scores, and produces executive, technical, and compliance reports. The Service is designed for authorized security testing by organizations assessing their own infrastructure or infrastructure they are explicitly authorized to test.

By submitting any target for scanning, you represent and warrant that: (a) You are the owner of the target, or you have explicit written authorization from the owner to conduct security scanning; (b) Your use of the Service complies with all applicable Canadian and international laws, including the Criminal Code of Canada (unauthorized computer access provisions); (c) You will not use the Service to scan targets you do not own or are not authorized to test. Fix First Security maintains authorization records for all scans. Unauthorized scanning of third-party systems is strictly prohibited and may result in immediate account termination, cooperation with law enforcement, and civil or criminal liability.

You must be at least 18 years of age and have authority to bind the organization on whose behalf you are registering. You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account. You agree to notify us immediately at info@fixfirstsecurity.com of any unauthorized use of your account.

Fix First Security offers subscription plans billed monthly in Canadian dollars (CAD). Your subscription begins after your free trial period. You authorize us to charge your payment method on a recurring monthly basis. All fees are non-refundable except as required by applicable Canadian consumer protection law. We reserve the right to modify pricing with 30 days written notice. Failure to pay may result in suspension or termination of your account.

You agree not to use the Service to: • Scan systems you do not own or are not authorized to test • Violate any applicable Canadian or international law or regulation • Attempt to gain unauthorized access to the Service's infrastructure • Transmit malicious code or interfere with the Service's operation • Resell, sublicense, or transfer access to the Service without our written consent • Use the Service in a manner that could harm Fix First Security, its infrastructure, or other users • Circumvent rate limits, authentication, or access controls

Your use of the Service is governed by our Privacy Policy, which is incorporated into these Terms by reference. We collect and process personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

The Service, including all software, scanning algorithms, intelligence mappings, scoring methodologies, reports, and content, is owned by 1001549742 Ontario Inc. and is protected by Canadian and international intellectual property laws. Your scan results and reports belong to you. We grant you a limited, non-exclusive, non-transferable license to use the Service for your internal security assessment purposes.

THE SERVICE IS PROVIDED "AS IS" WITHOUT WARRANTIES OF ANY KIND. FIX FIRST SECURITY DOES NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR DETECT ALL VULNERABILITIES. SECURITY ASSESSMENTS REFLECT A POINT-IN-TIME EVALUATION AND DO NOT GUARANTEE PROTECTION AGAINST ALL CYBERSECURITY THREATS. FIX FIRST SECURITY IS NOT RESPONSIBLE FOR ANY SECURITY INCIDENTS THAT OCCUR NOTWITHSTANDING USE OF THE SERVICE.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, FIX FIRST SECURITY AND ITS OFFICERS, DIRECTORS, EMPLOYEES, AND AGENTS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES. IN NO EVENT SHALL OUR TOTAL LIABILITY EXCEED THE AMOUNT PAID BY YOU TO FIX FIRST SECURITY IN THE TWELVE MONTHS PRECEDING THE CLAIM.

You may cancel your subscription at any time through your account settings or by emailing info@fixfirstsecurity.com. Upon cancellation, your account will remain active until the end of the current billing period. We may terminate or suspend your account immediately for breach of these Terms, including unauthorized scanning activity. Upon termination, your right to use the Service ceases and we may delete your data after 30 days.

These Terms are governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein. Any disputes arising from these Terms or the Service shall be subject to the exclusive jurisdiction of the courts of Ontario, Canada.

We reserve the right to modify these Terms at any time. Material changes will be communicated by email to the address on your account at least 14 days before taking effect. Your continued use of the Service after changes take effect constitutes acceptance of the revised Terms. The current version is always available at fixfirstsecurity.com/terms.html.

For questions about these Terms, contact us at: Fix First Security · 1001549742 Ontario Inc. Toronto, Ontario, Canada Email: info@fixfirstsecurity.com Phone: 647 848 0182