SOC PRIME PLATFORM TERMS OF SERVICE
SOC Prime, Inc., a Delaware corporation (“SOC Prime”, “we”, “us”, or “our”), makes the Services (as defined below) available subject to the following SOC Prime Platform Terms of Service (“Terms”). SOC Prime may perform any of its obligations and exercise any of its rights under these Terms through its Affiliates, and SOC Prime remains responsible for their performance. The Services may be made available through the Site, through application programming interfaces (“API”), and/or through Connector Apps installed within the User’s environment, in each case as described in the Documentation and the Applicable Agreement.
For the purpose of these Terms, “you”, “your”, or “User” means the legal entity that accesses or uses the SOC Prime Platform (as defined below) or the Content (as defined below), and any individual who accesses or uses the SOC Prime Platform on behalf of and for the purposes of that legal entity.
The Services are offered exclusively to legal entities and to individuals acting for purposes relating to their trade, business, craft or profession. The Services are not offered, sold, or made available to consumers, and are not intended for personal, family or household use. By accepting these Terms you represent and warrant that you are acting for purposes relating to your trade, business, craft or profession and that you are not a consumer. Accordingly, laws and regulations conferring rights on consumers do not apply to your use of the Services, save for any right that cannot be excluded or limited under applicable mandatory law.
The foregoing does not restrict participation by individuals in the SOC Prime Threat Bounty Program or in educational or similar programs or projects operated by SOC Prime, which are governed by the then-current terms applicable to those programs as published or otherwise made available by SOC Prime.
PART 1 — ACCEPTANCE, DEFINITIONS AND PRECEDENCE
Introduction
Please read these Terms carefully before you use the Services. These Terms set out the basis on which SOC Prime makes the Services available to you and on which you may use them. These Terms are a legally binding contract between you and SOC Prime. By creating an Account, accepting these Terms electronically, entering into, issuing or accepting an Applicable Agreement, installing or using a Connector App, calling an API, or otherwise accessing or using the Services or the Content, you accept these Terms on behalf of the legal entity you represent, and you represent and warrant that you are authorized to bind that entity. If you are not so authorized, you must not access or use the Services.
SOC Prime’s Privacy Policy (“Privacy Policy”) is an integral part of these Terms. By using our Service, you agree to accept and to be bound by these Terms and Privacy Policy at all times.
In order to use and exercise the benefits of the Services, you will need internet access and one or more SIEM, EDR, XDR, NSM, NTA, NTDR, data lake, streaming or similar systems capable of processing the Content distributed via the SOC Prime Platform. You are solely responsible for procuring, configuring, maintaining and paying for those systems and for any third-party fees they incur.
Definitions
“SOC Prime Platform” means SOC Prime’s cross-platform threat detection, detection engineering and threat hunting platform, comprising the Services identified below together with the Content, Connector Apps, APIs and Documentation made available by SOC Prime. The SOC Prime Platform provides content and tools for searching, indexing, monitoring, analyzing, and visualizing information and data on cybersecurity threats to improve the efficiency of Security Information and Event Management (“SIEM”), Endpoint Detection and Response (“EDR”), Extended Detection and Response (“XDR”), Network Security Monitoring (“NSM”), Network Traffic Analysis (“NTA”), Network Threat Detection & Response (“NTDR”), data lake, and similar solutions.
The SOC Prime Platform may be accessed via the Site, via API, and/or via Connector Apps made available for download, in each case to the extent set out in the Applicable Agreement and the Documentation. The SOC Prime Platform comprises the following Services:
(a) “Prime Core” (formerly Threat Detection Marketplace or “TDM”) — the threat detection content repository and delivery Service, providing access to, search of, translation of and deployment of Content to the User’s connected systems;
(b) “Prime Architect” (formerly Uncoder AI) — the detection engineering Service enabling Users to research, author, translate, validate and enrich detection algorithms and to convert indicators of compromise into hunting queries, including the AI-assisted features described in the Section “Prime Architect Terms and Conditions”;
(c) “Prime Hunt” (formerly Attack Detective) — the Service that queries and analyses log data held in the User’s SIEM, EDR, XDR, data lake or similar systems in order to assess detection coverage and execute prioritized threat hunting queries, as described in the Section “Prime Hunt and Prime Detect Terms and Conditions”;
(d) “Prime Detect” — the Service that analyses real-time data streams from the User’s streaming and messaging systems, such as Apache Kafka and similar systems, as described in the Section “Prime Hunt and Prime Detect Terms and Conditions”.
Service-specific terms applicable to each Service are set out in the correspondingly titled Sections below and form an integral part of these Terms. SOC Prime may add, rename, modify or discontinue Services in accordance with the Section “Modification”, provided that SOC Prime will not materially reduce the functionality of a Service purchased under a Subscription during the then-current Subscription Term.
“Site” means SOC Prime’s website at https://socprime.com and its subdomains, including https://tdm.socprime.com and https://my.socprime.com, together with any successor or replacement domain identified by SOC Prime from time to time.
“Account” means the account at the SOC Prime Platform that is or will be created by a User or by SOC Prime. SOC Prime voluntarily creates accounts for members of the SOC Prime Threat Bounty Program or other programs or projects operated by SOC Prime.
“Affiliate” means an entity that directly or indirectly controls, is controlled by, or is under common control with a party; where “control” means the direct or indirect ownership of at least fifty percent (50%) of the then-outstanding voting shares or equity interests of that party, or the power to direct or cause the direction of the management and policies of that party, whether by contract or otherwise; but only for so long as such control relationship exists.
“Applicable Agreement” means the purchase order, price quotation, order form, statement of work, contract or other ordering document issued or accepted by SOC Prime under which the User orders a Subscription, including any order placed through an authorized reseller or marketplace, together with any amendment to such document agreed by the parties in writing. References in these Terms to the “Agreement”, the “Order”, the “Quote” or the “Price Quote” mean the Applicable Agreement.
“Content” means, individually and together, use cases, threat detection rules, queries, configurations for security information and event management systems, analytical packages, scripts, comments, feedback, and other materials provided as a part of the Services, whether by SOC Prime, Users, or a third party. Connector Apps and Documentation are not Content and are licensed separately as set out in these Terms.
“Service” and “Services” mean, individually and collectively, Prime Core, Prime Architect, Prime Hunt, Prime Detect and any other service, feature, module, API, Connector App or Documentation made available by SOC Prime as part of the SOC Prime Platform, in each case to the extent, in the configuration, and for the Subscription Term specified in the Applicable Agreement.
“Subscription” means the User’s then-current right to access and use the Services, of the type, tier, scope, volume and duration set out in the Applicable Agreement. A Subscription is always subject to payment of fees to SOC Prime. Trial Access is not a Subscription.
“Trial Access” means access to the Services granted by SOC Prime free of charge for evaluation purposes, as described in the Section “Trial Access”.
“Subscription term” means the period set out in the Applicable Agreement during which the User is entitled to access and use the Services. If the Applicable Agreement does not specify when the Subscription Term begins, it begins on the date SOC Prime first makes the Services available to the User.
“Connector Apps” means the connector, integration, collector and agent applications made available by SOC Prime for download from the Site, which enable the SOC Prime Platform to connect to, authenticate against, query and exchange data with the User’s SIEM, EDR, XDR, data lake, streaming or other systems, together with any updates thereto. Connector Apps are licensed as set out in the Section “Connector Apps” and, where a Connector App is supplied with its own licence terms, those terms govern that Connector App to the extent of any conflict.
“Documentation” means the technical documentation, specifications, and user guides for the Services made available by SOC Prime, as updated from time to time.
“Representatives” means the User’s employees, contractors, consultants and agents whom the User authorizes to access or use the Services under the User’s Account.
Order of Precedence
These Terms, the Applicable Agreement, and any terms incorporated into them by reference constitute the entire agreement between the parties with respect to the Services. In the event of any conflict or inconsistency, the following order of precedence applies, in descending order: (i) any separate written agreement signed by authorized representatives of both parties that expressly references and amends these Terms; (ii) the Applicable Agreement; (iii) the service-specific Sections of these Terms; and (iv) the remaining provisions of these Terms.
Unless expressly agreed by SOC Prime in a document signed by an authorized representative of SOC Prime, any additional, different or conflicting terms contained in or referenced by any purchase order, vendor portal, supplier registration, invoice, click-through, or other document issued by the User, whether before or after the date of the Applicable Agreement, are of no force or effect and are expressly rejected by SOC Prime, notwithstanding SOC Prime’s acknowledgement of, acceptance of, or performance under any such document.
PART 2 — ELIGIBILITY AND ACCOUNTS
Use on behalf of the organization
You represent and warrant to us that you have the full right, power, and authority to access and use the Service and, to the extent necessary, that you have obtained all necessary corporate or other authorizations or consents to access and use the Service. Thus, if you are an individual (e.g., employee or consultant) acting on behalf of an organization, you represent and warrant that you have obtained all necessary authorizations or consents (i.e., you must be an authorized representative) to accept these Terms on behalf of such organization so that, in addition to yourself, such organization is bound by the Terms.
You may access and use the Services only if SOC Prime is not restricted from providing the Services to you under the Export Control and Sanctions Laws (as defined below). As set out at the beginning of these Terms, the Services are not offered to individuals acting in a personal capacity.
User Account Registration
In order to use the Services, you must have a valid Account. To acquire an Account for the Services, you must provide SOC Prime with an electronic business or professional email address and other information ("User Data") requested during the registration of the Account or later when you use the Services. You agree to provide true, accurate, and complete User Data and keep such User Data updated to maintain its truthfulness, accuracy, and completeness. You agree that all User Data you provide, our use, and processing of such User Data will be governed by our Privacy Policy (https://my.socprime.com/privacy-policy/), which may be updated from time to time.
Notwithstanding the foregoing, individual users who participate in the SOC Prime Threat Bounty Program and/or educational or similar programs or projects operated by SOC Prime may be permitted to create an Account with access to services, products or features of the SOC Prime Platform using their personal email address with the prior written consent of the SOC Prime administrators. Such exceptions are granted on a case-by-case basis and will be subject to review and approval.
Each Account may be associated with only one organization. An individual may hold no more than one Account, irrespective of the number of email addresses that individual controls, and it is strictly prohibited to create duplicate or multiple Accounts for the same individual, whether using the same business email account or another email address within the same company domain.
The foregoing does not apply where SOC Prime expressly permits otherwise in writing, including in respect of participants in the SOC Prime Threat Bounty Program or in educational or similar programs or projects operated by SOC Prime, who may hold a separate Account for the purposes of that program in addition to any Account held on behalf of their employer. For the avoidance of doubt, nothing in this paragraph prevents an organization from holding multiple Accounts for different Representatives in accordance with the Applicable Agreement.
Except as expressly provided herein, you may not transfer, sell, combine, assign, or otherwise share your Account with any other person, and you may not use anyone else’s Account at any time. In cases where you have nevertheless authorized or registered another person to use your Account, or where you have acted negligently in safeguarding your Account as set forth above, you agree you are fully responsible for (i) the acts and omissions of such person accessing the SOC Prime Platform via your Account, (ii) controlling the person’s access to and use of the Services, and (iii) the consequences of any use or misuse by such person(s). You agree to immediately notify SOC Prime of any unauthorized use of your Account that you become aware of.
Manager Account. Accounts with the same company domain (“Team Member”) can be managed by one or more Manager Accounts, up to the number permitted by the Applicable Agreement, which can be assigned in settings without re-registering. Manager Accounts have access to the management pages, where they can supervise the Team Members’ accounts at their sole discretion and have the right: to add, edit, remove, send direct invitations to a Team Members emails, see the statistical information of the Team Members and other actions that will be added to the Manager Accounts by the SOC Prime. If you make changes to the Team Members’ Accounts, you represent that you have respective authorities to do so (e.g., from your employer).
Login and Passwords. You understand and agree that you are solely responsible for maintaining the confidentiality of the credentials (login, passwords) for accessing your Account. If you believe that the credentials have been compromised or you detect unauthorized access to your Account, report it to report@socprime.com immediately. We may suspend access to your Account if we notice any suspicious activity.
User Responsibilities. The User will promptly report any errors in the operation of the Services to SOC Prime and will not take any actions that would increase the severity of the error. The User will use the Services solely as described herein.
You agree not to create an Account and/or use the Services if your Account has previously been deactivated, deleted, and/or banned by us for further access to the Services. Additionally, you understand and agree that we may contact you via e-mail or otherwise with information relevant to your use of the Services.
PART 3 — THE SERVICES
Choosing a Subscription
We offer different types of Subscriptions. The Services included in your Subscription, the applicable tier and configuration, the permitted number of Representatives, Accounts, connected systems and instances, any applicable volume or usage limits, the fees, and the Subscription Term are set out in the Applicable Agreement. There is no published price list; to discuss the Subscription that is appropriate for the organization you represent, contact our sales team at sales@socprime.com or the authorized reseller or marketplace through which you purchase.
When you purchase a Subscription, you will have access, for the Subscription Term, to the Services and Content included in that Subscription as specified in the Applicable Agreement, in the configuration made generally available by SOC Prime from time to time.
SOC Prime may introduce, modify, rename, re-tier or discontinue Subscription types at any time. No such change will reduce the Services or Content included in a Subscription during the then-current Subscription Term, except as permitted under the Sections “Modification”, “Termination”, or “Export Control and Sanctions Laws”.
Trial Access
SOC Prime may make the Services, or selected Services or features, available to an organization free of charge for a limited evaluation period specified by SOC Prime (“Trial Access”). Trial Access is granted solely to enable evaluation of the Services and must not be used for production, operational or commercial purposes. Trial Access is available to each organization once, unless SOC Prime agrees otherwise in writing.
Notwithstanding anything to the contrary in these Terms, and to the maximum extent permitted by applicable law: (i) Trial Access is provided “as is” and “as available”, without warranty, support, maintenance, uptime commitment or service level of any kind; (ii) SOC Prime may modify, limit, suspend or terminate Trial Access at any time, for any reason or no reason, with or without notice, without liability; (iii) SOC Prime’s total aggregate liability arising out of or in connection with Trial Access, on any theory of liability, will not exceed one hundred United States dollars (US$100); (iv) on expiry or termination of Trial Access, your right to access the Services ceases immediately, you must cease all use of the Services and Content and uninstall and delete all Connector Apps, and SOC Prime may delete any data, configuration or Content associated with the Trial Access without further notice and without liability; and (v) if you do not enter into a Subscription before Trial Access expires, SOC Prime is under no obligation to provide any continued access, export, or migration assistance.
The Sections “Acceptable Use and Restrictions”, “Intellectual Property”, “Limited Warranties and Disclaimers”, “Limitation of Liability”, “Indemnity”, and “Export Control and Sanctions Laws” apply in full to Trial Access.
License to use the Services and Content
Unless otherwise agreed between the parties in the Applicable Agreement and subject to User’s compliance with these Terms, including the provisions set forth in the Sections “Third-Party Content”, “Third-Party Services”, “Acceptable Use and Restrictions”, “Payment Terms” and “Termination”, SOC Prime hereby grants User a limited, non-exclusive, non-sublicensable, non-transferable, revocable right, during the Subscription Term, to (a) access and use the Services; (b) download, deploy and use the Content made available through the Services; and (c) install and use the Connector Apps, in each case solely for the User’s internal business purposes, by the User and its Representatives, and in accordance with these Terms, the Documentation and the Applicable Agreement. The User is responsible for its Representatives’ compliance with these Terms and for all activity conducted under its Account. Connector Apps are licensed subject to the additional terms set out in the Section “Connector Apps”.
For the avoidance of doubt, unless otherwise expressly stated in an Applicable Agreement, the Subscription to the Services is intended exclusively for end users only and does not allow re-distribution, sub-distribution, or use of the Content for any party other than you (see “Acceptable Use and Restrictions” Section below). For redistribution of the Content to any third party (end user/customer) or using it in your services to third parties, please refer to the “MDR/MSSP Payment Terms” Section below or contact our sales team at sales@socprime.com.
Content Output generated through Prime Architect is not licensed to the User under this Section. Ownership of, and rights in, Content Input and Content Output are governed exclusively by the Section “Prime Architect Terms and Conditions”, in each case subject to the restrictions set out in the Section “Acceptable Use and Restrictions”.
SOC Prime does not guarantee the stable and correct operation of the Services in case of exceeding the number of end-users/computers, Representatives, Accounts, connected systems or instances connected to the Services indicated in the Applicable Agreement, incompatibility with hardware requirements and settings; violation of the operating conditions of virtual machines and hypervisors, and other requirements set in the Documentation.
Effect of Termination or Expiration of Subscription. The rights granted in this Section are granted for the Subscription Term only and terminate automatically upon expiry or termination of the Subscription. Unless otherwise expressly stated in the Applicable Agreement or confirmed by SOC Prime in writing, upon expiry or termination of the Subscription the User must immediately: (i) cease all access to and use of the Services; (ii) cease all use of all Content downloaded, deployed or otherwise obtained through the Services; (iii) remove such Content from all SIEM, EDR, XDR, NSM, NTA, NTDR, data lake, streaming and other systems into which it has been deployed; (iv) uninstall and delete all Connector Apps; and (v) delete or destroy all copies of the Content in its possession or control and, upon SOC Prime’s request, certify such deletion in writing.
No continued use of the Content is authorized after the Subscription Term ends. Nothing in these Terms grants, and no act, omission, forbearance, delay or failure by SOC Prime to enforce may be construed as granting, any perpetual, irrevocable, or post-termination licence to use the Services or the Content. Any use of the Content after the end of the Subscription Term is unlicensed, constitutes a material breach of these Terms, and infringes the intellectual property rights of SOC Prime and its licensors.
Where SOC Prime expressly permits limited retention or continued use of specified Content in writing, that permission is revocable at will and is granted strictly on the basis that: (i) the User uses such Content entirely at its own risk; (ii) the Content will not be supported, maintained or updated; (iii) SOC Prime does not warrant, and cannot guarantee, that the Content will remain effective against evolving threats; and (iv) SOC Prime has no responsibility or liability of any kind arising from such use and no obligation to provide support in connection with it.
To continue using the Services and the Content, renew your Subscription before it expires.
Acceptable Use and Restrictions
As a condition to the rights and licenses granted in the Section above, User agrees that neither User nor its Representatives will, and User will not permit any third party to: (a) access or use the Services (or any feature thereof) or any Content in a manner not specifically permitted by these Terms or the Applicable Agreement; or (b) use any Content or information obtained from or through the Services under a Subscription before the applicable fees have been paid in full.
Unless you have a prior written permission or license from us or as expressly permitted herein, you agree not to: (i) modify, adapt, translate, publicly display, publish, create derivative works of any Content or results from the Services; (ii) distribute, re-distribute, sub-distribute, sublicense, sell, rent or otherwise transfer the Services or Content in whole or in part to any third party (end user/customer) applicable for MDR/MSSP use (like using Content to provide services to end customers); (iii) deploy the Services on more SIEM/EDR/XDR/data lake/streaming instances than was allocated to you (unless otherwise indicated in the Applicable Agreement), or circumvent, disable, or exceed any technical or contractual usage limit; (iv) decompile, debug, disassemble, reverse engineer, simulate or derive source code or otherwise prepare any derivative works from the Services, Site, Connector Apps or Content in any manner, except to the extent such restriction is expressly prohibited by applicable mandatory law and then only after prior written notice to SOC Prime; (v) use any means of collecting data from the Services or Site not directly allowed, including any robot, spider, crawlers, deep-link, automated content scraping script, grabbers or other automatic device, program, techniques, algorithm or methodology to retrieve, index, scrape, data mine or in any way gather, copy or monitor any portion of the Site, Content or Services; (vi) use the Services for providing time-sharing services, managed detection and response services, SaaS offering, service bureau, or as part of an application services provider/service offering, except as expressly permitted under the Section “MDR/MSSP Payment Terms” and the Applicable Agreement; (vii) alter or remove any copyright, trademark, or proprietary notices, credits, or legends contained on or in or provided through the Services; (viii) make available to any third party any intellectual property of SOC Prime related to the Services; (ix) use Content, Services or any portion thereof, in any manner or for any purpose that infringes, misappropriates, or otherwise violates any intellectual property right or any applicable law, regulation, or order; (x) embed the Site and/or the Services into other web sites and systems; (xi) interfere or attempt to interfere with the proper operation of the Services or any activities conducted through the Services; (xii) provide the Content to any competitor of SOC Prime; (xiii) use the Services or Content in a way that infringes, misappropriates or violates any person’s rights; (xiv) use the Services in violation of any SOC Prime policy or in a manner that violates applicable law, including but not limited to anti-spam, export control, privacy, and anti-terrorism laws and regulations, and you agree that you are solely responsible for compliance with all such laws and regulations; (xv) copy, distribute, publish, or make available any Connector App other than as necessary to install and use it within your own environment as permitted by these Terms; (xvi) share, resell, or make available Account credentials or API keys to any person other than a Representative; (xvii) conduct any penetration test, vulnerability scan, load test, or security assessment of the Services without SOC Prime’s prior written consent; or (xviii) use the Services or Content for competitive benchmarking, or publish any benchmark, performance, or comparative test results relating to the Services, without SOC Prime’s prior written consent.
You shall not, and shall not permit any third party to, use, ingest, copy, or process the Services, the Content (including Sigma, Roota, and SIEM-native rules, threat hunting queries, IOC collections, Content Lists, and any associated metadata), or any Content Output to the extent that it incorporates, reproduces, or is derived from the Content or the Services, in whole or in part, for the purpose of: (i) training, fine-tuning, validating, or otherwise developing any machine learning model, large language model, neural network, or other artificial intelligence system; (ii) creating embeddings, vector representations, or any index intended for retrieval-augmented generation (“RAG”) or similar retrieval, grounding, or augmentation of an AI system; (iii) building any dataset, corpus, or knowledge base for any of the foregoing; or (iv) developing any product, service, or model that competes with or replicates the Services or Content. This restriction applies regardless of whether the model or system is hosted internally by you, by a third party, or by a third-party AI provider.
This Section is a contractual covenant governing your permitted use of the Services and the Content and is a material condition of the licence granted to you. It does not transfer, reduce, or otherwise affect the ownership of Content Input or Content Output as set out in the Section “Prime Architect Terms and Conditions”, and it does not restrict your use of Content Output that you own and that does not incorporate, reproduce, or derive from the Content or the Services.
For clarity, this Section does not restrict: (a) your use of the AI features made available within the Services by SOC Prime for their intended purpose; or (b) the ordinary operation of your own security tooling, including the indexing, correlation, enrichment, detection and analytics functions of the SIEM, EDR, XDR, data lake, streaming or similar systems into which the Content has been lawfully deployed, provided that such operation is not undertaken for any purpose described in (i) to (iv) above.
Violation of this Section may result in the suspension or termination of your Subscription and access to the Services, and SOC Prime reserves the right to claim indemnification for the losses incurred by SOC Prime as a result of your breach of these restrictions. You acknowledge that a breach of this Section may cause SOC Prime irreparable harm for which monetary damages would be an inadequate remedy, and that SOC Prime is entitled to seek injunctive or other equitable relief in addition to any other remedy available to it, without the requirement to post a bond.
You may “cache” pages of the Site for the sole purpose of increasing the speed and efficiency at which you access the Site. Any other copy or use of a portion of the Site is not authorized and will constitute a violation of these Terms. You shall not interfere or attempt to interfere with the operation of the Site in any way through any means or device, including, but not limited to, spamming, hacking, uploading computer viruses, archive bombs or time bombs, or any other means expressly prohibited by any provision of these Terms or by law.
Services & Support
We're committed to providing you with the best possible support experience. Our support team can be reached via email: support@socprime.com or via the Platform.
The support option under Subscriptions has the following conditions:
- Expected response time: Same Business Day, Monday-Friday (excluding statutory US holidays): 9:00 AM to 5:00 PM GMT
- Expected resolve time: From 24 Hours to 5 Business Days
We may offer additional paid support. For details, please contact our support or sales team.
Service Level Agreement (SLA)
For Subscriptions, SOC Prime shall maintain the availability of the Service 99.5% of the time. “Availability” means the percentage of the time the Service is available to User calculated in the following manner:
Availability in the calendar month = [total monthly minutes – minutes of unavailability/total monthly minutes] * 100%
Availability will not include minutes of unavailability resulting from events of Force Majeure (except to the extent avoidable by SOC Prime’s commercially reasonable efforts) or the User's failure to use the Service. Our Support will make the best effort to resolve any issues to your satisfaction as quickly as possible and achieve the maximum level of Availability.
You may have other SLA terms in the Agreement.
PART 4 — SERVICE-SPECIFIC TERMS
I. PRIME ARCHITECT TERMS AND CONDITIONS (formerly Uncoder AI)
As part of the Services, SOC Prime offers the Prime Architect Service, accessible by the User using its SOC Prime Platform access credentials. By using Prime Architect, you agree to these Prime Architect Terms and Conditions (“Prime Architect Terms”), which form an integral part of these Terms. The rights and restrictions set out elsewhere in these Terms apply in full to Prime Architect, as supplemented by these Prime Architect Terms. In the event of any conflict between these Prime Architect Terms and the general provisions of these Terms, these Prime Architect Terms prevail in respect of Prime Architect.
Definitions for the Prime Architect Service
“Prime Architect” or “Prime Architect Service” means the Service provided through the SOC Prime Platform’s augmented intelligence framework for advanced detection engineering, backed by Sigma and MITRE ATT&CK®, which enables the User to research, author, translate, validate and enrich detection algorithms and to convert indicators of compromise into hunting queries, together with any additional functionality added to it from time to time. Prime Architect incorporates the functionality previously made available under the name “Uncoder AI”, together with additional features.
“Content Input” means detection code or any text sent by the User to Prime Architect to have it translated/reverse translated by the machine translation infrastructure operated by SOC Prime or by third-party providers engaged by SOC Prime as described below, as well as for other functionality of the Prime Architect Service that is or may be added in the future;
“Content Output” means any translated/reverse translated or otherwise received text or detection code that has been obtained using Prime Architect;
“Prime Architect Content” - collectively, Content Input and Content Output.
Responsibility for the Prime Architect Content
The User is responsible for (i) Content Input, including ensuring that it does not violate any applicable law, these Terms, or any third-party intellectual property rights; (ii) maintaining the security of the User’s Account and API access keys; (iii) all activities that occur under the User’s Account or API access keys; and (iv) ensuring that it has all rights, authorizations and consents necessary to submit the Content Input to the Prime Architect Service and to permit its processing as described in these Prime Architect Terms.
The User is obligated to observe all legal requirements for processing and using data transmitted to the Prime Architect Service. The User guarantees not to share any personal or sensitive information in connection with the Prime Architect Service without the express consent of the data subject or other sufficient legal grounds. If your use of the Prime Architect Service involves personal data, you must have and provide, if needed for SOC Prime’s legal obligations, necessary consents or other evidence of the processing of such data in accordance with applicable law.
Use of LLM Models in the Prime Architect Service
As part of Prime Architect, SOC Prime provides AI-powered features that leverageLarge Language Models (LLMs) for specific functionalities.
(a) Use of third-party LLM providers. When translating queries between languages, some query components (e.g., functions) may require external assistance for accurate translation. With the User’s prior consent, obtained through the interface before first use, such query components will be sent to a third-party large language model provider engaged by SOC Prime (currently OpenAI) for translation and description. The User may withdraw or reinstate that consent at any time through the interface. SOC Prime may change its third-party LLM providers from time to time and will identify the then-current providers in the Documentation.
The User acknowledges and accepts the following:
- Only specific query components will be sent;
- The User is responsible for ensuring that shared components do not contain personal data;
The terms and privacy practices of the relevant third-party LLM provider apply to the processing of the components transmitted to it, and the Section “Third-Party Services” applies to that provider; and
- SOC Prime does not guarantee the accuracy, completeness, or production-readiness of translations generated by such models.
(b) Use of a Local Private Open-Source LLM for AI Summaries Users can generate an AI-generated summary of a query by selecting an option in the interface. In this case, the entire query is sent to SOC Prime’s privately hosted open-source LLM models.
The User acknowledges and accepts the following:
- The User is responsible for ensuring that shared data does not contain personal data.
- SOC Prime does not guarantee the accuracy, completeness, or quality of AI-generated summaries.
AI-Generated Output
The User acknowledges and agrees that: (i) Prime Architect employs probabilistic and machine learning techniques, and Content Output may be inaccurate, incomplete, outdated, or otherwise unsuitable for the User’s purposes; (ii) Content Output does not constitute security advice and must not be relied upon as a substitute for the User’s own review, testing and validation, and the User must review and validate all Content Output before deploying it into any production system; (iii) identical or similar Content Input submitted by different users may produce identical or similar Content Output, and SOC Prime makes no representation that Content Output is unique to the User or that similar output will not be generated for others; and (iv) SOC Prime does not warrant that Content Output is accurate, error-free, or free from infringement of third-party rights. The User’s use of Content Output remains subject to the Section “Acceptable Use and Restrictions”.
License to Use the Prime Architect Service
As long as the User complies with these Terms, SOC Prime grants the User a limited, non-exclusive, non-transferable, non-sublicensable, revocable worldwide right to use the Prime Architect Service for its internal business purposes during the Subscription Term and within the scope of these Prime Architect Terms.
SOC Prime does not retain Prime Architect Content following completion of the relevant processing, other than: (i) transiently, to the extent technically necessary to provide the Prime Architect Service; (ii) where the User elects to save Content within the SOC Prime Platform, including in Custom Repositories; and (iii) within service-related logs as described below. The User grants SOC Prime a non-exclusive, royalty-free licence to host, process, transmit and display Prime Architect Content solely to the extent necessary to provide and operate the Prime Architect Service for the User.
SOC Prime can store and use service-related logs to the extent technically required (i) to provide, operate, maintain, develop, and improve the Prime Architect Service for the User; (ii) for billing, security, and statistical purposes; and (iii) to comply with applicable law. The User acknowledges that such logs may contain Content Output. SOC Prime will retain such logs only for as long as necessary for the purposes set out above and will apply to them the same security measures that apply to Prime Architect Content.
Content Input
The User (or other party that owns rights to the Content Input) retains any and all intellectual property rights to the Content Input.
Content Output
As between the User and SOC Prime, Content Output generated by the Prime Architect Service belongs to the User or to the third party that owns the corresponding Content Input, as determined by applicable law. SOC Prime does not claim ownership of Content Output.
The foregoing does not apply to, and SOC Prime and its licensors retain all right, title and interest in and to, any Content or other material of SOC Prime or its licensors that is incorporated into, reproduced in, or from which Content Output is derived. Where Content Output incorporates or is derived from the Content, the User’s rights in that Content Output are limited to the licence granted in the Section “License to use the Services and Content” and remain subject to the Section “Acceptable Use and Restrictions”.
Prime Architect Service Ownership
All rights, titles, and interests in and to the Prime Architect Service and any of its features will remain solely with SOC Prime or its third-party suppliers or partners.
II. PRIME HUNT AND PRIME DETECT TERMS AND CONDITIONS (Prime Hunt formerly Attack Detective)
This Section is an integral part of these Terms and governs your use of Prime Hunt and Prime Detect. By accessing or using Prime Hunt or Prime Detect, you agree to comply with and be bound by this Section. The rights and restrictions set out elsewhere in these Terms apply in full to Prime Hunt and Prime Detect, as supplemented by this Section. In the event of any conflict between this Section and the general provisions of these Terms, this Section prevails in respect of Prime Hunt and Prime Detect.
Prime Hunt
Prime Hunt is a threat hunting and detection coverage Service that connects to the User’s SIEM, EDR, XDR, data lake or similar systems in order to monitor, query and analyse the log data held in those systems. Prime Hunt can verify threat hunting hypotheses automatically, produce a heatmap over a selected time period showing triggered Tactics, Techniques and Procedures (TTPs), assist the User in assessing whether the visualized data can be attributed to a relevant attack, and streamline threat hunting procedures by serving a set of prioritized queries.
The investigation process consists of two key stages: data audit and scanning.
Data Audit
During the data audit phase, Prime Hunt automatically analyses the log data collected in the User’s data planes. This analysis aims to determine the User’s coverage of the MITRE ATT&CK® framework and to identify any potential gaps in the User’s log sources.
Scanning
Once the data audit is complete, Prime Hunt proceeds to the scanning phase. This involves querying the User’s logs for the period selected by the User, using translations of relevant rules from the SOC Prime Platform, tailored to match the User’s specific data planes.
Prime Detect
Prime Detect analyses real-time data flows from the User’s streaming and messaging systems, including Apache Kafka and similar systems, and applies detection logic from the SOC Prime Platform to those data flows in order to identify potential threats as the data is produced.
How Prime Hunt and Prime Detect Process Data
Prime Hunt and Prime Detect operate by transmitting queries to the User’s connected systems and receiving the results of those queries. Except as expressly stated below, the results returned to the SOC Prime Platform are hashed, and SOC Prime does not receive the underlying log records or their contents in unhashed form.
Certain features of Prime Detect require SOC Prime to receive a limited category of data in unhashed form, specifically host names. Such features are not enabled by default. Before any such feature is used for the first time, the Service will present the User with an additional confirmation dialogue identifying the data concerned, and the feature will be enabled only where the User expressly confirms. Where the User so confirms, host names received by SOC Prime are stored by SOC Prime in encrypted form and are used solely to provide the Services to the User. The User may disable such features at any time through the interface.
The User is responsible for determining whether the data held in its connected systems, including host names, constitutes personal data or other regulated data under laws applicable to the User, and for ensuring that it has a lawful basis for the access, querying and processing described in this Section. The processing of personal data by SOC Prime in connection with the Services is governed by the Privacy Policy and, where applicable, by the data processing agreement entered into between the parties.
Access to the User’s Systems; Credentials
In order to use Prime Hunt or Prime Detect, the User must grant SOC Prime access to its connected systems. Such access is established by means of API credentials, access keys, tokens or similar authentication material (“Credentials”), which the User provides through the Site or configures when installing a Connector App.
The User: (i) represents and warrants that it has all rights, authority and consents necessary to grant SOC Prime access to the connected systems and to permit the queries and processing described in this Section; (ii) is solely responsible for the selection, scoping, accuracy, confidentiality and rotation of the Credentials, and will grant only the minimum privileges necessary for the Services to operate as described in the Documentation; (iii) acknowledges that SOC Prime acts upon the Credentials as provided and has no obligation to verify the scope of access they confer; and (iv) may revoke the Credentials at any time, in which case the affected features of Prime Hunt and Prime Detect will cease to function.
SOC Prime will use the Credentials solely to provide the Services and will store them in encrypted form. SOC Prime has no liability for any consequence of the User granting privileges broader than necessary, for any action performed within the User’s systems using Credentials provided by the User, or for any modification, deletion or degradation of data within the User’s systems resulting from the User’s own configuration.
Connector Apps
SOC Prime makes Connector Apps available for download from the Site to enable the SOC Prime Platform to connect to, authenticate against and exchange data with the User’s systems. Subject to the User’s compliance with these Terms, SOC Prime grants the User a limited, non-exclusive, non-transferable, non-sublicensable, revocable licence to install and use the Connector Apps within the User’s own environment during the Subscription Term, solely for the purpose of using the Services.
CONNECTOR APPS ARE PROVIDED “AS IS” AND “AS AVAILABLE”, WITHOUT WARRANTY OR CONDITION OF ANY KIND, WHETHER EXPRESS, IMPLIED OR STATUTORY, INCLUDING WITHOUT LIMITATION ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, OR NON-INFRINGEMENT. SOC PRIME HAS NO OBLIGATION TO PROVIDE ANY SUPPORT, MAINTENANCE, UPDATE OR ERROR CORRECTION IN RESPECT OF ANY CONNECTOR APP.
All right, title and interest in and to the Connector Apps, including all intellectual property rights therein, remain solely with SOC Prime and its licensors. No rights are granted to the User other than the limited licence expressly set out above. The User must not copy, modify, distribute, sell, lease, sublicense, or create derivative works of any Connector App, nor reverse engineer, decompile or disassemble it, except as expressly permitted by these Terms or to the extent such restriction is prohibited by applicable mandatory law.
Where a Connector App is supplied with or accompanied by its own licence terms, including any open source licence applicable to components of that Connector App, those licence terms govern that Connector App or component to the extent of any conflict with this Section.
The User is responsible for installing and configuring Connector Apps in accordance with the Documentation, for the security of the environment in which they are installed, and for uninstalling and deleting all Connector Apps upon expiry or termination of the Subscription in accordance with the Section “Effect of Termination or Expiration of Subscription”.
Query Costs and Third-Party Charges
Certain SIEM, EDR, XDR, data lake, streaming or similar systems may impose additional charges for the execution of data queries or for the volume of data processed. Prior to initiating the scanning stage, the User will be informed of the number of queries to be executed. The scanning period is defined by the User. By proceeding with a scan, or by enabling Prime Detect, the User and the organization it represents accept full responsibility for any resulting charges, bills or costs imposed by the User’s own providers. SOC Prime has no liability for any such charges.
Limitations of Prime Hunt and Prime Detect
Prime Hunt and Prime Detect assess only the data made available to them by the User’s connected systems, for the periods selected by the User, and using the rules, translations and detection logic available on the SOC Prime Platform at the relevant time. SOC Prime does not warrant that Prime Hunt or Prime Detect will identify all threats, attacks, compromises, vulnerabilities or gaps in detection coverage. Their output does not constitute an assurance, certification or representation that the User’s environment is secure or free from compromise, and must not be relied upon as the User’s sole means of threat detection. The Section “Limited Warranties and Disclaimers” applies in full to Prime Hunt and Prime Detect.
III. Custom Repositories
This Section is an integral part of the Terms and governs your use of Custom Repositories, available at SOC Prime Platform. Custom Repositories may be available either as part of a Subscription or for separate purchases.
Custom Repositories are a specialized feature within SOC Prime Platform, distinct from traditional version control or code hosting git repositories. These repositories serve as dedicated storage within a separate database integrated into SOC Prime Platform's cloud infrastructure (with an encrypted rule body at rest). In essence, Custom Repositories provide SOC Prime Platform users with a secure environment to safeguard and organize Content, either uploaded by Users or modified Content from SOC Prime Platform tailored to their unique needs.
Permitted Use
Custom Repositories are intended for storage of Content only. You shall not upload to Custom Repositories any data that (i) violates any applicable law, (ii) infringes or misappropriates the rights of any third party, (iii) contains any malicious code, viruses, or other harmful software, (iv) poses security risks for SOC Prime Platform or its Users, (v) contains any personally identifiable information (personal data), provided that this restriction does not apply to data received by SOC Prime through Prime Hunt or Prime Detect in accordance with the Section “Prime Hunt and Prime Detect Terms and Conditions”, or (vi) otherwise violates these Terms (collectively - “Custom Repositories Prohibited Data”).
User-Published Content
Certain features of SOC Prime Platform may allow you to publish, submit, or otherwise make available certain Content within the SOC Prime Platform (“User-Published Content”). You acknowledge and agree that any User-Published Content you publish through the SOC Prime Platform is made available at your sole risk and responsibility.
By publishing User-Published Content, you represent and warrant to SOC Prime that such User-Published Content: (a) does not infringe, misappropriate, or otherwise violate any rights of any third party, including without limitation rights of confidentiality, privacy, intellectual property, contractual rights, or any other legal rights; (b) complies with all applicable laws, rules, and regulations; and (c) does not contain viruses, worms, Trojan horses, malicious code, or any other software or material intended to damage, interfere with, or disrupt the operation of the SOC Prime Platform or any other systems.
You agree that any User-Published Content will be governed by the Detection Rule License identified in Section “Third-Party Content” of these Terms. The rights you grant to SOC Prime in respect of User-Published Content are set out in the separate terms applicable to the program or feature through which you publish such Content.
You agree to indemnify, defend, and hold harmless SOC Prime, as further described in Section “Indemnity” of these Terms, from and against any claims, liabilities, damages, losses, or expenses arising out of or related to any breach of the above warranties.
PART 5 — CONTENT, THIRD PARTIES AND INTELLECTUAL PROPERTY
Third-Party Content
“Third-Party Content” is the Content that was provided by our partners, Threat Bounty Program members, contractors, and third-party developers, validated and reviewed by SOC Prime. For all Third-Party Content, we are conducting the best effort review, but we do not provide any warranties (more detail in the “Limited Warranties and Disclaimers” and “Limitation of Liability” Sections). All rights for Third-Party Content and all other copyrights and trademarks belong to their respective owners. You acknowledge that the Third-Party Content licensing terms may include certain limitations, which may include the obligation to identify the author of the Third-Party Content, etc. Please contact the appropriate third party for further information regarding their terms of use applicable to Third-Party Content.
Without limiting the foregoing, certain Content may be licensed to you under the terms of the Detection Rule License 1.1 below, as well as other licenses accompanying the related Content. Before using the Content, please carefully read the terms of the license attached to the Content so that the use of the Content complies with the license requirements. Unless otherwise stated, Third-Party Content will be licensed under the Detection Rule License 1.1 by default, which can be found by following this link: https://github.com/SigmaHQ/Detection-Rule-License/blob/main/LICENSE.Detection.Rules.md
Third-Party Services
Your use of Site and Service may involve usage of a service, information, feature, software, Application Programming Interface (“API”), websites, or functionality that is owned or operated by a third party (“Third-Party Services”).
If you use Third-Party Services, you may be subject to certain policies, terms, and conditions of their providers, which may differ from ours. You should review any end-user or other license agreement that governs the respective party's relationship with you, as well as the privacy policy and security measures of the third-party resource that will govern your use of that resource. SOC Prime is not responsible or liable for the content or accuracy of any Third-Party Services or for any loss or damage of any kind arising from the use or any failure of products or services provided on or with the help of a Third-Party Services. For example, our Service utilizes the National Vulnerability Database (“NVD”) created by the National Institute of Standards and Technology (“NIST”). The NVD offers some of its public data in machine-readable format via an API subject to the appropriate terms of use on the NIST website. Via this API, we collect data and use it to prioritize the output of the Content searching to the Users with the appropriate links. Our usage or access to the NVD API does not mean that our Service is endorsed or certified by the NVD.
Third-Party Links
The Service may contain links to third-party sites. The linked sites are not under the control of SOC Prime, and SOC Prime is not responsible for the accuracy or reliability of any information, opinions, advice, or statements made on these linked sites. Access to any of these linked sites is at the User’s own risk.
Intellectual Property Rights and Data Ownership
You are solely responsible for all data you upload to Custom Repositories (“your data”). You authorize us to store your data and represent and warrant that you have the legal right to store and distribute your data in Custom Repositories.
We are not involved in verifying the ownership of your data. SOC Prime shall not be liable for any copyright infringements or other third-party rights associated with your data uploaded into Custom Repositories.
Your Data Removal
We reserve the right to suspend access or remove, without notice, your data from Custom Repositories if we reasonably believe that such data constitute or contain any Custom Repositories Prohibited Data.
In addition, we reserve the right to remove your data from Custom Repositories within 60 days after the expiration or termination of your Subscription (or any agreement that governs your use of our Service, including Custom Repositories).
Privacy and Security
We consider your data in Custom Repositories confidential and take reasonable measures to protect it and ensure its security. However, you are responsible for maintaining secure access to your Account and sharing your data with your Team Members (please refer to Section “User Account Registration” of these Terms).
Share Repository Option
By utilizing the "Share to SOC Prime" feature within Custom repositories, accessible exclusively to the users holding Manager Account (“company administrator”) within the repository settings interface, all Content within the designated repository becomes visible to SOC Prime without physical duplication. This feature is intended to facilitate collaboration, enhancement, reviews, and other professional services provided by SOC Prime.
User Responsibility
You are solely responsible for your actions and your data stored in Custom Repositories. By activating the "Share to SOC Prime" feature, the company administrator assumes full responsibility for granting SOC Prime access to the repository Content. SOC Prime disclaims all liabilities for any issues arising from the use of this feature, and the company administrator is solely responsible for ensuring compliance with all applicable laws and internal regulations regarding data sharing and access permissions. For the avoidance of any doubts, Section “Limited Warranties and Disclaimers” will be fully applicable to the use of Custom Repositories.
No Automatic Renewal
Custom Repositories service will not have automatic renewal. Users will need to manually renew their subscriptions or make individual purchases as needed.
GitLab Integration for Custom Repositories
As part of the Custom Repositories service, SOC Prime may offer integration with a self-hosted version of GitLab, hosted within SOC Prime’s infrastructure. This ensures that user content remains exclusively within SOC Prime’s environment, without data transmission to GitLab’s cloud. Users who have a Manager Account may choose a limited number of their team members who can sync data in SOC Prime Custom Repositories to GitLab.
By enabling GitLab synchronization, you acknowledge and accept the following:
- Data Storage and Liability: Content synced to GitLab remains within SOC Prime’s infrastructure, secured by GitLab software. SOC Prime takes commercially reasonable measures to safeguard data but disclaims liability for unauthorized access or data loss.
- User Control and Responsibility: SOC Prime grants users administrative control over GitLab synchronization settings, including options to manually push updates from SOC Prime to GitLab and to pull changes back into SOC Prime. Users are solely responsible for managing data shared with GitLab, including understanding that changes or deletions during synchronization are user-initiated actions, and SOC Prime bears no responsibility for their outcome.
By utilizing this integration, you agree to these terms and understand that GitLab’s terms and practices apply to any content shared or stored through their platform. For more details, please review GitLab’s Subscription Agreement.
Claims of copyright infringement
SOC Prime respects the intellectual property rights of others and asks that the people who use the Site do the same. The Digital Millennium Copyright Act of 1998 (the “DMCA”) provides recourse for copyright owners who believe that material appearing on the Internet infringes their rights under U.S. copyright law. If you believe in good faith that materials available on the Site infringe your copyright, you (or your agent) may send SOC Prime a notice requesting that we remove the material or block access to it. If you believe in good faith that someone has wrongly filed a notice of copyright infringement against you, the DMCA permits you to send SOC Prime a counter-notice. Notices and counter-notices must meet the then-current statutory requirements imposed by the DMCA. See the DMCA Designated Agent Directory for details. Notices and counter-notices should be sent to:
Copyright Agent
SOC Prime, Inc.
399 Boylston Street, 6th Floor
Boston, MA 02116
Email: dmca@socprime.com
Feedback and Information
SOC Prime welcomes and encourages you to provide suggestions, comments, or other feedback about the Site, Services, Content (e.g., regarding their utility, and feasibility), and your experience with the Services, as well as any bug fixes, features, functionality, or enhancements you would like to see in future versions. SOC Prime may also collect certain metrics about your use of the Services (collectively "Feedback"). You acknowledge and agree that all Feedback provided or collected during your use of the Services, Site, or otherwise will be given entirely voluntarily and will be non-confidential for SOC Prime. You represent and warrant that you will not provide any Feedback that you know or have reason to believe might infringe any third-party intellectual property rights or misappropriate any third-party confidential information or trade secrets. You grant SOC Prime a non-exclusive, transferable, royalty-free right and license to use the Feedback, and SOC Prime shall be free to use such Feedback on an unrestricted basis.
We encourage you to share your feedback in Discord by joining our Discord server at https://tdm.socprime.com/zeptolink/E0ojRAykgC5adVh7/ and engaging with the community in channels to get advice and feedback from our team and other users.
We reserve the right to edit, move, or delete comments that, at our discretion, fall within the following categories: offensive or inappropriate language, failure to respect fellow commenters, links returning errors, irrelevant links, invalid email addresses, or comments not contributing to the conversation.
PART 6 — COMMERCIAL TERMS
Payment Terms
Fees. Unless otherwise specified in the Applicable Agreement, the fees:
(i) become due upon activation of the Subscription and must be paid in accordance with the payment terms set out in the Applicable Agreement;
(ii) are based on a one (1) year Subscription Term, unless a different Subscription Term is expressly stated in the Applicable Agreement;
(iii) must be paid in full, in the currency stated in the Applicable Agreement, within thirty (30) days following the date of the respective invoice, without set-off, deduction or counterclaim, unless otherwise agreed in the Applicable Agreement;
(iv) are non-refundable and non-cancellable, except as expressly provided in these Terms or as required by applicable mandatory law; and
(v) where paid by card or other electronic means, are processed by SOC Prime’s third-party payment processor, whose terms govern that transaction.
In addition to any other rights or remedies available to SOC Prime under applicable law, if the User fails to make any payment when due, SOC Prime may: (i) charge interest on all overdue amounts at the rate of one and one-half percent (1.5%) per month, or the highest rate permitted by applicable law if lower, accruing from the due date until paid in full; (ii) recover all reasonable costs of collection, including reasonable attorneys’ fees, collection agency fees and court costs; and (iii) upon not less than ten (10) days’ prior written notice, suspend the access of the User and its Representatives to the Services, in whole or in part, until all outstanding amounts are paid in full.
Suspension under this Section does not relieve the User of its obligation to pay all fees due for the entire Subscription Term, does not extend or toll the Subscription Term, and does not entitle the User to any refund, credit or extension. SOC Prime will restore access promptly following payment in full of all outstanding amounts, including accrued interest and collection costs.
Expenses. Except as expressly set in the Applicable Agreement, each party will bear all of its own costs and expenses in connection with or arising under the Subscription.
Taxes. All fees are exclusive of taxes. Applicable taxes (e.g. VAT, sales tax) may be charged on top of the fees. The User is responsible for all sales, use, value added, goods and services, excise, withholding and similar taxes and duties imposed in connection with the Services, excluding taxes based on SOC Prime’s net income. If the User is required by law to withhold or deduct any amount from any payment, the User will increase the amount payable so that SOC Prime receives the full amount it would have received had no such withholding or deduction been required. If the applicable taxes were not charged to you at the time of the payment, SOC Prime reserves the right to collect the taxes from you at any time, should such taxes be assessed after payment for a Subscription has been processed.
Non-Automatic Renewal. The Subscription shall not be subject to automatic renewal upon its expiration. If you wish to extend or renew the Subscription, you must enter into a new Applicable Agreement with SOC Prime or an authorized reseller before the Subscription expires. Note that the price of the Subscription for the next Subscription Term may change. To renew your Subscription or update its scope for the next Subscription Term, contact our Sales team to agree a new Applicable Agreement in writing, which shall govern the extended term.
No Cancellation, No Refund Policy
Commitment for Subscription Term. The User acknowledges that purchasing a Subscription to SOC Prime’s Services constitutes a binding commitment for the entire Subscription Term as specified in the Applicable Agreement. The fact that fees are payable in installments does not create any right to cancel or terminate the Subscription early and does not reduce the User’s obligation to pay the fees for the entire Subscription Term. Any prepaid amounts automatically expire at the end of the Subscription Term and are non-refundable.
No Cancellation During Active Subscription Term. Users may not cancel a Subscription mid-term, whether under a one-year or multi-year Applicable Agreement. SOC Prime does not provide refunds or credits for any unused Services or Content during an active Subscription Term, except as required by applicable law or as explicitly agreed in writing.
Multi-Year Subscriptions. For multi-year Subscriptions, even if payment is structured in annual installments, the User remains obligated to pay the full total amount for the agreed Subscription Term. Payment for the upcoming year of a multi-year Subscription must be made no later than the end of the current Subscription year. Early termination or cancellation does not relieve the User of its obligation to complete full payment. If the User purports to terminate or cancel a multi-year Subscription before the end of the agreed Subscription Term, all fees for the remainder of the Subscription Term shall immediately become due and payable, and SOC Prime may:
- invoice the User for all such accelerated amounts, less any amounts already paid in respect of the remainder of the Subscription Term; and
- suspend the Services until all outstanding amounts are paid in full.
The parties acknowledge that the fees for a multi-year Subscription reflect a discount granted in consideration of the User’s commitment to the full Subscription Term; that the amounts payable under this Section represent the agreed contract price for that committed term and not a penalty; and that such amounts constitute a reasonable pre-estimate of the loss SOC Prime would suffer as a result of early termination.
MDR/MSSP Payment Terms
Providers of managed detection and response services and managed security services providers (“MDR/MSSP”) or other entities that may redistribute Content to or serve their customers with the use of the Services and/or Content are subject to special terms and conditions and different pricing models. SOC Prime reserves the right to determine in its sole discretion whether a User belongs to the MDR/MSSP category. Notwithstanding the restrictions in the Section “Acceptable Use and Restrictions”, you may use On-Demand Subscription Plans to distribute Content or use the Services and/or Content to serve third parties only where you have purchased such a Subscription and only under the terms set forth in the Applicable Agreement. If you are an MDR/MSSP, please reach out to us at sales@socprime.com.
Right to Audit and Other Requests
You agree to keep accurate records containing all the data (including technical data and logs about the distribution or use of Content for any third party) reasonably required to verify your compliance with these Terms or Applicable Agreement. Such records will be retained for at least 3 years following the end of your Subscription Term. Upon receipt of written notice (which may be sent at least ten (10) business days in advance), you will permit the auditing and copying of such records by our representatives or a mutually acceptable third party, provided that any such audit will be conducted during normal business hours, in a manner that does not unreasonably interfere with your operations, no more than once in any twelve (12) month period (except where a prior audit has revealed a material breach or underpayment), and subject to the auditor’s written undertaking of confidentiality. In addition, you will respond to reasonable inquiries from SOC Prime regarding your use of the Services and/or the Content.
SOC Prime shall bear fees and expenses incurred in connection with the audits unless such audit discovers a material breach of these Terms or underpayment of fees (periodic payment of fees that may be stipulated by the Applicable Agreement), in which case you will bear the fees and expenses incurred in connection with such audit.
If we have reasonable grounds to believe that you are not compliant with these Terms, we may send you a request with information relevant to your use of the Service, and you agree to respond to such request within 5 business days.
Termination
SOC Prime’s Termination for Breach. You agree that we may suspend your Account or terminate your Subscription if we reasonably believe that you have violated these Terms, infringed intellectual property rights, or engaged in fraudulent or illegal activities with the use of the Services, or if suspension or termination is required by applicable law, regulation, court or governing agency order. Except where immediate suspension or termination is necessary to prevent harm to SOC Prime, the Services or any third party, or is required by law, SOC Prime will provide notice and, where the violation is capable of cure, a reasonable opportunity to cure. On such termination, we may immediately deactivate or delete the User’s Account and/or bar any further access, and your right to use the Services will immediately cease. Termination does not relieve the User of its obligation to pay all fees due for the entire Subscription Term.
Account Termination. You may terminate your Account by emailing support@socprime.com or by withdrawing your consent for processing your personal data via your Account.
Termination for SOC Prime Threat Bounty Program Participants. Accounts of individual users who are participating in the SOC Prime Threat Bounty Program or/and educational programs or projects operated by SOC Prime may be suspended by SOC Prime by its sole discretion with or without notice if the Threat Bounty Program member does not submit any detection code via Program for ninety (90) consecutive days, or if the maintenance of such account is no longer needed for the abovementioned programs and projects.
Survival. The Sections “Definitions”, “Order of Precedence”, “Effect of Termination or Expiration of Subscription”, “Acceptable Use and Restrictions”, “Payment Terms”, “No Cancellation, No Refund Policy”, “Intellectual Property”, “Right to Audit and Other Requests”, “Choice of law”, “Dispute Resolution”, “Limited Warranties and Disclaimers”, “Limitation of Liability”, “Indemnity”, “No third-party beneficiaries”, “Waiver and Severability”, “Export Control and Sanctions Laws”, “Entire agreement” and “Feedback and Information”, together with any other provision that by its nature is intended to survive, will survive the expiry or termination of these Terms and of any Subscription.
Intellectual Property
The intellectual property rights pertaining to the Service, Content, and all Site materials, including but not limited to the copyright, trademark, patent rights, and other intellectual property rights, remain the sole ownership of SOC Prime and its respective owners. All rights not expressly granted herein are reserved. The registered trademark 'SOC Prime' is the property of SOC Prime, Inc. All other trademarks, service marks, and trade names mentioned in these Terms or elsewhere on the Site are the property of their respective owners. You are not authorized to use SOC Prime trademarks or logos in any advertising, publicity, or any other commercial manner without prior written consent from SOC Prime.
Certain fields within the Content description, specifically Audit Configuration, False Positives, and Triage Recommendations, are generated or assisted by third-party generative artificial intelligence tools and may incorporate pre-existing knowledge or information. SOC Prime does not claim ownership of, and makes no representation or warranty as to the accuracy, completeness or originality of, those specific fields, which are provided on an "as is" basis and should be independently verified by the User before reliance.
The user acknowledges that SOC Prime may not own all the Content available on its Platform.
PART 7 — WARRANTIES, LIABILITY AND INDEMNITY
Limited Warranties and Disclaimers
SOC PRIME PROVIDES THE SERVICE USING A COMMERCIALLY REASONABLE LEVEL OF CARE, AND WE PROMISE TO DO OUR BEST TO MAKE SURE YOU ENJOY THE SERVICE. CERTAIN MODULES OF THE SOC PRIME PLATFORM MAY HAVE ACCESS TO SYSTEMS OF YOUR ORGANIZATION (E.G., SIEM), INCLUDING MANAGING, ADDING, AND REMOVING CONTENT THEREFROM. YOU ARE UPLOADING AND DEPLOYING THE CONTENT TO YOUR SYSTEMS AT YOUR OWN RISK AND ARE SOLELY RESPONSIBLE FOR ANY ACTIONS TAKEN UNDER YOUR ACCOUNT.
TO THE MAXIMUM EXTENT POSSIBLE UNDER THE APPLICABLE LAW, SOC PRIME SHALL HAVE NO LIABILITY FOR ANY FAILURES, DISRUPTIONS, DAMAGES, DIRECT OR INDIRECT LOSSES, LOSSES OF PROFITS OR REVENUES, COSTS, EXPENSES OR LOSS OF DATA RELATED TO YOUR USE OF THE SERVICE AND/OR THE CONTENT FROM THE SOC PRIME PLATFORM IN YOUR AND/OR ANY THIRD PARTY SIEM, EDR, NSM, NTA, NTDR, OR SIMILAR SYSTEMS.
YOU EXPRESSLY ACKNOWLEDGE AND AGREE THAT YOUR USE OF THE SERVICE IS AT YOUR OWN RISK. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE SERVICE AND/OR THE CONTENT IS PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS.
SOC PRIME MAKES NO WARRANTY THAT (I) THE SERVICE AND/OR CONTENT WILL MEET YOUR REQUIREMENTS OR EXPECTATIONS AND (II) ANY USER ACCESS TO THE SERVICE WILL BE UNINTERRUPTED, TIMELY, SECURE, OR ERROR-FREE.
THE LIGHT SEARCH FEATURE USES A THIRD-PARTY SERVICE AND MAY TRANSMIT CERTAIN SEARCH QUERIES TO EXTERNAL SERVICES, SUCH AS THE THIRD-PARTY LARGE LANGUAGE MODEL PROVIDERS IDENTIFIED IN THE DOCUMENTATION (CURRENTLY OPENAI), TO ENHANCE SEARCH RESULTS. THE TERMS OF THAT THIRD-PARTY SERVICE SHALL APPLY BOTH TO INPUT QUERIES AND OUTPUT USED TO FIND RESULTS. USERS ARE SOLELY RESPONSIBLE FOR THE CONTENT OF THEIR QUERIES AND SHOULD AVOID INCLUDING PERSONAL OR CONFIDENTIAL INFORMATION. SOC PRIME DISCLAIMS LIABILITY FOR ANY UNAUTHORIZED ACCESS, DATA LEAKAGE, OR OTHER INCIDENTS ARISING FROM THIRD-PARTY PROCESSING OF QUERIES. BY USING LIGHT SEARCH, YOU ACKNOWLEDGE AND ACCEPT THESE TERMS.
Limitation of Liability
To the extent not prohibited by law, in no event shall SOC Prime or its affiliates, suppliers, or resellers be liable for personal injury or any special, incidental, indirect, exemplary, punitive, or consequential damages whatsoever, including, without limitation, damages for loss of profits, revenues, loss of opportunity or anticipated savings, business interruption, loss of data, computer failure arising out of or related to the use of or inability to use the Service (including any potential risks associated with using Light Search), or the provision of or failure to provide technical or another support service, whether arising in tort (including negligence), contract, or any other legal theory, even if SOC Prime, its affiliates, suppliers, or resellers have been advised of the possibility of such damages. In any case, SOC Prime's, its affiliates', suppliers', and resellers' maximum cumulative liability and your exclusive remedy for any claims arising out of or related to these Terms shall not exceed the lesser of either US$ 5,000 or a total of fees paid by you for the one month of Service immediately preceding the event giving rise to the claim.
The exclusions and limitations set out in this Section do not apply to, and the following are excluded from the cap set out above: (i) the User’s obligation to pay fees under these Terms or any Applicable Agreement; (ii) the User’s indemnification obligations under the Section “Indemnity”; (iii) the User’s breach of the Section “Acceptable Use and Restrictions”, including the restrictions on use of the Services and Content for the training or development of artificial intelligence systems; (iv) the User’s infringement or misappropriation of the intellectual property rights of SOC Prime or its licensors; (v) either party’s fraud, fraudulent misrepresentation, or willful misconduct; and (vi) any liability that cannot be excluded or limited under applicable law.
The limitations in this Section apply notwithstanding the failure of the essential purpose of any limited remedy, and reflect an agreed allocation of risk that forms an essential basis of the bargain between the parties. For the purposes of the Sections “Limited Warranties and Disclaimers” and “Limitation of Liability” only, SOC Prime’s Affiliates, suppliers, licensors and resellers are intended third-party beneficiaries and may enforce those Sections directly.
Indemnity
Unless otherwise provided in a written agreement between you and SOC Prime, you agree, to the extent permitted under applicable law, to indemnify, defend, or at our option, settle and hold SOC Prime and its Affiliates harmless from any assertion, claim, or proceeding, damages, losses, and expenses of any kind arising out or related to (1) your breach of any of these Terms, including compliance with the Export Control and Sanctions Laws; (2) any Content you post or otherwise contribute to SOC Prime Platform; (3) any activity in which you engage on or through the Service; and (4) your violation of any law or the rights of a third party.
PART 8 — GENERAL
Choice of law
These Terms and all matters relating to your access or use of the Services, including all disputes, claims, or causes of action (whether in contract, tort, or statute) that may be based upon, arise out of, or relate to these Terms shall be governed by and construed under the laws of the State of Delaware, without regard to its conflicts of laws principles. The United Nations Convention on Contracts for the International Sale of Goods does not apply.
Any action arising out of or relating to these Terms shall be brought exclusively in the state or federal courts located in Wilmington, Delaware. Each party irrevocably consents to the personal jurisdiction of those courts and waives any objection based on improper venue or forum non conveniens.
Except for claims for non-payment of fees or for infringement or misappropriation of intellectual property rights, no action arising out of or relating to these Terms may be commenced more than one (1) year after the cause of action accrued.
Dispute Resolution
Should any dispute arise with regard to these Terms, the parties agree to first work in good faith to resolve such dispute, and neither party may commence any action with regard to such dispute until thirty (30) days have passed from the time such party has provided written notice to the other party of the nature of such dispute, provided that nothing herein will prevent us from seeking injunctive or other equitable relief in the event of your actual or threatened breach of any terms of these Terms, or prevent SOC Prime from commencing an action for the recovery of unpaid fees.
Force Majeure
SOC Prime shall be exempted from liability for failure to comply with its obligations under these Terms, where such failure is caused by the occurrence of an act of God or other circumstances beyond the reasonable control of the affected Party, including, without limitation, natural disasters, epidemics, pandemics, civil commotion, war (declared and undeclared), revolution, strikes, work stoppages, accidents, acts of terrorism, nuclear or natural catastrophes, embargo, failure or interruption of internet, telecommunications, cloud hosting or other third-party infrastructure, and cyberattacks, denial of service attacks or other malicious third-party conduct (hereinafter referred to as “Force Majeure”).
The occurrence of a Force Majeure event shall extend the due terms of SOC Prime's obligations under these Terms for the period duration of the Force Majeure plus an additional period required to eliminate its consequences. If any Force Majeure event occurs, SOC Prime shall not be responsible for any indemnity for the fees paid by the User and only agrees to extend the period of use of the Services for 30 days. If a Force Majeure event continues for more than sixty (60) consecutive days, either party may terminate the affected Subscription on written notice to the other.
Sanctions. If the User, its parent, or any entity within the User’s group becomes subject to sanctions administered by OFAC, the United Nations Security Council, the European Union, the United Kingdom or any other relevant sanctions authority, or otherwise becomes a person with whom SOC Prime is prohibited from dealing under the Export Control and Sanctions Laws, SOC Prime may immediately suspend or terminate the Services and the User’s Account without notice and without liability, and no refund of any fees will be due.
Export Control and Sanctions Laws
You shall comply with all applicable federal, state, local, and foreign laws, rules, and regulations while using the Service and the Content. You are solely responsible for ensuring your use of the Service is compliant with all laws, rules, and regulations applicable to you. The right to access the Service is revoked where the use of the Service is prohibited or to the extent offering, selling, or providing the Service conflicts with any applicable law, rule, or regulation.
The Services are subject to U.S. export control laws and regulations and may be subject to foreign export or import laws or regulations. You are now and will remain in the future compliant with all such export control laws and regulations and will not export, re-export, or otherwise transfer any SOC Prime Service, Connector App or technology or disclose any Content to any person contrary to such laws or regulations.
You acknowledge that the Service, or a portion thereof, may be subject to the Export Administration Regulations, 15 C.F.R. Parts 730-774, of the United States and may be subject to other applicable country export control and trade sanctions laws (“Export Control and Sanctions Laws”). You and your end users may not access, use, export, re-export, divert, transfer, or disclose any portion of the Service or any related technical information or materials, directly or indirectly, in violation of Export Control and Sanctions Laws. You represent and warrant that: (i) you and your end users (a) are not entities of, or registered/located within, a country or territory that is subject to Export Control and Sanctions Laws or other significant trade restrictions, including but not limited to Russia, Venezuela, Sudan, Zimbabwe, Myanmar (Burma), Nicaragua, Cuba, Iran, North Korea, and Syria), and that you and your end users will not access or use the Services, or export, re-export, divert, or transfer the Service, in or to such countries or territories; (b) are not persons, or owned 50% or more, individually or in the aggregate by persons, identified on the U.S. Department of the Treasury’s Specially Designated Nationals and Blocked Persons List or Foreign Sanctions Evaders Lists; and (c) are not persons on the U.S. Department of Commerce’s Denied Persons List, Entity List, or Unverified List, or U.S. Department of State proliferation-related lists.
You are solely responsible for complying with the Export Control and Sanctions Laws and monitoring them for any modifications.
Notices
All notices under these Terms must be in writing. Notices to SOC Prime must be sent to SOC Prime, Inc., 399 Boylston Street, 6th Floor, Boston, MA 02116, with a copy by email to legal@socprime.com. Notices to the User may be sent to the email address identified in the User Data or to any Manager Account, or delivered through the SOC Prime Platform. A notice is deemed given: (i) on delivery, if delivered personally or by courier; (ii) on the date of transmission, if sent by email or delivered through the SOC Prime Platform, provided no delivery failure notification is received; or (iii) five (5) business days after posting, if sent by prepaid registered mail. It is the User’s responsibility to keep its contact details current.
Assignment
The User may not assign, novate, delegate or otherwise transfer these Terms or any Applicable Agreement, or any of its rights or obligations under them, in whole or in part, whether by operation of law or otherwise, without SOC Prime’s prior written consent, such consent not to be unreasonably withheld in the case of an assignment to a successor in connection with a merger, acquisition, or sale of all or substantially all of the User’s assets, provided that the assignee is not a competitor of SOC Prime and assumes all obligations under these Terms in writing. Any purported assignment in breach of this Section is void. SOC Prime may assign these Terms and any Applicable Agreement, in whole or in part, to an Affiliate or in connection with a merger, acquisition, corporate reorganization, or sale of all or substantially all of its assets. SOC Prime may subcontract the performance of its obligations, and remains responsible for the performance of its subcontractors. These Terms bind and benefit the parties and their respective permitted successors and assigns.
No agency
No agency, partnership, joint venture, employee-employer, or franchisor-franchisee relationship between you and SOC Prime is intended or created by these Terms.
No third-party beneficiaries
The provisions of these Terms are for the sole benefit of the parties and their successors and permitted assigns, and they will not be construed as conferring any rights to any third party (including any third-party beneficiary rights), except as expressly provided in the Section “Limitation of Liability” in respect of SOC Prime’s Affiliates, suppliers, licensors and resellers.
Waiver and Severability
Failure by either party to exercise any of its rights under or to enforce any provision of these Terms will not be deemed a waiver or forfeiture of such rights or ability to enforce such provision. If any provision of these Terms is held by a court of competent jurisdiction to be illegal, invalid, or unenforceable, that provision will be amended to achieve as nearly as possible the same economic effect of the original provision, and the remainder of these Terms will remain in full force and effect.
Entire agreement
These Terms, inclusive of the incorporated webpages, any terms that are incorporated in these Terms by reference, the Applicable Agreement, and all other documents executed by the parties, constitute the entire agreement between the parties concerning its subject matter and supersede all contemporaneous or prior representations, discussions, proposals, and agreements, in any format, relating to its subject matter. Precedence among these documents is determined in accordance with the Section “Order of Precedence”. You represent that you accepted these Terms without reliance on any oral or written representations made by SOC Prime that are not contained in these Terms.
Modification
SOC Prime reserves the right to change, modify, add, or remove portions of these Terms, our Privacy Policy, or any terms they incorporate by reference in its sole discretion and at any time. Modifications take effect on the effective date stated at the top of the modified Terms and apply prospectively only. In respect of an existing Subscription, any modification that materially and adversely affects the User will not apply until the commencement of the next Subscription Term, unless the modification is required by applicable law, regulation or order, in which case it takes effect as required by that law, regulation or order. SOC Prime will use reasonable efforts to notify Users of material modifications at least thirty (30) days in advance, usually via the email address identified in the User Data, and will make prior versions of these Terms available on request. Notwithstanding anything to the contrary, your continued use of the Services after the effective date of any modified Terms will be deemed your acceptance of such changed or modified terms and conditions. If you have any questions regarding the update, reach out to our Support Team at support@socprime.com.
Report abuse
If you feel SOC Prime needs to know that something has gone wrong or someone has violated these Terms, please report it to abuse@socprime.com.
Marketing notifications
As part of the registration process, you are also given the opportunity to receive relevant information about the Service, including updates, newsletters, educational content, and security-related information about other SOC Prime products and services that may be of interest to you. In this case, SOC Prime may contact you at the email address provided during registration.
You may withdraw your consent and unsubscribe from marketing communications at any time by using the unsubscribe link included in the relevant email or by updating your notification preferences within your SOC Prime Platform account settings.