EULA: SITEY End User License Agreement

This End User License Agreement (the “EULA” or “Agreement”) governs your use of the SITEY vulnerability management software, its agents, its scanner orchestration layer, its engine feed and its documentation (together, the “Software“). SITEY is sold self-service: you buy online, you download the installer, and you deploy the Software inside your own infrastructure. This EULA is the contract that covers that software. Commercial terms such as price, billing and refunds are set out at checkout and on the pricing page.

Version: 1.0  |  Effective date: [EFFECTIVE DATE]  |  Licensor: [LEGAL ENTITY NAME], [REGISTERED ADDRESS], Türkiye (“SITEY”, “we”, “us”).

Plain-language summary, for orientation only. The numbered clauses below are what actually binds both sides. You may install and run SITEY on the number of deployments you paid for, inside your own network. Each deployment activates against our licence service and is bound to that machine. Your scan data is stored on your servers. Outbound connections are limited to licence activation and the optional services you enable, such as an AI provider, CVE enrichment and patch catalogues. You may not copy, resell, share or crack the licence system. Monthly licences run while you pay. Lifetime licences run forever for the version family you bought, with one year of updates included.

1. Parties, acceptance and scope

This Agreement is between SITEY and the legal entity or individual that purchased the licence (the “Customer“, “you”). If you are accepting on behalf of an organisation, you confirm that you are authorised to bind that organisation.

You accept this Agreement by doing any of the following: completing checkout, creating a SITEY account, downloading the installer, installing the Software, or activating a licence key. If you do not accept it, do not install or activate the Software.

This EULA covers the Software itself. Your SITEY account, the website and the download portal are additionally governed by our terms of service and privacy notice. Where this EULA and those documents conflict on a question about the Software, this EULA prevails.

2. Definitions

• Deployment – one running instance of the SITEY control plane (application, database and worker services) operated by the Customer for the Customer’s own organisation.
• Agent – the SITEY endpoint component installed on a host, reporting to a Deployment. Agents are a component of the Software, not separate licences.
• Licence Key – the credential issued to you after purchase that identifies your entitlement.
• Activation Service – the SITEY-operated service that issues, validates, re-binds and revokes activations.
• Deployment Fingerprint – a one-way hash derived from stable machine and operating-system identifiers of the host running a Deployment.
• Version Family – a major version line of the Software (for example the 2.x line). Releases within a Version Family share the same major version number.
• Engine Feed – the periodically updated detection content, scanner templates, remediation knowledge base and compliance mappings distributed by SITEY.
• Order – your completed purchase record, including plan type and the number of Deployments purchased.

3. Grant of licence

Subject to your compliance with this Agreement and to payment of the applicable fees, SITEY grants you a non-exclusive, non-transferable, non-sublicensable, revocable licence to install and use the Software in object-code form, for your own internal business purposes, limited to the number of Deployments stated in your Order.

Within that grant you may:

• Install and operate each purchased Deployment on infrastructure you own, lease or lawfully control, including your own cloud tenancy.
• Deploy Agents to hosts within your own organisation that are covered by that Deployment.
• Operate one additional non-production instance per purchased Deployment for staging, testing or disaster-recovery standby, provided it is not used to scan or remediate production assets at the same time as the production Deployment.
• Make one copy of the installer and configuration for backup and recovery purposes only.
• Allow your employees and contractors to use the Software on your behalf, provided you remain responsible for their compliance with this Agreement.

Everything not expressly granted is reserved. The Software is licensed, not sold. No rights are granted to source code, build systems, signing keys or internal engine code.

4. Licence types: Monthly and Lifetime

SITEY is offered in two forms. Both grant the same product functionality; they differ in duration and in update entitlement.

A Lifetime licence that has passed its update window can be returned to an update-receiving state by purchasing a renewal. The perpetual use right is never lost by not renewing.

5. Activation, machine binding and licence checks

You expressly consent to licence activation and periodic validation checks as described in this clause. These checks are a condition of the licence grant and are enforced technically.

5.1 What activation does

On first start, a Deployment sends its Licence Key and Deployment Fingerprint to the Activation Service. If the entitlement is valid and unused capacity exists, the Activation Service issues a signed activation that binds that Licence Key to that Deployment Fingerprint. The Deployment then revalidates on a periodic schedule. A Licence Key supports at most as many concurrent bindings as the number of Deployments in your Order.

5.2 Deployments without outbound internet access

Offline activation is supported. The Deployment console produces an activation request file; you submit it from your SITEY account and install the signed activation file that is returned. Offline activations are issued for a fixed period and are renewed the same way. Use of offline activation does not reduce any obligation under this Agreement.

5.3 If the Activation Service cannot be reached

Temporary loss of connectivity does not stop your work. If a valid, unexpired entitlement exists and the Activation Service is unreachable, the Software continues to operate normally for a grace period of 14 days (Monthly) or 30 days (Lifetime, within its update window). After the grace period, the Deployment enters Restricted Mode as defined in clause 13.4. In no case does a failed licence check delete, encrypt or withhold your data. Your findings, assets, reports and audit history remain readable and exportable.

5.4 Re-binding, hardware changes and failover

You may re-bind a Deployment to new hardware up to four times per licence year from your account, without contacting us. Hardware replacement, migration and disaster-recovery failover are legitimate re-binding reasons. If you need more re-bindings, contact us; we do not withhold re-binding from a customer in good standing. Repeated re-binding used to run more concurrent Deployments than purchased is a breach of clause 6.

6. Restrictions

You must not, and must not permit any third party to:

• Copy the Software, except for the single backup copy permitted in clause 3, and except for copies created incidentally in normal operation.
• Redistribute, resell, publish, lease, rent, lend or host the Software, or operate it as a service, managed service or shared platform for any third party, without a separate written agreement with SITEY.
• Sublicense the Software or assign rights under this Agreement, except as permitted in clause 19.
• Reverse engineer, decompile, disassemble, de-obfuscate or otherwise attempt to derive source code, engine logic, detection content or signing material from the Software.
• Defeat, bypass, disable or tamper with licence enforcement. This includes patching or hooking binaries, spoofing or replaying a Deployment Fingerprint, manipulating system time, redirecting or intercepting traffic to the Activation Service, using generated or altered Licence Keys, forging activation files, and running the Software from a modified build.
• Share the installer, Engine Feed, internal engine code or Licence Keys with anyone outside your organisation, including by publishing them, uploading them to public repositories or file-sharing services, or passing them to consultants who are not acting for you under clause 3.
• Use the Software after expiry, suspension or revocation of the applicable licence, or beyond the number of Deployments purchased.
• Remove, obscure or alter any proprietary notice, copyright notice, licence banner or product identification in the Software, its interface or its outputs.
• Use the Software to build a competing product, or extract the Engine Feed, remediation knowledge base or compliance mappings for use in any other tool.

Nothing in this clause limits rights you have under mandatory applicable law, including any non-waivable right to decompile for interoperability purposes under Turkish Law No. 5846 on Intellectual and Artistic Works. If you intend to rely on such a right, contact us first; we will normally provide the interface information you need instead.

7. Acceptable use and Customer responsibilities

SITEY scans, and can automatically patch, live systems. You are responsible for how you point it.

• You warrant that you own, or hold documented authorisation to test and modify, every asset you bring in scope of a scan, an exploit validation or an automated remediation action.
• You are responsible for change control: approving automated patching scope, maintaining backups and rollback capability, and choosing maintenance windows.
• You are responsible for securing your Deployment: host hardening, credential storage, access control, network exposure and operating-system patching. The Deployment holds privileged credentials for your estate.
• You must not use the Software against third-party systems without authorisation, or for any unlawful purpose.
• AI-generated output – validation verdicts, risk scores, remediation plans, assignments and reports – is decision support. A competent operator must review it before it is relied on for a production change or a compliance statement.

8. Verification and audit

SITEY may verify your compliance with this Agreement, as follows:

1. Self-certification. On written request, and no more than once in any 12-month period unless we have concrete evidence of breach, you will provide a compliance report within 30 days, listing active Deployments and their purpose. The Software can generate this report for you.
2. Activation records. We may rely on Activation Service records, which show bindings, versions and validation history, as evidence of use.
3. On-site or remote audit. Only where self-certification is not provided or is contradicted by evidence, and then on at least 15 business days’ written notice, during business hours, under a mutual non-disclosure agreement, and without access to your scan data, findings or credentials.
4. Shortfall. If verification shows use beyond your entitlement, you will purchase the additional licences within 30 days at the list price applicable on the date of the shortfall. If the shortfall exceeds 5% of your entitlement, you will also bear the reasonable cost of the audit.

9. Telemetry and your data

SITEY runs in your infrastructure. Your database, findings and evidence stay on your servers. The only traffic required between a Deployment and SITEY is licence validation and, if you enable it, the Engine Feed download.

We hold the account e-mail address and billing data you gave us at purchase, because an account is required to issue licences and serve downloads. That data comes from checkout, not from your Deployment. See the privacy notice for retention and your rights. We will not add product analytics, usage telemetry or crash reporting that transmits customer environment data without an opt-in setting that is off by default.

10. Updates, Engine Feed and support

Updates are delivered to Deployments with an active update entitlement. You choose when to apply them. SITEY does not push a version change to your Deployment without the update being accepted in your console.

Support is provided by e-mail to the address on your account, in English or Turkish, and covers the Software as delivered. It does not cover your infrastructure, third-party scanner licensing, or custom integrations you build. Support response targets, where offered, are stated on the pricing page and are targets, not contractual service levels, unless a separate signed service agreement says otherwise.

11. Intellectual property

The Software, the Engine Feed, the remediation knowledge base, the compliance mappings, the documentation, the SITEY name and logo, and all derivatives and improvements of them, are and remain the exclusive property of SITEY and its licensors. This Agreement transfers no ownership.

Your data is yours. SITEY claims no ownership of your assets, scan results, findings, reports, configurations or any output generated from them inside your Deployment. Because that data does not reach us, we also do not use it to train models or improve detection content.

If you send us feedback, bug reports or feature suggestions, you grant us a perpetual, royalty-free right to use them without obligation to you. You are not required to send feedback.

12. Third-party and open source components

SITEY orchestrates third-party scanners and incorporates open source components. Two things follow from that, and both matter operationally.

• Open source components distributed with the Software are licensed to you under their own licences, which prevail over this EULA for those components. A complete list with licence texts is shipped as THIRD-PARTY-NOTICES.txt in the installer and is reproduced in the documentation. Where a component’s licence grants you rights this EULA restricts – for example the right to modify or redistribute that component – that licence wins for that component.
• Commercial scanners are not sublicensed by us. SITEY can drive commercial engines such as Nessus and Acunetix, but you must hold your own valid licence for each of them, and their vendors’ terms apply to your use. Open source engines such as Nmap, OpenVAS, Nuclei, ZAP, Trivy, MobSF and Semgrep are used under their own licences. SITEY provides the orchestration, correlation, deduplication and closure layer, not the third-party engine rights.

13. Term, suspension, revocation and termination

13.1 Term

A Monthly licence runs for the paid period and renews until cancelled. A Lifetime licence runs perpetually for its Version Family, subject to this Agreement.

13.2 Termination by you

You may terminate at any time by cancelling (Monthly) or by ceasing use and uninstalling (either type). Fees already paid are not refundable except as stated at checkout or required by law.

13.3 Termination or revocation by SITEY

We may suspend or revoke activations and terminate this Agreement if you materially breach it and do not cure the breach within 30 days of written notice. For breaches of clause 6 that involve defeating licence enforcement, sharing Licence Keys or the installer, or redistributing the Software, suspension and revocation may be immediate and without a cure period. Non-payment of a Monthly subscription leads to non-renewal of activation, not to revocation of a perpetual right.

13.4 Restricted Mode

Where this Agreement refers to Restricted Mode, the Deployment: stops starting new scans, stops automated patching and stops retest and closure actions; and keeps the console, existing findings, reports, audit logs and export functions available. Restricted Mode is reversible by restoring a valid activation. It does not delete data.

13.5 Effect of termination

On termination you must, within 10 days, stop all use of the Software, uninstall every Deployment and every Agent, destroy all copies including backups, and confirm in writing that you have done so. You may first export your own data; we will not obstruct that export. Clauses 6, 8, 11, 14, 15, 16, 18, 21 and 22 survive termination.

14. Disclaimer of warranties

The Software is provided “as is” and “as available”. To the maximum extent permitted by law, SITEY disclaims all warranties, express, implied or statutory, including merchantability, fitness for a particular purpose, non-infringement and accuracy.

Specifically, and without limiting the above, SITEY does not warrant that:

• the Software will detect every vulnerability, misconfiguration or exposure in your environment, or that it will be free of false positives or false negatives;
• AI-generated validation, triage, risk scoring, remediation plans or reports will be correct, complete or suitable for your environment;
• automated patching will succeed on any given host, or will not cause service disruption;
• any published timeframe, including any “72 hours” framing used in marketing material, will be achieved in your environment – such statements describe an intended operating model for the automated loop, not a guaranteed outcome;
• use of the Software will make you compliant with ISO 27001, PCI DSS, SOC 2, GDPR, KVKK, BDDK or any other standard. The Software maps findings and controls to those frameworks. It is not a certification, an audit, or a substitute for one. SITEY is not a certification body.

15. Limitation of liability

To the maximum extent permitted by law:

• Neither party is liable for indirect, incidental, special, consequential or punitive damages, or for loss of profit, revenue, goodwill, business opportunity or data, even if advised of the possibility.
• SITEY’s total aggregate liability arising out of or related to this Agreement is limited to the amount you actually paid for the affected licence in the 12 months before the event giving rise to the claim (Monthly), or to the total one-time fee paid for that licence (Lifetime).
• These limits do not apply to liability that cannot be excluded by law, including death or personal injury caused by negligence, fraud or fraudulent misrepresentation, or to your liability for breach of clause 6 (Restrictions), clause 7 (Acceptable use) or payment obligations.

The allocation of risk in clauses 14 and 15 is a fundamental basis of the pricing. Without it the fees would be materially higher.

16. Indemnification

You will defend, indemnify and hold SITEY harmless against any third-party claim, loss, damage, fine or cost arising from: your use of the Software against systems you were not authorised to test or modify; your breach of clause 6 or clause 7; your unlawful use of the Software; or your failure to hold required licences for third-party commercial scanners.

17. Confidentiality of licence material

Licence Keys, activation files, installer packages and the Engine Feed are confidential information of SITEY. You will protect them with at least the care you use for your own confidential material, restrict access to personnel who need it, and notify us without undue delay if any of them is exposed, leaked or published. On notification we will re-issue keys at no charge.

18. Export control and sanctions

The Software is security software and may be subject to export control and sanctions laws of Türkiye, the European Union, the United States and other jurisdictions. You represent that you are not located in, organised under the laws of, or ordinarily resident in a jurisdiction subject to comprehensive sanctions, and that you are not a party listed on any applicable restricted-party list. You will not export, re-export, transfer or make the Software available in breach of those laws, and will not use it in connection with weapons development or any purpose prohibited by applicable law.

19. Assignment and transfer

Licences are non-transferable. You may not assign this Agreement or transfer a Licence Key to another legal entity, except that a Lifetime licence may be transferred once as part of a merger, acquisition or sale of substantially all of your assets, on written notice to us and provided the receiving entity accepts this Agreement in full and is not a competitor of SITEY. SITEY may assign this Agreement to a successor in interest.

20. Changes to this Agreement

SITEY may update this EULA for new purchases and for new releases. Changes apply to a Monthly licence from the start of the next billing period after notice. For a Lifetime licence, the version of this EULA in force on your purchase date continues to govern the releases you are entitled to; a materially different EULA applies only if you choose to install a release published after the change, or purchase a new Version Family. Material changes will be notified to your account e-mail address at least 30 days in advance.

21. Governing law and disputes

This Agreement is governed by the laws of the Republic of Türkiye, without regard to conflict-of-laws rules. The United Nations Convention on Contracts for the International Sale of Goods does not apply. The courts and execution offices of [CITY], Türkiye have exclusive jurisdiction, except that either party may seek injunctive relief in any competent court to protect its intellectual property or confidential information.

If you purchase as a consumer, mandatory consumer protection rights under the law of your place of residence are unaffected by this clause. SITEY is sold as business software for organisational use.

22. General

• Entire agreement. This EULA, your Order, and the documents it references are the entire agreement on the Software and supersede prior statements, including marketing material.
• Severability. If a provision is held unenforceable, it is limited or severed to the minimum extent necessary and the rest remains in force.
• No waiver. Failure to enforce a provision is not a waiver of it.
• Notices. Notices to you go to the e-mail address on your account. Notices to us go to our contact address or info@siteyvm.com.
• Force majeure. Neither party is liable for delay or failure caused by events beyond its reasonable control, except for payment obligations.
• Language. This EULA is published in English. If a Turkish translation is provided and the two conflict, the [ENGLISH / TURKISH – choose one] version prevails.

23. Contact

Licensing questions, re-binding requests, key re-issues and compliance queries: info@siteyvm.com or the contact page. Plans and prices: pricing.