Terms of Service - Sentinel

1. Scope

These Terms of Service (ToS) apply to all contracts between Sentinel Security (hereinafter "Provider") and the registered user (hereinafter "Customer") concerning the use of the Sentinel Security Platform (hereinafter "Platform").

Deviating, conflicting, or supplementary general terms and conditions of the Customer shall only become part of the contract if the Provider has expressly agreed to their validity in writing.

2. Service Description

2.1 Scope of Services

Sentinel is a SaaS platform for vulnerability intelligence and provides the following core services:

Access to a comprehensive CVE database with real-time updates
Search, filtering, and export functions for vulnerability data
Configurable alert system for monitoring specific products and keywords
Is My Stack Vulnerable (IMSV): Upload dependency files (requirements.txt, package-lock.json) for automated vulnerability scanning
Watches: Persistent monitoring of dependency files with automatic notifications for newly discovered vulnerabilities
Bookmarks: Save and organize individual CVE records
PDF and JSON exports for reports and individual vulnerabilities
Email notifications for topic-relevant new CVEs

2.2 Subscription Plans

The Platform is offered in the following subscription plans:

Free: Basic access with limited features and usage caps
Professional: Advanced features (alerts, watches, bookmarks, exports, IMSV) with higher limits
Enterprise: Full access with custom features and priority support

Detailed plan information is available on our pricing page.

Note: The vulnerability data provided by the Platform is for informational purposes only and does not replace professional security analysis. The Provider does not guarantee the completeness or accuracy of the data.

3. Conclusion of Contract

The contract is concluded upon registration on the Platform and acceptance of these ToS.

For paid subscriptions, the contract is concluded by selecting a plan, entering payment details, and confirming the order. The Provider confirms the contract by email.

Registration requires truthful information. The Customer is obligated to keep access credentials confidential and protect them from misuse by third parties.

4. Pricing & Payment

4.1 Prices

All prices are in Euro and include the applicable VAT. Current prices are listed on the pricing page.

4.2 Payment Processing

Payments are processed via our payment service provider Stripe Payments Europe Ltd. Payment data is encrypted and processed in accordance with PCI-DSS.

Subscription fees are debited monthly in advance. The first payment is due upon conclusion of the contract.

4.3 Right of Withdrawal

Consumers as defined by § 13 BGB have a statutory right of withdrawal of 14 days for distance contracts. The withdrawal instruction is provided separately.

4.4 Refunds

Payments already made are not refunded on a pro-rata basis in the event of early termination. Exceptions apply upon exercise of the statutory right of withdrawal or in cases of proven technical errors.

5. Usage Rights & Restrictions

5.1 Right of Use

The Customer receives a simple, non-transferable, non-exclusive right to use the Platform for the duration of the contract. The right is tied to the respective subscription plan and its usage limits.

5.2 Restrictions

The Customer shall not:

Share access credentials with third parties or share accounts
Misuse the API (e.g. excessive requests, automation to bypass limits)
Attempt to manipulate or compromise the Platform
Commercially resell provided data without express permission
Use automated tools that burden the Platform infrastructure

6. Availability & SLA

The Provider aims for high availability of the Platform. Planned maintenance will be announced in advance where possible.

No availability guarantees are provided for the Free plan.

For Professional and Enterprise customers, an availability of 99.5% per calendar month is targeted. Scheduled maintenance windows and cases of force majeure are excluded.

7. Term & Termination

7.1 Term

The subscription renews automatically for one month at a time unless either party terminates with 7 days' notice prior to the end of the current billing period.

7.2 Termination by the Customer

The Customer may terminate the subscription at any time via the Platform settings or by email to support@sentinel-security.tech. Termination takes effect at the end of the current billing period.

7.3 Termination by the Provider

The Provider may terminate the contract with 14 days' notice to the end of the month, in particular in the event of:

Violations of these ToS
Abusive use of the Platform
Non-payment despite reminder

The right to extraordinary termination for good cause remains unaffected.

8. Warranty & Liability

8.1 Warranty

The Provider warrants that the Platform's functions substantially correspond to the description. The vulnerability data provided (CVE records, scores, descriptions) is supplied without warranty for completeness, currency, or accuracy, as it is aggregated from public sources (NVD, OSV, and others).

8.2 Liability

The Provider is liable without limitation for damages resulting from injury to life, body, or health, as well as for intent and gross negligence.

In cases of slight negligence, the Provider is only liable for the breach of a material contractual obligation whose fulfilment enables the proper execution of the contract in the first place. Liability is limited to the typically foreseeable damage.

Liability for damages arising from the use of the provided vulnerability data is excluded, unless caused intentionally.

Important: CVSS scores, vulnerability descriptions, and product-specific data displayed on the Platform do not constitute security advice. The Customer is solely responsible for assessing and implementing any measures.

9. Data Protection

The protection of your personal data is important to us. Details on data processing can be found in our Privacy Policy.

Processing is carried out in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

10. Changes to Terms

The Provider reserves the right to amend these ToS. Material changes will be communicated to the Customer by email. If the Customer does not object within 14 days of receiving the notification, the amended ToS are deemed accepted.

The Customer will be separately informed of the right to object and its consequences in the change notification.

11. Final Provisions

The laws of the Federal Republic of Germany apply, excluding the United Nations Convention on Contracts for the International Sale of Goods (CISG).

Should individual provisions of these ToS be or become invalid, the validity of the remaining provisions remains unaffected. The invalid provision shall be replaced by a provision that comes closest to the economic purpose of the invalid provision.

The place of jurisdiction for all disputes arising from this contract is, to the extent legally permissible, the registered office of the Provider.