viILogics MDR Service Addendum

ViLOGICS MDR SERVICE ADDENDUM

This ViLogics Managed Detection and Response (MDR)  Service Addendum (“MDR Addendum”) describes the MDR Service (as defined below) provided by ViLogics, Inc. (“ViLogics”) to the ViLogics customer (“Customer”) identified in the signature box below who subscribed to the TSO Platform under the ViLogics Master Subscription Agreement, or another version of the MSA agreed to in writing among the Customer and ViLogics and during the timeframe for such MDR Service subscription stated in a Quote or a valid Purchase Order (“MDR Subscription Term”). Capitalized terms used but not defined in this MDR Addendum shall have the meaning assigned to such terms in the MSA, and in case of a conflict among terms defined in the MDR Addendum and terms defined in the MSA, the MSA shall prevail.

The MDR service provides a turnkey managed threat detection and response services to augment Customer’s use of the TSO Platform and enhance the TSO Platform operations. ViLogics offers this optional high tier of service under the TSO Security Plus Platform: MDR Respond which includes 24x7x365 monitoring of Customer’s TSO Platform management console, triage analysis, as well as detection, prioritization and response services (“MDR Respond”) and MDR Respond which offers MDR Respond services with full digital forensics analysis, better response SLAs, deep analysis and incident response hours.

The MDR Service is provided by highly trained ViLogics analysts highly experienced in operating the TSO Platform, who optimize the TSO Platform capabilities to maximize threat detection, prioritization and response. MDR Respond includes various threat response activities (such as remediation and rollback), post incident intel driven hunting (such as active review and assessment of threats), forensics and remediation. Incident response services are provided only to MDR customers that execute a separate Incident Response Agreement with ViLogics and are subject to such Incident Response Agreement.

The MDR Service is provided by dedicated ViLogics analysts utilizing ViLogics’s management console and responding in real time to identified threats. The analysts respond to all identified threats on an ongoing basis based on severity classification by the TSO Platform and make a commercially reasonable effort to handle all threats rapidly and effectively. All analysts’ activities are recorded within the management console and can be reviewed by Customer.

Customer authorizes ViLogics to perform any remote analysis of Customer Data (as defined in the MSA) and use the File Fetch feature which downloads full files (that may contain Customer Confidential information or Personal Information) from the Customer Endpoint to the ViLogics management console as necessary for providing the MDR Services. Customer acknowledges and agrees that ViLogics may be required to connect its computers and other necessary equipment directly to Customer’s computer network and consents to such activity in connection with providing the MDR Service.

ViLogics warrants the provision of professional, timely and ongoing MDR Service in accordance with this MDR Addendum and the MDR Documentation, however ViLogics does not warrant or guarantee identification of every existing threat, immediate or any resolution of every identified threat, error-free threat classification, correct incident prioritization, or satisfactory threat response or threat hunting. In subscribing to the MDR Service, Customer acknowledges that the foregoing disclaimers with respect to ViLogics’s provision of the MDR Service. Without limiting the foregoing, ViLogics provides the MDR Service as an “as is” service without any warranties, express or implied, including, without limitation, warranties of merchantability, fitness for a particular purpose, accuracy, non-infringement, or those arising by law, statute, usage of trade, or course of dealing, and ViLogics’s liability and liability limitations in connection with the MDR Service shall be in accordance with its obligations under the MSA.

Priority Levels and Response Times

The SLA refers only to the Response Time by a MDR Service analyst to an event and is dependent on the tier of MDR Service.

“Response Time” means the elapsed time between the reported detection time by the ViLogics agent and the time a MDR Service analyst annotated the event.

Event Type (as defined in management console)	RESPONSE TIME Respond (within 90%)
Active/Suspicious	2 hours
Mitigated/Blocked*	4 hours