Service Level Agreement

This Service Level Agreement ("SLA") outlines Armor's commitments ("Service Commitment") for (i) the end-to-end uptime for the Armor Complete Services ("Complete Services") and (ii) critical security incident notifications for both the Armor Anywhere Services ("Anywhere Services") and Complete Services, and sets forth the respective remedies available if Armor fails to meet these Service Commitments. This SLA and the credits provided for below ("Service Credits") are Armor's only obligation and customer's only remedy for Armor's failure to meet Service Commitments. Capitalized terms not defined herein will have the same meaning as in the applicable regional Terms of Services Agreement between customer and Armor (the "Agreement").

The Service Commitments under this SLA are:

1. SECURITY INCIDENT NOTIFICATION GUARANTEE

1. This guarantee is only applicable to customers who utilize either the Complete Services or Anywhere Services (collectively, the "Services").
2. Armor guarantees that customers will be notified of a Critical Security Incident within fifteen (15) minutes of Armor's knowledge of a security incident ("Critical Incident Notification Time" or "CINT"). "CINT" is defined as the time period between Armor identifying a Critical Security Incident and the time stamp associated with Armor's initial notification to the customer of the Critical Security Incident.

3. A "Critical Security Incident" occurs when Armor has positively identified a security incident within the scope of the Services that may have a significant impact to the environment protected by Armor. Examples of Critical Security Incidents include, but are not limited to:

   • Successful brute force logins
   • Detection of threat escalation of root privileges or lateral movement
   • Post compromise activity such as outbound remote shell commands, attack tool downloads

   Armor will initially notify the customer of a Critical Security Incident via a ticket in the Armor Management Portal. If Armor receives no response, it will use its best efforts to notify customer's primary point of contact by telephone. Customer is responsible for ensuring that its contact information is up to date in the Armor Management Portal.

4. CINT Credits

   If Armor does not meet the CINT, the customer will receive a credit equal to five percent (5%) of the applicable monthly service Fees for the applicable Services for the impacted account(s). Armor will apply the CINT Credits only against future payments otherwise payable by the customer for the applicable Services. The total cumulative CINT Credits claimed by the customer in any given month shall not exceed the amount owed by the customer for the applicable Services during that month.

5. CINT Credit Claims
   1. All CINT Credit claims should be communicated via a ticket in the Armor Management Portal within seven (7) calendar days of the incident giving rise to the claim. The ticket must include all relevant information, including, but not limited to the impacted server(s), the date, time and full description of the incident and any logs (if applicable). The customer's failure to provide the request and other information as required above will disqualify the customer from receiving a CINT Credit.
   2. To be eligible to make a CINT Credit claim, customer must use its best efforts to maintain a secure environment with hardened and patched applications and configurations, and to follow best security practices as recommended by Armor. Customer is expected to be responsive to the Armor Management Portal and phone notifications, and to take immediate action as required to bring a Critical Security incident to closure.
   3. To qualify for CINT Credit(s), customer (i) must be a Complete Services or Anywhere Services customer, (ii) cannot be ninety (90) or more days past due on payment to Armor, and (iii) must be in compliance with the Agreement for the Services and with Armor's Acceptable Use Policy.

2. ‘END-TO-END' INFRASTRUCTURE UPTIME GUARANTEE

1. This guarantee is only applicable to customers who utilize the Complete Services.

2. Armor guarantees an end-to-end uptime availability of 99.99% for the Complete Services. The "layers" and services needed to ensure the uptime of the Complete Services are:

   • Physical Infrastructure (all power and HVAC infrastructure, including UPS, PDU and cabling)

   • Armor Infrastructure (the Armor Network, firewalls, virtual firewall platform and infrastructure log collection devices)

   • Storage Platform (includes all LUN(s), SAN Fabric, SAN Switches, and SAN Data drive availability)

   • Compute Platform (includes all physical hosts and virtualization software)

   Operations within the Complete Services (e.g., operating system and customer provided software) or within other services offered by Armor are excluded from this guarantee. For purposes of this SLA, the "Armor Network" is defined as the provision of access by Armor to the Armor internal boundary to the Internet, as well as the internal network serving the front-end secure cloud hosting environment.

3. The following are excluded from this guarantee:

   • The backend Armor-only management network;
   • Routing anomalies, asymmetries, inconsistencies and failures of the Internet outside of Armor's control;
   • Maintenance events as defined in Section F below;
   • Customer instructed or requested actions, whether performed by the customer, Armor, or a third party, that impacts the availability of the Services

   Armor proactively monitors infrastructure uptime. The results of these monitoring systems are the exclusive determination of Complete Services uptime. Not more than once a month and upon request via the Armor Management Portal, Armor will provide customer with these results.

4. Service Credits

   If Armor does not meet the "End to End Infrastructure Uptime Guarantee" (excluding Scheduled and Emergency maintenance as defined below), Armor will provide the following Service Credits:

   Length of Downtime	Payment of Applicable Monthly Service Fees Impacted Services
   >5 minutes – 45 minutes	10%
   >45 minutes – 7 hours	20%
   >7hours	50%

   1. The payment of Service Credits will be based solely on the Fees for the Complete Services for the month in which the claim arises and only for the impacted account(s) for the Complete Services. Armor will only apply the Service Credits against future Complete Services payments otherwise payable by the customer. The payment for any single failure shall not exceed fifty percent (50%) of the monthly service Fees for the impacted components of the Complete Services. The total cumulative Service Credits claimed by the customer in any given month shall not exceed the amount owed by the customer for the Complete Services during that month.

   2. No Service Credits will be given for service interruptions: (i) caused by the action or failure to act by customer, customer's personnel, or any of customer's Users, (ii) due to failure of any equipment or software provided by customer, (iii) which are the result of Scheduled or Emergency Maintenance, (iv) due to a force majeure event, (v) for which customer is entitled to a Service Credit for the same or contemporaneous Service Commitment failure, (vi) for downtime or other problems that may result from customer's use of the Beta Services, as defined in customer's Agreement with Armor, (vii) to the extent Armor offers customer a Self-Service Option and that results from customer's use of a Self-Service Option, or (viii) that occurs while customer is subject to any suspension action taken by Armor pursuant to customer's Agreement with Armor.

5. Service Credit Claims

   1. All Service Credit claims should be communicated via a ticket in the Armor Management Portal within seven (7) calendar days of the incident giving rise to the claim. The ticket must include all relevant information, including but not limited to the impacted server(s), the date, time and full description of the incident and any logs (if applicable).

   2. To be eligible to make a Service Credit claim, customer must use its best efforts to maintain a secure environment with hardened and patched applications and configurations, and to follow best security practices as recommended by Armor. Customer is expected to be responsive to the Armor Management Portal and phone notifications, and to take immediate action as required.

   3. (V) To qualify for Service Credit(s), customer (i) must be a Complete Services customer, (ii) cannot be ninety (90) or more days past due on payment to Armor, and (iii) must be in compliance with its Agreement for the Complete Services and Armor's Acceptable Use Policy.

6. Maintenance Exceptions
   1. Scheduled Maintenance

      Armor may from time to time conduct routine tests, maintenance, upgrades or repairs on any part of its networks, infrastructure, or the Services ("Scheduled Maintenance") and will use commercially reasonable efforts to provide prior notice (including at least fourteen (14) days' prior notice for customer-impacting maintenance). Armor will seek to perform scheduled maintenance outside of the business hours of the relevant data center (defined as Monday to Friday 09:00 to 18:00 of the time zone of the relevant datacenter).

   2. Emergency Maintenance

      In some instances, it may not be practical for Armor to give advance notice of maintenance, for example, in the event of an unforeseen disruption of service ("Emergency maintenance"). In these cases, Armor has the right to disrupt Services without prior notice.

7. "Maximum Time to Resolution" means the time span listed in the table below under the heading "Maximum Time to Resolution".
8. "Service Credit" means the monetary credit that Armor will credit to a Customer's eligible account, the calculation of which is provided in the tables below for each of the following scenarios:
   • the Actual Monthly Uptime Percentage is less than the Monthly Uptime Percentage Threshold;
   • the Actual Time to Resolution for any incident is greater than the Maximum Response Time value corresponding to the priority of that incident; or
   • the Actual Initial Response Time for any incident is greater than the Maximum Initial Response Time value corresponding to the priority of that incident.
   For any and all scenarios, the total Service Credit amount shall not exceed the price paid by you for the Services. Service Credit amounts will be the lesser of the calculated amount based on the calculations provided below or the invoiced amount of the affected Services for the service period in which the SLA claim is being made.
9. "Business Days" means Monday through Friday in Singapore Standard Time (SGT).
10. "Service Level Objective" (or "SLO") means a performance target which Armor strives to satisfy, but for which no Service Credit is payable should it be breached.

Service Availability

Applicable Services	Monthly Uptime Percentage Threshold	Service Credit
Armor Service Management APIs	99.99%	10% credit equivalent
Armor Service Management Console	99.99%	10% credit equivalent

Incident Response

Incident Priority	Maximum Initial Response Time	Maximum Update Interval	Maximum Time to Resolution1	Service Credit
Critical	15 minutes	30 minutes	8 hours	10% credit equivalent
High	1 hour	4 hours	1 day	10% credit equivalent
Medium	8 hours	1 day	2 days	SLO-only (0%)
Low	24 hours	As needed (∞)	7 days	SLO-only (0%)

3. Service Commitments

1. If, during any month throughout the Term, the Actual Monthly Uptime Percentage falls below the Monthly Uptime Percentage Threshold, then Customer will be eligible to receive a Service Credit, subject to Customer's compliance with Section 4 below.
2. If, at any time throughout the Term, any of the Customer's incidents' Actual Time to Resolution exceeds the Maximum Time to Resolution, then Customer will be eligible to receive a Service Credit, subject to Customer's compliance with Section 4 below.
3. If, at any time throughout the Term, any of the Customer's incidents' Actual Update Interval exceeds the Maximum Update Interval, then Customer will be eligible to receive a Service Credit, subject to Customer's compliance with Section 4 below.
4. If, at any time throughout the Term, any of the Customer's incidents' Actual Initial Response Time exceeds the Maximum Initial Response Time, then Customer will be eligible to receive a Service Credit, subject to Customer's compliance with Section 4 below.

4. Credit Request and Payment Procedures

To receive a Service Credit for Services, Customer must submit a request to Armor through the Armor Management Portal, available at https://amp.armor.com/, within thirty (30) days from the last day of the calendar month in which Customer claims Armor failed to meet or exceed any Service Commitments. Availability of Armor's Services are measured by a third party provider of performance and monitoring services (the "Monitoring Service"), that issues uptime reports, available at https://status.armor.com/. Armor will adjust the Monitoring Service's uptime results as necessary to account for any Excluded Monthly Times. All submissions must include:

1. "SLA Claim" as the subject of the ticket;
2. the dates and times of Unavailable Monthly Time (for service availability claims)
3. the incident ID for which a claim is being made (for incident response claims)

Each Service Credit will be applied to future amounts payable by Customer to Armor for the Services. No refunds or cash value will be given. Should an SLA claim be made after the Term of the Customer's contract, but otherwise in compliance with the other requirements listed in this section, a credit balance will be kept for the Customer for any subsequent contract terms.

5. Planned and Emergency Maintenance

From time to time, Armor may be required to perform periodic planned or emergency maintenance including, without limitation, feature updates, bug fixes, and security patches. Armor will notify you of any maintenance period in which interruptions of Services are expected. Notifications will be based on the preferences you've configured and are additionally available at https://status.armor.com/.

Armor will strive to provide notifications to Customers with sufficient advanced warning on an SLO-only basis, with the following targets:

Maintenance Type	Notification Target
Planned Maintenance	3 Business Days
Emergency Maintenance	1 Business Day
Unplanned Fault Notification	2 hours

6. Excluded Monthly Times

Notwithstanding any provision in this Agreement to the contrary, no Unavailable Monthly Time will be deemed to have occurred if downtime:

1. is caused by factors outside of Armor's reasonable control, including, without limitation, telecommunications provider-related problems or issues, Internet access or related problems occurring beyond the point in the network where Armor maintains access and control over the Services, or cloud service provider-related problems or issues;
2. results from any actions or inactions of Customer or any third party (except for Armor's agents and subcontractors);
3. is caused by applications, equipment, or other technology provided by the Customer or any third party;
4. occurs during any maintenance period described in Section 5;
5. results from the use of alpha, beta, developer preview, or otherwise non-production features of the Services; or
6. periods of Unavailable Monthly Time that are less than five (5) minutes of continuous unavailability in duration;

collectively, the "Excluded Monthly Times".