1. Application of This Schedule

This Plan Entitlement Schedule ("Schedule") forms part of the applicable Subscription Terms under the Insight Recon End User License Agreement ("EULA"). It is a binding contractual document for purposes of Section 23 of the EULA.

The version of this Schedule applicable to a subscription is the version identified in the customer's order, checkout confirmation, account entitlement record, renewal record, or other applicable Subscription Terms. Every published version remains available in the version archive.

Public pricing pages and feature pages may summarize current plans, but this Schedule governs the binding Domain limits, Authorized User limits, and permitted-use rights for the applicable subscription unless a more specific order form or individualized subscription record provides otherwise.

2. Domain Definition and Counting

For purposes of this Schedule, a "Domain" means a unique Active Directory domain assessed using Insight Recon, generally identified by its Active Directory DNS domain name or another unique directory identifier used by Insight Recon.

Each distinct Active Directory domain counts separately, including multiple domains within the same Active Directory forest.

A Domain counts against a subscription's Domain entitlement when the Domain is first assessed, registered, activated, or otherwise used with that subscription.

Repeated, recurring, or subsequent assessments of the same Domain do not consume additional Domain entitlements.

Domain entitlements reset at the beginning of a new subscription term unless different terms are expressly stated in an applicable order form or individualized Subscription Terms.

3. Plan Overview

Enterprise Domain and Authorized User counts are set in the applicable order form. Enterprise includes third-party assessment and consulting/MSSP use rights, subject to the authorization requirements in Section 5.1 of the EULA.

4. Free

Free includes access to the then-current on-premises Active Directory assessment functionality Breach Point makes available to Free users, subject to reasonable technical, usage, and rate limitations.

Free retains only the most recent scan in the active account and does not include paid-plan history, scheduled scanning, multi-user access, or third-party assessment rights.

5. Standard

Standard includes the paid internal-use functionality generally associated with the Standard plan, which may include historical scan information, scheduled scanning, posture tracking, account risk information, applicable hybrid-identity assessment capabilities, and reporting features made available to Standard subscribers.

6. Auditor

Auditor may be used by consultants, auditors, MSSPs, security service providers, and other organizations to assess Target Environments owned or operated by third parties, provided the customer has the written authorization required by Section 5.1 of the EULA.

The number of separate client organizations that may be served is not independently limited. However, all unique Domains assessed during the subscription term, whether owned by the subscriber or by client organizations, count toward the maximum of 50 unique Domains.

Examples:

• 50 client organizations with one Domain each = 50 Domains.
• 10 client organizations with five Domains each = 50 Domains.
• One client with 20 Domains plus 30 single-Domain clients = 50 Domains.

Auditor may also include the portable Linux scanner, white-label reporting, RBAC, and other functionality Breach Point makes available to Auditor subscribers.

7. Enterprise

Enterprise begins from the Auditor permitted-use rights. Domain limits, Authorized User limits, deployment models, support levels, and other entitlements are established in the applicable order form or other individualized Subscription Terms.

Enterprise may include custom Domain limits, deployment models, support levels, integrations, SSO/SAML, offline or air-gapped deployment, API access, custom engineering, onboarding, procurement terms, or other capabilities.

Unless expressly stated in an applicable order form, a capability publicly identified as an Enterprise option or "available to scope" is not automatically included.

8. Features and Product Evolution

Breach Point may improve, modify, replace, or discontinue individual product features over time.

Breach Point will not materially reduce the core Domain entitlements, Authorized User entitlements, or permitted-use rights expressly identified in the Schedule applicable to a then-current paid subscription term, except where reasonably necessary to address a legal requirement, security risk, third-party dependency, or circumstance outside Breach Point's reasonable control.

Descriptions on pricing pages, product pages, feature-comparison pages, FAQs, and marketing materials describe then-current functionality but do not independently modify the binding Domain limits, Authorized User limits, or permitted-use rights in this Schedule.

9. Renewals and Schedule Changes

The Schedule version applicable to a subscription remains applicable through the end of that subscription term, and remains available in the version archive after it is superseded.

At renewal, the subscription may become subject to the then-current version of this Schedule.

Breach Point will provide at least thirty (30) days' advance notice before renewal of a material reduction in Domain entitlements, Authorized User entitlements, or permitted-use rights that will apply to the renewed subscription, unless the change is required by applicable law or reasonably necessary to address an urgent security or legal risk.

10. Order of Precedence

If an order form, individualized subscription record, or other written Subscription Terms expressly grants a different entitlement or permitted-use right, that more specific term controls with respect to the entitlement it addresses.

The EULA otherwise governs access to and use of the Insight Recon software, customer platform, and subscriptions, in accordance with Section 23 of the EULA.