License Information

HailBytes products are licensed under the HailBytes Commercial Software License, Version 1.0, effective July 26, 2026. It is a commercial license. It is not an open-source license and it is not a source-available license. Your entitlement is metered on compute consumption — never on users, seats, employees, assets, targets, scans, campaigns, or tenants.

What the license permits

• Deploy in your own cloud accounts. Install, operate, and scale the software in one or more accounts you control, including copies for high availability, backup, disaster recovery, testing, and staging, with all consumption metered under your entitlement.
• Unlimited users and targets. No limit on users, employees, seats, monitored assets, targets, scans, campaigns, templates, findings, or clients served within your entitlement.
• Managed and multi-tenant service delivery. Use the software to deliver managed security, SOC, consulting, testing, or advisory services to your own clients, at prices you set, in your own name. One instance per client or a single instance serving many — both are permitted, in your account or in the client's.
• White-label branding. Apply your own name, logo, favicon, colors, and identity provider to the extent the product supports per-tenant branding, provided HailBytes' own copyright and license notices stay intact.

No hosted-service restriction

Unlike the Elastic License 2.0 and similar source-available licenses, this license places no restriction on providing the software to third parties as a hosted or managed service, or on operating it multi-tenant. Any such limitation in any other license that has accompanied the software is superseded in its entirety. What the license does not permit is reselling the software itself as a product — that requires a written reseller authorization from HailBytes.

Your entitlement also stands on its own: it does not terminate, suspend, or diminish because an agreement between HailBytes and a reseller, distributor, or marketplace partner ends. It runs for its term under your order.

Source code access

Where HailBytes makes source code available to you — as it does for the SAT and ASM deployment images — you may read, review, inspect, and audit it, copy it internally for that purpose, use it to verify the security and behavior of what runs in your account, and modify it and run your modified build within your entitlement.

That access is confidential. You may share it with your own personnel and contractors who are bound by written confidentiality obligations, and with a client on whose behalf you operate the software on no-less-protective terms. You may not publish, post, distribute, or sublicense it. Nothing in the license obliges you to publish your own modifications, and the license does not convert to an open-source license on any date or event.

Running a modified build has consequences worth knowing: the limited warranty does not cover a non-conformity your modification caused, and HailBytes has no obligation to support a modified build or to keep its updates compatible with your changes.

Restrictions

• No notice removal: Copyright, trademark, license, and attribution notices must stay intact, and you may not represent yourself as the author or owner of the software
• No metering circumvention: You may not disable, tamper with, or interfere with metering, entitlement, or usage-reporting mechanisms, or under-report consumption
• No competing product: You may not use the software, its source, or anything derived from either to build or market a product or service that competes with it
• No resale of the software as a product: Delivering services with it is permitted; reselling, redistributing, or sublicensing it as a product requires written authorization
• Authorization to scan (ASM): For every target you or your clients configure, you must own it or hold documented authorization from whoever can grant it, obtained before the target is configured and retained for the term plus three years
• Authorized organizations only (SAT): Simulated phishing and training may only target individuals whose organization has authorized the activity

The full license text ships as the LICENSE file in each product release, is published at the current version, and is available on request from [email protected]. SPDX identifier: LicenseRef-HailBytes-Commercial-1.0. An updated version of the license applies only to entitlements acquired, and renewals commencing, after it takes effect; an existing entitlement stays on the version in force when it was acquired.

HailBytes SAT

HailBytes SAT is a proprietary platform for enterprise phishing simulation and security awareness training, developed and maintained by HailBytes. The full LICENSE file ships with every release and deployment image.

HailBytes ASM

HailBytes ASM is a proprietary platform for automated reconnaissance and attack surface management, developed and maintained by HailBytes. The full LICENSE file ships with every release and deployment image.

U.S. Government End Users

The software is “commercial computer software” and “commercial computer software documentation” as those terms are used in FAR 12.212 and DFARS 227.7202. U.S. Government end users receive the same rights granted to every other end user under this license, and no additional government rights attach.

Third-Party Components

HailBytes products integrate a curated set of third-party libraries, runtimes, and security tools. Each release ships with a Software Bill of Materials (SBOM) that enumerates every component, its version, and its upstream license. Customers under active subscription can request the latest SBOM from their account representative or by emailing [email protected].

Where third-party licenses require attribution, the full notice is preserved in the NOTICE file included with the product. Distributing or embedding these components outside of a HailBytes deployment remains subject to their respective upstream licenses.

Trademarks

“HailBytes,” “HailBytes SAT,” and “HailBytes ASM” are trademarks of HailBytes, LLC. All other trademarks are the property of their respective owners.

Questions About Licensing?

For licensing inquiries, commercial agreements, SBOMs, or clarification on terms:

• Legal: [email protected]
• Sales: [email protected]