Terms and conditions of sale and use

Version of 2026-10-31.

1. Purpose

These terms govern access to and use of the Wardpod service: vulnerability prioritisation and software inventory of Kubernetes clusters, provided online (software as a service) by Thomas SAMSON (SAMSON Tech), hereinafter “the publisher”. They apply to all plans, including the free one. Creating an organization constitutes acceptance of these terms, the data processing agreement and the pricing in force.

2. Customers

The service is reserved for professionals, who use it for their business. The person creating an organization declares that they have the authority to bind the entity they represent. The provisions of the French Consumer Code specific to consumers, including the right of withdrawal, do not apply.

3. Access to the service

• Sign-up requires a verified email address. The customer is responsible for the confidentiality of its credentials and for actions taken with its accounts and agent tokens.
• The Free plan is hosted on a console shared between several organizations, isolated from each other. Paid plans have a dedicated console.
• The customer installs the agent on its clusters, under its own responsibility, and declares that it is authorised to do so. The agent only reports metadata (images, packages and versions, vulnerabilities, workload exposure and security settings), never the contents of image files, the values of pod environment variables, Secrets or logs, as detailed in the documentation.

4. Beta phase

During the beta, announced on the site, the service evolves quickly: features may change or be removed, and no level of availability is guaranteed. The publisher notifies customers by email before any change reducing a current paid plan.

5. Prices and payment

• Prices are those on the Pricing page on the day of subscription (TVA non applicable, article 293 B du CGI). A paid plan includes a monthly fee and a price per distinct running image, calculated on the average of the month's daily readings.
• Payment is made by card, or any other method offered, on Stripe's payment page; the publisher never receives card numbers. The fee is payable in advance each month; the month's image volume is billed at the end of the month. Invoices are available in the customer area.
• A plan change applies immediately, including to the price of images in the current period. The fee is adjusted pro rata to the remaining time on the next invoice; no amount is refunded, any credit is applied to subsequent invoices.
• A price change is announced by email at least 30 days in advance; the customer may cancel before it takes effect.
• In the event of non-payment, access to the console is suspended 14 days after the payment fails, then restored upon settlement. Data is not deleted during the suspension.

6. Term and cancellation

• Subscriptions are monthly, with no commitment, and renew automatically. The customer may cancel at any time from its customer area; cancellation takes effect at the end of the current, already paid period, with no pro rata refund. On that date, the organization and its data are deleted; the customer may undo the cancellation until then, and is responsible for exporting its data beforehand.
• Immediately deleting an organization from the customer area ends its subscription with no refund of the current period and erases its data under the conditions of the privacy policy.
• The publisher may suspend or terminate, after formal notice that has remained without effect for 15 days (without notice in the event of harm to the security of the service), an organization that does not comply with these terms.

7. Acceptable use

The customer shall not use the service against systems it is not authorised to analyse, attempt to access other organizations' data, disrupt the service or circumvent its limits, or resell the service without written agreement. Vulnerabilities discovered in the service should be reported to [email protected].

8. Publisher's commitments

The publisher provides the service with professional care (best-efforts obligation): regular encrypted backups, security updates, monitoring. Maintenance that interrupts the service is, as far as possible, announced in advance; service status is published on the Service status page.

The results of the service (scores, priorities, fixed versions) are a decision aid, calculated from public sources (vulnerability databases, EPSS, CISA's KEV catalogue) which may be incomplete or wrong. They do not guarantee the absence of vulnerabilities; the customer remains solely responsible for the security of its systems and the decisions it takes.

9. Liability

The publisher's liability is limited to direct, proven damage, and capped at the amount paid by the customer for the service in the 12 months preceding the event giving rise to it. The publisher is not liable for indirect damage (loss of business, revenue, data or reputation). These limits do not apply in the event of gross negligence or wilful misconduct.

10. Data

The customer remains the owner of the data reported by its agents. The publisher processes it on the customer's behalf, as a processor, under the data processing agreement, which forms part of these terms. The publisher may use aggregated, anonymous operating statistics to improve the service. Before deleting its organization, the customer can export its data from the console (CSV exports and reports).

11. Changes to the terms

The publisher may change these terms. Any substantial change is announced by email at least 30 days before it takes effect; continuing to use the service afterwards constitutes acceptance, and a customer who refuses may cancel before that date.

12. Applicable law and disputes

These terms are governed by French law. The parties first seek an amicable solution; failing that, any dispute falls under the competent courts for the publisher's place of residence.

Contact

Thomas SAMSON (SAMSON Tech), 32 route des Graves 3, 33640 Portets, France · [email protected]. See also the legal notice.