1. Scope and acceptance

These terms govern access to and use of Origina’s Vulnerability Advisory Portal (VAP). The VAP is a restricted business-to-business portal made available to eligible customers under an applicable agreement with Origina. By accessing or using the VAP, you confirm that you are an authorised user and that you accept these terms. If you do not accept them, do not use the VAP.

2. Authorised users and account security

The VAP is available only to named users authorised by an eligible customer and approved by Origina. Access is limited to the customer’s internal personnel with a legitimate need to review the portal content for security, risk, compliance, remediation, or operational planning purposes. Users must keep login credentials secure, must not share accounts, and must notify Origina promptly of any suspected unauthorised access or misuse.

3. Permitted use

You may use the VAP only for your organisation’s internal business purposes in connection with supported software, including reviewing advisories, hardening guidance, mitigation strategies, risk information, and related documentation. The VAP is intended to support informed decision-making and defensive action within your environment. It is not a public website, a general research tool, or a self-service scanning platform.

4. Restrictions on use

You must not copy, republish, sell, sublicense, redistribute, benchmark, scrape, reverse engineer, or otherwise exploit the VAP or its content except as expressly permitted in writing by Origina. You must not use the VAP to build or train another product or service, interfere with its operation or security, test it in an unauthorised way, or give access to any person who is not an authorised user. You must not remove notices identifying Origina’s rights or the rights of third parties.

5. Portal content and service boundaries

The VAP may include vulnerability advisories, ORG identifiers, confidence scoring, affected product information, mitigation strategies, hardening guidance, tracking information, and compliance-ready or operational documentation. Content is provided to support your internal assessment and response activities. You remain responsible for reviewing, testing, approving, and implementing any action in your own environment and for your own security, risk, legal, regulatory, and change-management decisions. Origina does not guarantee that all vulnerabilities will be identified, predicted, or validated, or that any particular action will achieve a particular outcome.

6. Intellectual property and third-party rights

Origina and its licensors retain all rights in the VAP and its content, including advisory content, methodologies, scoring, structure, documentation, and related materials. No ownership rights are transferred to you. No right or licence is granted to use any Origina intellectual property or any third-party intellectual property except for the limited right to access and use the VAP in line with these terms. Nothing in the VAP gives you any right to use, reproduce, or exploit any third-party software, code, documentation, names, or marks. Certain VAP outputs may draw on publicly available open‑source vulnerability disclosures, research, or community‑maintained materials, but no ownership or licence rights in those materials are transferred, and any use remains subject to the applicable third‑party licence terms.

7. Confidentiality

Unless clearly identified as public, the VAP and its content are confidential. You must protect that information with at least reasonable care and must not disclose it outside your organisation except where your agreement with Origina expressly allows it or where disclosure is required by law. If disclosure is legally required, you should give Origina prompt notice where lawful and practicable.

8. Security, monitoring and suspension

Origina may apply reasonable security controls, monitoring, logging, and access management measures in relation to the VAP. Origina may suspend, restrict, or remove access where reasonably necessary for security, maintenance, legal compliance, misuse, or breach of these terms. Origina may also update, refine, withdraw, or replace portal content or features from time to time.

9. Warranties and liability

The VAP is provided on an as available basis. To the fullest extent permitted by applicable law, Origina excludes warranties not expressly stated in your agreement with Origina, including implied warranties of accuracy, completeness, fitness for a particular purpose, and non-infringement. Origina is not responsible for third-party sites or materials referenced through the VAP. Origina will not be liable for indirect, incidental, special, or consequential loss arising from use of the VAP. Nothing in these terms excludes liability that cannot lawfully be excluded.

10. Privacy and cookies

Your use of the VAP is also subject to Origina’s Privacy Policy and Cookie Policy, each as updated from time to time. Those policies explain how personal data is handled and how cookies or similar technologies may be used in connection with the VAP.

11. Relationship with other agreements

These terms apply specifically to access to and use of the VAP. They do not replace the terms of any applicable master services agreement, statement of work, order form, or other written agreement between you and Origina. Any matters not expressly addressed in these terms, or that are addressed in more detail in those agreements, will be governed by the relevant agreement, including matters such as fees, service scope, liability, governing law, and jurisdiction.