The Tencent Cloud Security Center Terms of Service (the "Terms of Service") is an agreement entered into between Tencent Cloud and you regarding your use of the Tencent Cloud Security Center Service (the "Service(s)"), and constitutes a supplementary agreement to the Tencent Cloud Terms of Service you have agreed to be bound by. Before using the Services, please read and fully understand these Terms of Service. Certain provisions that may affect your legal rights and interests—including, but not limited to, limitations of liability, and disclaimers, remedies for breach of contract—may be highlighted in bold, underlined, or otherwise emphasized to draw your attention.
To use the Services, you shall comply with the present Terms of Service, the Tencent Cloud Terms of Service and the Service Rules. "Service Rules" means, in addition to these Terms of Service, any rules, instructions, standards, service level, technical specifications, operation documents, billing standards, or other documentation relating to the Services. The Service Rules are set out on the Tencent Cloud International Portal or other relevant pages. You should review and fully understand the applicable Service Rules before using the Services and comply with them to ensure the proper and uninterrupted use of the Services. The Services will conduct security scans, detections and tests on your hosts, containers, public IPs, domain names and other assets, collect necessary data for analysis and provide remediation recommendations. The normal operation of your system and assets may be affected during the Services (such as processing of large amounts of test data, occupation of service bandwidth, server anomalies, database anomalies). Before using the Services, please ensure that you fully understand the Services and their related security detection principles. By clicking "Select Assets", "Confirm", "Physical Examination Items", "Physical Examination Item Configuration", or purchasing or using the Services, or accepting these Terms of Service in any other explicit or implicit manner, you are deemed to have read and agreed to be bound by these Terms of Service. These Terms of Service shall have legal effect between you and Tencent Cloud and shall become a legally binding document for both parties.
1. Service Content
1.1 The Services refer to the integrated cloud security protection services provided by Tencent Cloud through the Cloud Security Center platform, combining cloud workload protection, container security protection, and cloud product configuration check capabilities, specifically including:
(1) Cloud workload protection: Security protection functions for cloud servers, including asset management, vulnerability management, security baseline, and intrusion detection, supporting detection capabilities for malicious files such as mining Trojans and ransomware, as well as cloud security expert technical support services;
(2) Container security protection: Container security protection capabilities including container asset management, image security, runtime security, and security baseline;
(3) Cloud product configuration check: Capabilities including automated asset inventory, asset security protection, port risk detection, vulnerability risk detection, weak password risk detection, cloud resource configuration risk detection, website content risk detection, Internet Attack Surface Mapping, leakage monitoring, simulated attack, user behavior analysis, log audit and retrieval investigation, security orchestration and automated response, and security visualization.
The specific service content is subject to the Services you purchase and the service content provided by Tencent Cloud.
1.2 The Services may provide you with one or more service options for your selection, including (such as different device models, service configurations, function combinations, function sets, or other service offerings.). You may, at your sole discretion, select and purchase or use the service options that best meet your needs. Tencent Cloud will provide you with services in accordance with these Terms of Service, Service Rules and the service options you selected.
1.3 Tencent Cloud may, at its sole discretion, provide certain Services or portions of the Services free of charge (collectively, the "Complimentary Services") to eligible customers for purposes including customer feedback and marketing campaigns. You understand and agree that Complimentary Services are promotional benefits provided by Tencent Cloud to customers and are not part of the Service purchased by you for a fee. The scope, features, service standards, service levels, and other aspects of the Complimentary Services may differ from those of the paid Services. The specific content of the Complimentary Services shall be made available by Tencent Cloud from time to time.
2. Service Fees
2.1 For details on the settlement method and billing standards of the Services, please refer to the Service Rules introduction page. You can choose prepaid or postpaid Services based on your actual needs:
(1) Prepaid: You need to pay the corresponding service fees in advance according to the Service Rules before you can use the Services. If you wish to continue using the Services after the applicable service term expires, you must renew or purchase a new Service through the billing center.
(2) Postpaid: You need to submit an activation application and after it is approved, you can use the Services in accordance with the Service Rules. Tencent Cloud will bill you based on your actual usage and deduct the applicable service fees from your account balance. You must ensure that your account maintains a sufficient balance to pay applicable service fees.
2.2 After any part of the Services is activated, even if you do not add new service items or resources or perform any further operations, such Services will continue to occupy resources and incur charges. You should renew or close the Services in a timely manner.
3. Rules of Use
3.1 Service Description and Automatic Configuration
3.1.1 The Cloud Security Center adopts a "console - agent - server" product architecture. To facilitate your unified management of Tencent Cloud server security, Tencent Cloud will automatically synchronize the instance directory (if any) of your Tencent Cloud servers (including Cloud Virtual Machine (CVM), Lighthouse, Edge Computing Machine (ECM), Cloud Bare Metal (CBM), etc.) to the host list of the Services, and based on platform security capabilities, perform high-risk port exposure detection on Tencent Cloud servers with the Cloud Security Center Agent installed. You understand and agree to authorize Tencent Cloud to synchronize your server instance information and perform the above detection.
3.1.2 The "Automatic Purchase" feature of the Services refers to the automatic upgrade of the Cloud Security Center Basic Edition to a paid edition. This feature is disabled by default. If you enable the Automatic Purchase switch and select the desired protection edition and payment mode, when a new server with the Cloud Security Center Basic Edition installed is detected, Tencent Cloud will automatically place an order for the corresponding service and bind the server to such service according to your settings, and the resulting applicable fees will be automatically deducted from your account.
3.2 Agent Installation and Management
3.2.1 A server must have the Cloud Security Center Agent installed to use the Cloud Security Center service normally. Regardless of whether the server is hosted on Tencent Cloud or by a third-party, you must install and configure the Agent according to the relevant documents and guidelines of the Services. If your server does not have the Agent installed, the Cloud Security Center will not be able to provide protection for the corresponding server, and the relevant Services will continue to be billed in accordance with the applicable billing rules.
3.2.2 The Cloud Security Center supports Agent offline and uninstall alert functions. You can configure the alert switch, alert threshold, and applicable host range. When the Agent is detected to be offline for a certain period of time or the Agent is uninstalled through a script, an alert will be triggered to remind you so that you can restore the Agent's online status or reinstall the Agent in time.
3.2.3 You should be fully aware of the importance of the Cloud Security Center Agent. The Agent is responsible for continuously monitoring security risks, collecting and reporting data. In daily security operations, in addition to paying close attention to and responding to offline and uninstallation alerts in a timely manner, you are obliged to proactively and regularly check the operation of the Agent and related systems. If the Agent is found to be abnormally offline, uninstalled, malfunctioning, or otherwise affecting the normal business operation, you should promptly take appropriate corrective measures.
3.3 Security Analysis and Detection
3.3.1 You agree to authorize Tencent Cloud to collect security feature information related to system accounts, operating system versions, software versions, processes, ports and system logs through the Cloud Security Center Agent for security risk analysis, to identify security risks and generate alert logs.
3.3.2 You understand and agree that, in order to provide security protection services, the Cloud Security Center Agent will monitor and scan files, IP addresses, and other security-related data on devices in real time for security risk analysis, in order to promptly identify potential risks on the server and generate alert logs. For detected suspicious files, Tencent Cloud will compare and analyze file feature information such as MD5 values. If the Cloud Security Center Agent detects suspected virus or Trojan security threat information on your server (including suspicious executable files, IP addresses, and malicious domain names for outgoing requests) and the virus database does not contain sample characteristics of such security threat information, Tencent Cloud will upload the relevant security threat information to Tencent Security Center for analysis, in order to promptly and more accurately identify potential risks on your devices. Furthermore, if after security feature analysis such information is determined to be malicious programs, Tencent Cloud will use the security threat information and its security risk characteristics to update the security services of Tencent Cloud and its affiliates, to enhance protection against emerging malicious programs such as viruses.
3.4 Asset Security Scanning
3.4.1 The Services need to take security scanning and other measures on your assets. You agree and authorize Tencent Cloud to conduct asset security checks on host assets, container assets, local images, warehouse images, clusters, public IP assets, domain name assets and other cloud resources (including but not limited to websites, hosts, APIs, collectively "Assets") to which you have legal rights, and authorize Tencent Cloud to scan and detect all ports of your selected Assets. The measures that Tencent Cloud may take include but are not limited to automatic detection based on security products and security tools, and manual detection and verification based on security experts.
You agree to use the Services and consent to Tencent Cloud's operations on related systems and Assets, and commit that:
(1) Information authenticity: All information you provide during the use of the Services is true, accurate, legal and valid. All Assets you authorize are owned by you or have corresponding authorization. If any information you submit violates the foregoing commitments or applicable laws or regulations, you shall be solely responsible for all resulting consequences and liabilities.
(2) Awareness of scanning risks: You understand and agree that security scanning may cause risks such as business service interruption, data loss, data leakage, etc. To the maximum extent permitted by law, Tencent Cloud shall not be liable for any losses or consequences arising therefrom. You shall independently maintain appropriate data backups and should conduct security scanning during non-peak business hours whenever possible.
3.5 Security Risk Warnings and Notifications
3.5.1 To protect the security of your cloud assets, you agree that Tencent Cloud and its authorized partners may use various communication channels, including internal messages, SMS, phone calls, and security reports to issue early warning notifications regarding detected risk incidents and security issues associated with your account, and provide you with relevant security recommendations.
3.6 User Security Responsibilities
3.6.1 You shall take appropriate security measures for your cloud servers and cloud accounts to prevent unauthorized access, use, security risks and cybersecurity incidents. You are solely responsible for the security of your data, data backup and confidentiality of your account credentials relating to the server. Any losses, damages or consequences arising from your failure to properly maintain your servers, protect your data, or safeguard your account credentials shall be borne by you.
3.6.2 You must not use the Services for any illegal activities, including but not limited to cryptocurrency mining, external network attacks, or other malicious activities.
3.6.3 You should purchase or configure security protection of appropriate levels based on the characteristics and requirements of your server and business operations, and regularly back up data, remediate vulnerabilities, optimize security baseline configurations, and respond to security alerts in a timely manner. You shall be solely responsible for any server compromise, ransomware incidents, or other losses arising from your failure to fulfill the above responsibilities.
3.6.4 You understand and agree that the Services do not guarantee the detection or prevention of all security risks, and do not support decryption of files encrypted by ransomware. You shall be solely responsible for data recovery after server intrusion and for handling any other matters outside the functional scope of the Services.
4. Service Level
4.2 Tencent Cloud provides you with service availability guarantee in accordance with the scope of the Service Rules. If your service availability requirements exceed the service availability standards in the Service Rules, you shall implement appropriate measures such as setting up high availability for your own system according to your own needs. Tencent Cloud can provide necessary assistance. If Tencent Cloud is required to provide additional services, design or provide other assistance, both parties shall negotiate separately.
5. Intellectual Property
5.1 The intellectual property rights and other rights of the Services and any information, technology, software, etc. provided to you by Tencent Cloud belong to Tencent Cloud (except for any rights owned by a third party according to law). You only have the right to use them in accordance with these Terms of Service and shall not infringe upon the legitimate rights and interests of Tencent Cloud in any way.
5.2 You shall ensure that the content you submit to Tencent Cloud, your use of Tencent Cloud Services, and any content processed or generated through your use of Tencent Cloud Services do not infringe upon the legitimate rights and interests of any third party.
6. Limitation and Exclusion of Liability
6.1 You understand and agree that Tencent Cloud's Services are provided in accordance with the current state of available technologies and business practices. Tencent Cloud will make reasonable effort to ensure the continuity and security of the Services, but Tencent Cloud does not guarantee that the Services it provides will be free of errors or defects. Therefore, you understand and agree that even if the Services have certain flaws or defects, if such flaws or defects are not caused by Tencent Cloud's intent, fault or negligence, or are due to technical limitations of the industry at the time, it will not be regarded as a breach of contract by Tencent Cloud, and Tencent Cloud shall not be liable for such technical limitations. Tencent Cloud commits to continuously improving its technology and service levels and enhancing security protection capabilities.
6.2 Due to the real-time dynamic nature of security, Tencent Cloud cannot guarantee that the Services will identify all security vulnerabilities and risks. You understand and agree that the security risks and remediation recommendations in the service report provided by the Services are for your reference only. You are responsible for determining whether the relevant information is consistent with your actual business requirements. Tencent Cloud does not guarantee that the content of the report can resolve all your security issues. You shall bear all risks and consequences of all operations you perform in the Services and the security decisions you make by using or referring to the information provided by the Services.
6.3 You understand and agree that, given the nature of the Internet and cloud services, the Services are not liable for any losses, damages or consequences arising from the following circumstances:
6.3.1 Agent not installed correctly: You fail to follow the installation instructions to correctly install the Agent or fail to verify whether the installation was successful, resulting in the Agent being offline;
6.3.2 Network restrictions or connection interruptions: Your network security policies restrict the Agent network communications or interrupt the network connection, causing the Agent to go offline;
6.3.3 Agent automatic upgrade problem: The Cloud Security Center Agent has an automatic upgrade mechanism to obtain the latest security rules. During the upgrade process, errors or upgrade failures may occur, causing the Agent to go offline (if you wish to defer an upgrade, please contact Tencent Cloud for further assistance);
6.3.4 Agent restart failure: When repairing some vulnerabilities, the Services will recommend that you restart the Agent to ensure the effectiveness of the vulnerability repair and the security of the system. However, the restart process may fail, causing the Agent to go offline;
6.3.5 Ignoring offline and uninstallation alerts: You fail to correctly configure offline and uninstallation alerts, or fail to review such alerts, or fail to respond to alerts in a timely manner, resulting in the Agent being offline or uninstalled without appropriate corrective actions being taken for an extended period;
6.3.6 Compromised server handling: If your cloud server or cloud account is compromised due to improper security measures, you should immediately take necessary security remediation measures and cooperate with the platform to complete evidence collection and security remediation. In order to prevent the compromised server from further causing security impacts and losses to Tencent Cloud and other users, Tencent Cloud has the right to take necessary emergency measures such as forced removal of Trojan files, processes, and identity authentication for the compromised server. During this process, the Services may become unavailable or your business operations may be affected.
6.4 You understand and agree that with respect to free services, Complimentary Services, or trial or testing services (such as public beta, invitational beta, etc., whether or not charged), Tencent Cloud makes no express or implied commitments or guarantees regarding the availability, applicability, reliability of such Services, and shall not be liable for any risks, losses, damages, or consequences arising from your use of such Services (unless otherwise agreed by both parties).
6.5 To the extent permitted by applicable law, neither party shall be liable to the other party for any indirect, incidental, special, consequential or punitive damages and losses (such as loss of profits, loss of opportunity, fees paid to third parties, loss or damage to reputation/goodwill, etc.), whether based on contract, warranty, tort or any other legal theory of liability, regardless of whether either party has been advised or should have anticipated the possibility of such losses or damages.
6.6 Regardless of whether there are other agreements, the aggregate amount of liability of Tencent Cloud towards you based on these Terms of Service and the Services (whether based on contract, tort or any other legal theory of liability) shall not exceed the total amount of fees you have paid to Tencent Cloud for the Services; if the service period of your use of the Services exceeds 12 months, the maximum amount of liability of Tencent Cloud shall not exceed the total amount of fees you have paid to Tencent Cloud for the Services in the 12 months preceding the event giving rise to the claim. For the avoidance of doubt, the "service fees" refers only to the actual amounts you have paid for the actual use of the Services, and excludes any unused prepaid amounts, vouchers, discounts, or other promotional benefits. If this clause conflicts or is inconsistent with other agreements between the parties or the Tencent Cloud Service Rules, this clause shall prevail to the extent of such conflict or inconsistency.
7. Applicable Law and Dispute Resolution
7.1 All matters related to applicable law, jurisdiction, and dispute resolution of these Terms of Service shall be governed by and interpreted in accordance with Clause 3 (Contracting Entity; Governing Law) of the Tencent Cloud Terms of Service, which forms an integral part of these Terms of Service by reference. 8. Miscellaneous
8.1 Tencent Cloud may amend these Terms of Service from time to time when appropriate or necessary, to reflect service changes. You may access and review the latest version of these Terms of Service on the official website of the Tencent Cloud International Portal.
8.2 These Terms of Service, as an ancillary agreement of the Tencent Cloud Terms of Service, have the same legal effect as the Tencent Cloud Terms of Service, and you shall comply with them during your use of the Services.
8.3 The Service Rules are an important part of these Terms of Service and have the same legal effect as these Terms of Service. You shall comply with the applicable Service Rules.
8.4 All headings in these Terms of Service are for reading convenience only and have no substantive meaning in themselves, and shall not serve as the basis for interpreting the meaning of these Terms of Service.
8.5 Any matters not expressly provided for in these Terms of Service shall be governed by the Tencent Cloud Terms of Service. If these Terms of Service conflict or are inconsistent with the Tencent Cloud Terms of Service, these Terms of Service shall prevail but only to the extent of such conflict or inconsistency. (No Text Below)