Invarix.Guard and Invarix.Gate families (Invarix.Guard, Invarix.Guard.Professional,
Invarix.Guard.Evidence, Invarix.Gate, Invarix.Gate.Extensions.AI, Invarix.Gate.AgentFramework,
Invarix.Gate.Evidence, Invarix.Gate.AspNetCore)
Copyright (c) 2026 Alex Batten

Licensed under the Elastic License 2.0. A verbatim copy of the license follows, and
nothing after it modifies it. The commercial terms Invarix applies to the license-key
gated features are stated separately, in the "Invarix commercial terms" section at the
end of this file.

---

Elastic License 2.0

URL: https://www.elastic.co/licensing/elastic-license

## Acceptance

By using the software, you agree to all of the terms and conditions below.

## Copyright License

The licensor grants you a non-exclusive, royalty-free, worldwide,
non-sublicensable, non-transferable license to use, copy, distribute, make
available, and prepare derivative works of the software, in each case subject to
the limitations and conditions below.

## Limitations

You may not provide the software to third parties as a hosted or managed
service, where the service provides users with access to any substantial set of
the features or functionality of the software.

You may not move, change, disable, or circumvent the license key functionality
in the software, and you may not remove or obscure any functionality in the
software that is protected by the license key.

You may not alter, remove, or obscure any licensing, copyright, or other notices
of the licensor in the software. Any use of the licensor's trademarks is subject
to applicable law.

## Patents

The licensor grants you a license, under any patent claims the licensor can
license, or becomes able to license, to make, have made, use, sell, offer for
sale, import and have imported the software, in each case subject to the
limitations and conditions in this license. This license does not cover any
patent claims that you cause to be infringed by modifications or additions to
the software. If you or your company make any written claim that the software
infringes or contributes to infringement of any patent, your patent license for
the software granted under these terms ends immediately. If your company makes
such a claim, your patent license ends immediately for work on behalf of your
company.

## Notices

You must ensure that anyone who gets a copy of any part of the software from you
also gets a copy of these terms.

If you modify the software, you must include in any modified copies of the
software prominent notices stating that you have modified the software.

## No Other Rights

These terms do not imply any licenses other than those expressly granted in
these terms.

## Termination

If you use the software in violation of these terms, such use is not licensed,
and your licenses will automatically terminate. If the licensor provides you
with a notice of your violation, and you cease all violation of this license no
later than 30 days after you receive that notice, your licenses will be
reinstated retroactively. However, if you violate these terms after such
reinstatement, any additional violation of these terms will cause your licenses
to terminate automatically and permanently.

## No Liability

*As far as the law allows, the software comes as is, without any warranty or
condition, and the licensor will not be liable to you for any damages arising
out of these terms or the use or nature of the software, under any kind of
legal claim.*

## Definitions

The **licensor** is the entity offering these terms, and the **software** is the
software the licensor makes available under these terms, including any portion
of it.

**you** refers to the individual or entity agreeing to these terms.

**your company** is any legal entity, sole proprietorship, or other kind of
organization that you work for, plus all organizations that have control over,
are under the control of, or are under common control with that
organization. **control** means ownership of substantially all the assets of an
entity, or the power to direct its management and policies by vote, contract, or
otherwise. Control can be direct or indirect.

**your licenses** are all the licenses granted to you for the software under
these terms.

**use** means anything you do with the software requiring one of your licenses.

**trademark** means trademarks, service marks, and similar rights.

---

# Invarix commercial terms

Everything above this line is the Elastic License 2.0, reproduced verbatim. Nothing below
it changes a word of it. This section is a separate statement of the commercial terms
Invarix applies to the license-key gated features of the packages named at the top of this
file, and it ships here because this file is the only legal document packed into every
nupkg. Read together, the Elastic License 2.0 governs the copyright grant and this section
governs the paid entitlements.

No prices appear in this section. A published package cannot be corrected after the fact,
and a price printed inside one is wrong the day it changes. The current bands, the renewal
price, and the redistribution terms are in COMMERCIAL.md in the product repository and
from sales@invarix.dk.

## What costs nothing

Observe mode, the full detector pack, the reports, the verdict log, and coverage detection
are free under the Elastic License 2.0 above, for any company, with no license key and no
payment. Observe mode blocks nothing, by design.

Enforce mode and the other license-key gated features are also free of charge for any
company whose annual revenue is below the Community threshold stated in the current terms.
That band is gated on revenue, not on features: the same build, the same capabilities,
unlocked by a license token issued at no charge. Nothing in the software tells a free
token from a paid one, only the SKU it carries, so the band is a term of this license
rather than a technical restriction.

## Scope of a paid license

A paid license covers production execution of the licensed packages by the licensee,
irrespective of how deep the package reference sits. A package pulled in transitively,
through an internal shared library or any other intermediate dependency, is licensed on
the same terms as a direct reference. What is licensed is the execution, not the line in a
project file.

A license is granted to one legal entity for one product line, identified by the SKU claim
in the license token. It does not extend to the licensee's parent, subsidiaries, or sister
entities unless the license says so in writing.

## Redistribution

The ordinary license does not cover redistribution. Embedding a licensed package in a
product supplied to third parties, whether shipped, hosted, or bundled, requires the
separate Redistribution license. This is on top of the hosted-or-managed-service limitation
in the Elastic License 2.0 above, which binds every licensee whatever they have paid.

## Update window and perpetual fallback

A paid license includes a stated window of updates, counted from purchase. Inside that
window every version released for the licensed packages is included, minor and major.

When the window ends, the license does not. The last version delivered inside the window
keeps running in production, indefinitely. There is no kill switch, no phone home, and no
expiry that disables the software: the token is verified offline against a public key
compiled into the package, and tokens are issued with no expiry claim, so a token that
validates today validates on a disconnected machine years from now. Invarix cannot revoke
it remotely, because the software contains no mechanism that would let it.

Renewal extends the window by a further period and is optional. Letting a window lapse
costs the licensee nothing already installed.

Because there is no technical expiry, the boundary is contractual. Running a version
released after the window ended, without renewing, falls outside the license. Nothing in
the software prevents it. That is said plainly here rather than enforced by a mechanism,
because any such mechanism would contradict the paragraph above.

## Security updates

Security fixes follow the update window. Licensed versions receive them for the window the
license covers. The free Community band receives them on the current minor version. The
disclosure policy, the response targets, and the regulatory reporting obligations are in
SECURITY.md.

## No support obligation

No band includes support. Not email, not chat, not GitHub issues, and no service level of
any kind. The documentation packed into each package is the resource. This is a condition
of the price, stated before purchase rather than discovered after it.

## Warranty

The Elastic License 2.0 above disclaims warranties as far as the law allows. Where
mandatory law gives a buyer rights that cannot be disclaimed, those rights apply and
nothing in this section reduces them.

Commercial terms, procurement, redistribution: sales@invarix.dk
Vulnerability reports: security@invarix.dk