1-866-4-CENZIC (866-423-6942) | Customer Login | Contact | Blog
Purchase Cenzic Hailstorm CORE

Purchase and download Hailstorm Core for $1500

This product operates as a single-user, Windows application. Hailstorm Core only utilizes 5 different SmartAttack modules that assess your applications for common Web vulnerabilities. These attacks are:
1. Cross Site Scripting
2. SQL Error Message
3. Application Exception
4. Cookie Vulnerabilities
5. Web server configuration Vulnerabilities
End User License Agreement
END USER SOFTWARE LICENSE AGREEMENT FOR CENZIC SOFTWARE

Important! Read this agreement carefully before downloading, installing, or otherwise using the Software (as defined below).  This End User Software License Agreement (the "Agreement") is a legal agreement between you (either an individual or an entity) ("Licensee") and Cenzic, Inc. ("Cenzic") for the license of Cenzic Software.  By clicking on the "OK" or "Accept" button, or downloading, installing, or otherwise using the Software, Licensee agrees to be bound by the terms and conditions of this Agreement.   If Licensee does not agree to be bound by the terms and conditions of this Agreement, Licensee is not permitted to use the Software, and Licensee shall click the "Do Not Accept" button to terminate the download process and/ or discontinue the installation process and return the Software to Cenzic.  Cenzic agrees to license the Software to Licensee only if Licensee agrees to be bound by the terms and conditions contained in this Agreement.

LICENSEE AGREES THAT BY LICENSEE'S USE OF THE SOFTWARE, LICENSEE ACKNOWLEDGES THAT LICENSEE HAS READ THIS AGREEMENT, UNDERSTANDS IT, AND AGREES TO BE BOUND BY ITS TERMS AND CONDITIONS.

Licensee is interested in utilizing Cenzic's proprietary software products to discover web application vulnerabilities that Licensee may have in Licensee's web applications.  Cenzic's primary software product, commonly referred to as "Hailstorm®", simulates a "hacker" attacking a web application and can therefore bring down the application or corrupt and/or expose the web application's data. Accordingly, Cenzic highly recommends that Hailstorm and similar products be utilized against a target web application only when such application is running on a staging server or in a laboratory environment, not in a production environment.

1.  Definitions.

1.1 "Application(s)" shall mean the number of Licensee's web-based applications that Licensee wishes to test by using the Software as set forth in a purchase order issued by Licensee to Cenzic (a "Purchase Order").

1.2 "Documentation" shall mean on-line help files and written or electronic manuals included with the Software which describe its features and use, generally supplied by Cenzic to its end user customers.

1.3  "Licensed User" shall mean an employee or consultant of Licensee who is authorized by Licensee to access and use the Software.

1.4 "Purchase Order" shall mean the pertinent purchase order which is accepted by Cenzic.

1.5  "Software" shall mean a machine executable copy of the object code of the software licensed by Cenzic to Licensee as identified by the Licensee at the time of download, including all corrections, modifications, enhancements, or updates thereto provided to Licensee by Cenzic pursuant to Section 5 below.  "Software" licensed by Licensee under this license may include the "Hailstorm Starter Software" (a limited feature version of the Software) and "Hailstorm Core Evaluation Software".

2.  License Grant.

2.1 Subject to the terms and conditions of this Agreement (including Licensee's obligation to pay any and all fees to Cenzic when due), Cenzic grants to Licensee a fully paid, nonexclusive, non-sublicenseable and nontransferable (except as set forth in Section 13) , limited license to install (or cause to be installed) and use the Software, at Licensee's site(s), for the sole purpose of testing Applications internally, provided, however, (i) Licensee is not permitted to use the Software for purposes of providing services to any third party and (ii) and shall not use the Software within a production environment as further described in Section 3.  The Software and Documentation will be deemed irrevocably accepted upon delivery.  Further, subject to the terms and conditions of this Agreement (including Licensee's obligation to pay any and all fees to Cenzic when due), Cenzic grants to Licensee a fully paid, nonexclusive, non-sublicenseable and nontransferable (except as set forth in Section 13), limited license to internally usthe Documentation and to make a reasonable number of copies of the Documentation, solely in order to use the Software in accordance with this Agreement.

2.2 The license granted hereunder is limited to a single Licensed User for testing unlimited number of Applications on a single computer onto which Licensee downloaded the Software.  The license granted hereunder is also limited to the Term (as defined below).  The license granted hereunder, includes any affiliated entity which Controls, is Controlled by, or is under common Control with Licensee, but only so long as such entity meets the foregoing definition, and provided that each such affiliated entity ordering or using Software licensed under this Agreement has agreed in writing to be bound by the terms and conditions of this Agreement.  "Control" means the possession, directly or indirectly, of the power to direct or cause the direction of the management and operating policies of an entity through the ownership of more than fifty percent (50%) of its voting or equity securities or the maximum allowed by law, contract, voting trust, or otherwise.

2.3 Cenzic reserves the right to include means within the Software to limit Licensee's use of the Software to the number of Applications indicated by Licensee at the time of download and a single Licensed User for the Term.  Licensee shall maintain complete and accurate records regarding Licensee's use of the Software and Documentation, and shall make such information available to Cenzic upon request.  Cenzic or its independent accountants may audit, at Cenzic's expense, Licensee's deployment and use of the Software for compliance with the terms of this Agreement. Such audit will be conducted during Licensee's normal business hours and upon reasonable advance notice.  If Licensee's use of the Software is found to be greater than provided under this Agreement,  Licensee will be invoiced for the additional use and the unpaid license fees (plus interest) shall be payable in accordance with this Agreement.  If the resulting adjustments to the license fees owing by Licensee are greater than five percent (5%) of the license fees paid by Licensee under this Agreement, Licensee will pay the reasonable expenses associated with such audit in addition to the additional license fees and interest.

2.4 Licensee may not make any copies of the Software for any reason.  Licensee shall not remove or alter from any full or partial copy of the Software or Documentation any Cenzic or third party proprietary rights notices or documentation notices.

3.  License Restrictions.  Except as expressly authorized herein, Licensee shall not cause or permit any:
(i) copying or modification of the Software or Documentation;
(ii)  reverse engineering, decompilation, translation, disassembly, alteration, adaptation, or discovery of the source code of all or any portion of the Software or any report file format (except to the extent that such a restriction is prohibited by law);
(iii)   distribution, disclosure, marketing, rental, time-sharing, leasing or transfer of the Software or the Documentation, or use of the Software for any dial-up, remote access, interactive or other service from which Licensee receives compensation, including but not limited to subscription fees;
(iv)  use of the Software for any illegal or malicious purpose or to access any information not owned by Licensee or for which it does not have express permission to access;
(v) use of the Software on any networks, devices, or applications not owned or controlled by Licensee;
(vi)  disclosure of the results of Software performance benchmarks to any third party without Cenzic's prior written consent; or
(vii)   transfer of the Software or export of the Software in violation of U. N. embargoes or U.S. laws and regulations or other applicable law;
(viii)   use of the Software in a non-laboratory environment, production environment, or operating environment;
(ix)    use of the Software in connection with any applications other than the Applications or websites other than Licensee's own website; or
(x)   use, distribution, or integration of the report writing portion of the Software (together or separately) with any other general purpose writing or report delivery product that is generally competitive with Cenzic's licensors' product offerings or as part of a report distribution system.

4.  Fees and Payment Terms.

4.1 Licensee shall pay (or cause a mutually agreed upon third party to pay) Cenzic a one-time total payment of the prices as posted by Cenzic within www.cenzic.com at the time of entering into this Agreement, or such other prices set forth in a mutually agreed upon Purchase Order.  Licensee has the option to make payment by either (i) a valid credit card, conditioned upon the approval by the applicable financial institute, or (ii) by a Purchase Order if permitted  by Cenzic, as indicated by signature of an authorized Cenzic party in a separate writing.  All payments shall be in United States dollars.

4.2 Should the Licensee elect to pay by credit card, all fees shall be due immediately.  Should the Licensee be permitted to pay by a money order, all fees shall be due and payable within thirty (30) days of the invoice date.  Overdue payments shall bear interest at the lesser of one and one half percent (1.5%) per month or the maximum rate allowed under applicable law, from the date due until paid.  Licensee shall bear any and all sales taxes, use taxes, transfer taxes, documentary charges, recording fees or similar taxes, charges, fees or expenses that may become payable in connection with this license, provided, however Licensee is not responsible for taxes based on Cenzic's income.

5.  Support.

5.1 Provided Licensee has paid the applicable license fees, Cenzic will provide, or cause to be provided, support for the Software electronically, whereby Licensee may request support either through Cenzic's website (www.cenzic.com) or via email (support@cenzic.com) during the Term.

5.2 Cenzic shall have no obligation to provide support if Licensee fails to make any required license and/or support fees or otherwise elects to discontinue support.

5.3 Cenzic shall have no obligation to support Software to the extent a problem is caused by (i) Software which has been altered, damaged or modified by any party other than Cenzic, (ii) Software that is not the then-current or previous sequential release, (iii) Licensee's negligence, hardware malfunction or other causes beyond the control of Cenzic, or (iv) Software installed in an operating environment for which the Software has not been licensed. Additionally, there is no obligation for Cenzic to provide support so long as Licensee is in breach of this Agreement.

6.  Free Trial Period Software.  If Licensee has obtained the Hailstorm Starter Software or the Hailstorm Core Evaluation Software (collectively "Trial Software"), the following terms apply in addition to all others set forth herein and if there is a conflict between the terms of this Agreement generally, and the terms of this Section 6, as they pertain to Licensee's use of the Trial Software for the Free Trial Period (defined herein), the terms of this Section 6 shall control.  Cenzic grants Licensee a limited, nonexclusive, non-sublicenseable and nontransferable license to use the Trial Software for a term of forty-five (45) days for Hailstorm Starter Software and seven (7) days for Hailstorm Core Evaluation Software  (the "Free Trial Period"), , on a free trial-basis for internal testing purposes only, and only on the disk ID permitted by the authorization key provided by Cenzic, unless otherwise mutually agreed in a separate agreement; provided, however,  all such use of the Trial Software shall be subject to the restrictions set forth in this Agreement, including Section 3.  The Trial Software and Documentation will be deemed irrevocably accepted upon delivery.  The Trial Software contains an automatic termination feature that will render the Trial Software non-functional at the end of the Free Trial Period.  Cenzic is not obligated to provide any maintenance, updates or technical support for the Trial Software.  Use of the Trial Software is at Licensee's sole risk, and that Licensee is solely responsible for damage, if any, to Licensee's computer system or loss of data that may result from the use of the Software.  The parties agree that: THE TRIAL SOFWARE AND DOCUMENTATION ARE PROVIDED "AS IS" BY CENZIC AND ITS LICENSORS WITHOUT WARRANTY OF ANY KIND.  CENZIC MAKES NO REPRESENTATIONS OR WARRANTIES, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, AND CENZIC SPECIFICALLY DISCLAIMS ALL IMPLIED WARRANTIES OF MERCHANTABILITY, TITLE, ACCURACY, NONINFRINGEMENT, AND FITNESS FOR A PARTICULAR PURPOSE.  CENZIC DOES NOT WARRANT THAT THE PRODUCTS OR DOCUMENTATION WILL BE ERROR-FREE OR THAT THEY WILL WORK WITHOUT INTERRUPTIONS.  NOTWITHSTANDING SECTION 10 OF THIS AGREEMENT:  IN NO EVENT WILL CENZIC'S LIABILITY TO LICENSEE, WHETHER IN CONTRACT, TORT, OR OTHERWISE, EXCEED ONE HUNDRED U.S. DOLLARS ($100).    Licensee's right to use the Trial Software on a free-trial basis shall terminate automatically at the end of the Free Trial Period.  At such time, Licensee must either immediately cease all use of the Trial Software, or purchase a commercial license, which shall be subject to the payment of Cenzic's then-current fees and the parties entering into a separate mutually agreed upon license Agreement).

7.  Title, Protection and Equitable Relief.

7.1 Except for the license granted herein, Cenzic and its licensors retain all right, title and interest in all portions of the Software and Documentation and any copies thereof.  Except as otherwise expressly granted in this Agreement, no license, right or interest in any Cenzic or third party copyright, trademark, trade name or service mark is granted hereunder.  Consistent with Section 2.4 above, Licensee shall not remove or alter any of Cenzic or its licensors' copyright notices, documentation notices, or other proprietary markings on any copies of the Software and Documentation.

7.2 Licensee acknowledges that any breach of its obligations with respect to the proprietary rights of Cenzic or its licensors would cause Cenzic and its licensors irreparable injury for which there may be inadequate remedies at law, and Cenzic and its licensors will be entitled to equitable relief, in addition to all other remedies available to it, without the payment of any bond.

8.  Confidentiality.

8.1    "Confidential Information" shall mean the Software, Documentation and all information which is marked as confidential or proprietary or which is disclosed verbally and identified as confidential or proprietahe Software will operate in the combinations which Licensee may select for use, or that the operation of the Software will be uninterrupted or error-free, or that all Software errors will be corrected.  No rights or remedies referred to in Article 2A of the UCC will be conferred on the Licensee unless expressly granted herein.  The Software is not designed, intended or licensed for use in hazardous environments requiring fail-safe controls, including without limitation the design, construction, maintenance or operation of nuclear facilities, aircraft navigation or communication systems, air traffic control, and life support or weapons systems.  Cenzic specifically disclaims any express or implied warranty of fitness for these purposes.

9.2   EXCEPT AS EXPRESSLY SET FORTH IN SECTION 9, CENZIC AND ITS LICENSORS DISCLAIM ALL OTHER WARRANTIES, EXPRESS, IMPLIED, STATUTORY OR OTHERWISE, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, TITLE, ACCURACY, NON-INFRINGEMENT AND FITNESS FOR A PARTICULAR PURPOSE.

10. Indemnity.

10.1    If any action is instituted against Licensee based upon a third party claim that the Software infringes a copyright, trademark, trade secret, or United States patent validly issued as of the Effective Date, Cenzic shall, at its expense, defend or settle and indemnify Licensee for such action, and Cenzic shall pay all damages attributable to such claim and awarded against Licensee after Cenzic has exhausted all rights of appeal which Cenzic in its sole discretion desires to exercise or amounts paid in a settlement approved by Cenzic in writing, provided (i) Cenzic is given prompt written notice of such claim, (ii) Cenzic has sole control of the defense and all related settlement negotiations, and (iii) Licensee provides Cenzic with the assistance, information, and authority necessary to perform the above; reasonable expenses incurred by Licensee in providing such assistance will be reimbursed by Cenzic.

10.2    Cenzic shall have no liability for any claim of infringement based on (i) use of a superseded or modifiut limitation Licensee's use or misuse of the Software.

11. Limitation of Liability.  CENZIC'S LIABILITY FOR DAMAGES UNDER THIS AGREEMENT SHALL IN NO EVENT EXCEED THE AMOUNT PAID OR PAYABLE BY LICENSEE TO CENZIC FOR THE SOFTWARE OR THE SERVICES AS TO WHICH THE CLAIM AROSE. EXCEPT FOR BREACH OF SECTIONS 2, 3, 7, AND 8, IN NO EVENT SHALL EITHER PARTY BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL OR CONSEQUENTIAL DAMAGES, INCLUDING BUT NOT LIMITED TO LOST DATA OR LOST PROFITS, HOWEVER ARISING UNDER ANY THEORY OF LIABILITY (INCLUDING NEGLIGENCE), EVEN IF IT HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.  EACH PARTY'S INDEMNITY OBLIGATIONS ARE A DIRECT, RATHER THAN AN INDIRECT, LIABILITY OWED TO THE OTHER PARTY.  THE PARTIES AGREE TO THE ALLOCATION OF LIABILITY RISK THAT IS SET FORTH IN THIS SECTION 11. THESE LIMITATIONS SHALL APPLY NOTWITHSTANDING ANY FAILURE OF ESSENTIAL PURPOSE OF ANY LIMITED REMEDY. NOTHING IN THIS SECTION 11 IS INTENDED TO EXCLUDE OR RESTRICT EITHER PARTY'S LIABILITY FOR DEATH OR PERSONAL INJURY CAUSED BY THE NEGLIGENCE OF SUCH PARTY OR ITS EMPLOYEES OR AGENTS.

12. Term, Default and Termination.

12.1    This Agreement shall be effective on the installation of the Software ("Effective Date") and shall continue in effect for the lesser of (i) the period indicated in the applicable Purchase Order, (ii) as provided in Section 6, or (iii) one (1) year (the "Term"),  unless terminated under this Section 12.

12.2    An event of default shall be deemed to have occurred if either party fails to perform any material obligation under this Agreement and such failure remains uncured for more than thirty (30) days after receipt of written notice thereof.  If an event of default occurs, the non-defaulting party, in addition to any other rights available to it under law or equity, may terminate this Agreement and all licenses granted hereunder by written notice to the defaulting party.  Cenzic may terminate this Agreement if Licensee becomes insolvent, files for any form of bankruptcy (that is not dismissed within sixty (60) days), makes 2 (SEPT 1995) and is provided to the U.S. Government only as a commercial end item.  Consistent with 48 C.F.R. 12.212 and 48 C.F.R. 227.7202-1 through 227.7202-4 (JUNE 1995), all U.S. Government end users acquire the Software with only those rights set forth therein.

17.2    Licensee shall strictly comply with all requirements of the U.S. export control laws and regulations with respect to the Software.

17.3    The section headings herein are provided for convenience only and have no substantive effect on the construction of this Agreement. As used herein, the term "including" means "including but not limited to".  Neither party shall be liable for any failure to perform due to causes beyond its reasonable control.  If any provision of this Agreement is held to be unenforceable, the parties shall substitute for the affected provision an enforceable provision which approximates the intent and economic effect of the affected provision.  The failure by a party to exercise any right hereunder shall not operate as a waiver of such party's right to exercise such right or any other right in the future.  All waivers and amendments must be in a writing signed by an authorized representative of each party.  Except with respect to the specific terms referenced in this Agreement to be set forth in a Purchase Order, the terms and conditions of any Purchase Order, or any other document submitted by Licensee that conflicts with or in any way purports to amend this Agreement, are hereby specifically objected to and shall be of no force or effect, unless the same refers to this Agreement and the particular term is expressly agreed to in writing by an officer of Cenzic and an authorized representative of Licensee.
Fill out the Web form to the right to get this product. Note that you will be re-directed to a 3rd party e-commerce site after hitting the submit button for purchase completion.
Systems and Software Requirements
Recommended Hardware Configuration
Intel® Pentium® 4 compatible CPU or later, 2 GHz or faster
1 GB of RAM
1 GB of free hard disk space for Cenzic Hailstorm Core application and database
Network connection with TCP/IP installed
Display capable of 1600 x 1200 resolution and 16-bit color
System Software Requirements
Windows XP Professional with Service Pack 2
Microsoft .NET Framework 2.0 (This is included with the Cenzic Hailstorm Core download and integrated with the installation)
www.cenzic.com
1-866-4-CENZIC (866-423-6942)