Red Canary Amendment to Standard Contract This Red Canary Amendment to Standard Contract (“Amendment”) amends the Standard Contract (“Agreement”) between you (“you” or “Customer”) and Red Canary, Inc. (“Publisher”) which governs your use of the Offerings. In the event of a conflict between this Amendment and the Agreement, this Amendment shall control. Terms used but not defined herein have the meanings given in the Agreement. The following is added to Section XII (Definitions): 1. “’Technical Data’ means data collected from your computing environments via the Offerings, including without limitation, technical information about your devices, files, binaries, End User activity, networks, systems, and software, and any other data contained therein.” 2. The third sentence of Section II.c.(4) (Use of Subprocessors.) is deleted and replaced with the following: “Publisher may update its list of subprocessors from time to time. Publisher shall provide advance notice of any new subprocessor it engages, provided that Customer registers an email address to receive such notifications.” 3. Section III.d. (Duration of Confidentiality obligation) is deleted and replaced with the following: “d. Duration of Confidentiality obligation. These confidentiality obligations shall survive any termination of this Agreement.” 4. The following is added to Section VI (Representation and warranties): “You shall promptly notify Publisher in writing of any breach of the foregoing representations and warranties. As your sole remedy and Publisher’s sole obligation for any such breach, Publisher shall, at its option and expense, (i) use good faith efforts to attempt to correct any such non-conformity; or (ii) terminate this Agreement and refund You any prepaid fees covering the remainder of the term of an applicable Order after the effective date the termination.” 5. The following is added to Section VII.b. (Defense of third-party claims by Publisher): “In the event of such a Claim Against Customer, or if Publisher reasonably believes the Offerings may be vulnerable to an infringement claim, Publisher may, in its discretion and at no cost to you (i) modify the Offerings so that they are no longer claimed to infringe, (ii) obtain a license for your continued use of the Offerings, or (iii) terminate this Agreement upon 30 days’ written notice and refund You any prepaid fees covering the remainder of the term of an applicable Order after the effective date of termination.” 6. The following terms are added to the Agreement: “XIII. Your Responsibilities. You are responsible for: a. installing and/or deploying on your systems any software required by Publisher to allow the Offerings to function; b. obtaining all required rights and authorizations for Publisher to process the Technical Data and for the Offerings to interact with your systems, consistent with this Agreement, and c. all activity occurring under your user accounts, and you shall notify Publisher immediately of any unauthorized use of such user accounts or security credentials. XIV. Ownership. You own all right, title, and interest in the Technical Data. Publisher or its licensors, as applicable, own all right, title, and interest in the Offerings, information (other than Technical Data) used to perform or included in the Offerings, anonymized and aggregated metadata and Technical Data that is not identifiable to you or your End Users, and any modifications, enhancements, and derivative works of any of the foregoing. The Offerings use a crowd-sourced environment for the benefit of all Publisher customers. You authorize Publisher to collect and use, but not distribute except as provided in this Agreement, Technical Data for the purpose of providing Offerings to you and Publisher’s customers during the term of this Agreement.”