This Mutual Non-Disclosure Agreement ("Agreement") is entered into as of July 26, 2026 ("Effective Date"), by and between ExploitX Defence Operations ("ExploitX") and [CLIENT COMPANY NAME] ("Client").

1. Definition of Confidential Information

"Confidential Information" includes, without limitation, all software source code, target IP subnets, credentials, system architecture diagrams, zero-day vulnerability disclosures, CVSS risk scores, penetration testing proof-of-concept exploits, and technical assessment reports generated by ExploitX during the security engagement.

2. Obligations of Non-Disclosure

Both parties agree to hold all Confidential Information in strict confidence and to take reasonable precautions to protect such information from unauthorized disclosure or access. Neither party shall disclose Confidential Information to any third party without prior written consent from the disclosing party.

3. Security Engagement Safeguards

ExploitX agrees that all vulnerability data discovered during penetration testing shall be stored in encrypted repositories (AES-256) and purged within 90 days following final attestation sign-off.

4. Term and Termination

The non-disclosure obligations under this Agreement shall remain in effect for a period of three (3) years from the Effective Date.