HuntIQ Enhanced Support Addendum
Last Updated: February 2026
1. General. This addendum (“Addendum”) is an addendum to Customer’s license agreement for Tanium software products (the “Agreement”) and sets forth the terms under which Tanium will provide Customer with enhanced support for Customer’s use of Tanium Threat Response (“Enhanced Support”). The term of Enhanced Support provided by Tanium will commence on the date of purchase (“Effective Date”) and will expire at the end of the purchased term noted in the applicable Schedule or Quote (e.g., 12 months) (“Enhanced Support Term”). Except as expressly set forth in this Addendum, the terms of the Agreement remain unchanged and in full force and effect.
2. Scope and Limitations. Tanium will provide one or more resources who will work closely with Customer to use Tanium Threat Response (“THR”) to search for and identify security threats, vulnerabilities, and breaches in Customer’s network or IT infrastructure.
a. Enhanced Support may consist of one or more of the following tasks:
- Hunting
- Proactively hunt for threats and vulnerabilities based on Tanium’s library of hunting use cases (e.g., Guardian alerts) and the THR Support Plan (defined below)
- Use Cases
- Provide general support for Customer security team
- Discuss and advise on Customer-specific use cases
- Support for Incidents
- Assist Customer with monitoring and responding to alerts within Threat Response
- Assist Customer with customization of Live Response collections
- Assist Customer with running sensors
- Assist Customer to create new intel
- Assist Customer to get new content created
- Assist Customer to help customize and execute after action reviews
- Intel Management/Tuning
- Tuning intel in Customer environment to eliminate potential false positives
- Collect and share tuning results across Enhanced Support resources
- Assist with Install & Configuration
- Assess Threat Response to verify installed and properly configured
- Verify Recorder\Index\Quarantine\Live Response properly configured and ready for use
- Review Intel deployment and testing for best practices
- Work with THR SMEs on plan for proactive platform maintenance
- Review Integrations
- Review SEIM integrations if applicable
- Review Microsoft Integrations if applicable
- Assess if Customer has access to intel feeds
- Assess if Customer has access to VirusTotal
- Assist with supported third party integrations
b. Enhanced Support will not extend to the following out of scope activities:
- Configure, support or operate any third-party products
- Declare an incident without Customer authorization
- Take any action outside of the THR Support Plan without mutual agreement
- Change or amend the standard Support Services provided under the Agreement
3. Access. Customer must provide the Tanium resource with access to Customer’s Tanium environment and related systems within thirty (30) days from the start of the Enhanced Support Term (“On-Boarding Period”). In the event Customer fails to provide the Tanium resource with the required systems access noted above, Tanium may withdraw the assigned resource until access is granted. Enhanced Support will be provided during normal business hours or as mutually agreed upon between Tanium and Customer. The Tanium resource may be required to be out-of-the-office due to PTO, illness, holidays, training, vacations, or meetings. If the time out-of-office impedes Customer operations, Customer may request an alternate Tanium resource to be made available; however, Customer is responsible for onboarding the alternate resource and the scheduled term will not “pause” during this time. Should the assigned resource’s employment with Tanium end, Tanium will provide Customer with a replacement resource as soon as reasonably available.
4. THR Support Plan. At the start of the Enhanced Support Term, Customer and Tanium will work together to identify those actions the Tanium resources are authorized to take without Customer review, and will document such actions in a “THR Support Plan”. The THR Support Plan will also identify any third-party tools or technology recommended by Tanium for use by Customer (“Third Party Tools”). Customer’s use of Third Party Tools is at Customer’s discretion, and Tanium disclaims all liability with regard to any Third Party Tools used by Customer.
5. Action Approver. Customer will assign an action reviewer/approver to act as the final Customer approver for all Tanium actions performed as part of Enhanced Support that are not documented in the THR Support Plan (“Action Approver”). The Action Approver will have the authority to approve all actions to be taken by Enhanced Support resources.
6. Availability. The Enhanced Support resources will provide Enhanced Support during Tanium’s normal business hours or as mutually agreed upon between Tanium and Customer.
7. Customer Responsibilities. To facilitate the delivery of Enhanced Support, Customer agrees to:
- provide access to all necessary systems, tools, data, and personnel;
- provide an approved storage location for research notes and shared files;
- provide access to Customer’s Tanium environment, including API access;
- ensure that its employees, agents, or third-party vendors cooperate fully with Tanium;
- maintain an up-to-date backup of all relevant data in its systems; take all actions identified in the THR Support Plan as Customer’s responsibility; and
- assume responsibility for any delay or failure in Enhanced Support caused by its failure to provide timely access, cooperation, or information.
8. Confidentiality. Both parties agree that all information disclosed during the performance of Enhanced Support, including but not limited to system logs, network diagrams, incident reports, and proprietary data, will be governed by the confidentiality provisions in the Agreement.
9. Cybersecurity Information Sharing. “Cybersecurity Information” is any general information or activity regarding threats, vulnerabilities, investigations, mitigations, situational awareness, best practices, strategic analysis, or other cybersecurity topics. Customer understands and agrees that Tanium may use any Cybersecurity Information gained during performance of Enhanced Support in connection with Tanium’s business, including enhancement of its products and services, provided that Tanium’s use of the Cybersecurity Information does not publicly identify Customer in any way without Customer consent.
10. Feedback. Customer may provide suggestions, comments, or other feedback (collectively, “Feedback”) to Tanium with respect to its products and services, including the Enhanced Support. Feedback is voluntary. Customer hereby grants Tanium a worldwide, irrevocable, non-exclusive, perpetual, royalty-free license, with the right to sublicense, to use the Feedback in connection with Tanium’s business, including enhancement of its products and services, provided that Tanium’s use of the Feedback does not publicly identify Customer in any way.
11. Hunting Tools. Tanium may provide notebooks, playbooks, and other tools that are external to the Tanium environment to assist Customer in its use of THR (“Hunting Tools”). Hunting Tools are provided for Customer’s convenience only and are excluded from any warranty, indemnity, support, or other provision or obligation in the Agreement that applies to the licensed software or services. Tanium retains all rights, title and interest (including any and all intellectual property rights) to the Hunting Tools and any derivative works or modifications made to the Hunting Tools. Tanium hereby grants Customer a limited license to use the Hunting Tools during the Enhanced Support Term for its internal purposes only, and only as needed to assist Customer’s use of THR.
12. Support Materials. In addition to the Hunting Tools, Tanium may provide customer-specific software and materials such as scripts or sample code. All such materials are “Support Materials” licensed to Customer in accordance with the express license grant and license restrictions in the Agreement under which the licensed software or services are licensed to Customer. Support Materials are non-GA and, therefore, excluded from any warranty, indemnity, support, or other provision or obligation in the Agreement that applies to the licensed software or services.
13. Remote Support. Enhanced Support will be provided remotely via telephone or electronic communications unless otherwise agreed with Customer. Customer agrees that the Enhanced Support resource(s) may access Customer’s systems during the relevant Enhanced Support Term, using a commercially standard remote system access tool (the “Remote Support Tool”). If a network connection between Tanium and Customer’s systems is required for Tanium to perform Enhanced Support, Customer is responsible for ensuring that: (a) its network and systems comply with specifications provided by Tanium; (b) all components of Customer’s Tanium environment are accessible through the Remote Support Tool; and (c) the Remote Support Tool is installed in a timely manner. Customer is responsible for acquiring and maintaining any equipment and performing any activities necessary to set-up and maintain network connectivity at and to Customer’s Tanium environment. Customer will provide and maintain user accounts for, and access to, the Remote Support Tool for the Tanium resources. Tanium is not responsible for network connection issues, problems or conditions arising from or related to network connections, such as bandwidth issues, excessive latency, network outages, and/or any other conditions that are caused by an internet service provider, or the network connection. Enhanced Support, which may involve Tanium or its affiliates accessing Customer’s systems and confidential information, may be provided from countries outside of Customer’s location where Tanium or its affiliates maintain support operations.
14. Enhanced Support Disclaimer. Enhanced Support is provided as additional support to improve Customer’s experience with Tanium Threat Response. Customer acknowledges and agrees that the nature of cybersecurity threats means no system can be completely invulnerable, and Enhanced Support does not provide any additional warranties or promises to Customer beyond those contained in the Agreement. Tanium does not warrant that all threats will be detected, that all recommendations will be effective, or that Customer's system will be secure from attacks or breaches. Customer acknowledges that Enhanced Support is not a substitute for comprehensive security management and should not be solely relied upon in securing Customer’s environment.