Vigo — Proprietary License

Effective 2026-03-16.

Vigo is a distributed state enforcement engine. A central server defines desired state for managed infrastructure; lightweight agents on each node pull that state, apply idempotent changes, and report results. An admin CLI and web UI provide fleet-wide visibility, orchestration, and compliance reporting. Vigo supports Linux, macOS, FreeBSD, OpenBSD, NetBSD, illumos, Windows, and network devices.

Copyright (c) 2026 Alexander4, LLC. All rights reserved.

This software and associated documentation files (the "Software") are the proprietary and confidential property of Alexander4, LLC. The Software includes the Vigo server (vigosrv), the Vigo agent (vigo), the Vigo CLI (vigocli), and all supporting code, libraries, migrations, protobuf definitions, templates, documentation, and configuration files.

Definitions

A "managed node" is any system that has enrolled with a Vigo server and has not been revoked. Network devices, PLCs, or other systems inventoried indirectly through trait collection on a managed node do not count as separate nodes. Vigo server instances and spanner spoke servers used to operate the Software do not count as managed nodes.

Grant

Subject to the terms of a valid commercial license agreement or the Community tier (up to 25 managed nodes), you are granted a limited, non-exclusive, non-transferable, non-sublicensable license to use the Software in compiled binary form for your internal business purposes.

Compliance Attestation

You may use, reproduce, and distribute any compliance reports, audit trails, export data, and other output generated by the Software for the purpose of regulatory audits, compliance attestation, and evidentiary submission to regulators, auditors, customers, or insurers, without additional licensing fees or prior consent. Such output remains your data and is not subject to the restrictions in the following section.

Compliance reports reflect the enforcement state as observed by the Software and do not constitute a guarantee of regulatory compliance. You are solely responsible for ensuring that your use of the Software satisfies the requirements of any applicable regulatory framework.

Restrictions

You may not, without prior written consent from the licensor:

  1. Copy, modify, or create derivative works of the Software.
  2. Distribute, sublicense, lease, rent, or lend the Software to any third party.
  3. Reverse engineer, decompile, or disassemble the Software, except to the extent expressly permitted by applicable law.
  4. Remove or alter any proprietary notices, labels, or marks on the Software.
  5. Use the Software to provide a hosted, managed, or SaaS offering to third parties.
  6. Move, change, disable, or circumvent the license key functionality in the Software.
  7. Embed, bundle, or pre-install the Software (including the agent binary) in hardware, appliances, or system images intended for distribution or resale to third parties, without a separate OEM agreement from Alexander4, LLC.

Restrictions 2 and 5 do not apply to managed service providers (MSPs), managed security service providers (MSSPs), or IT service providers deploying the Software on client infrastructure as part of a managed infrastructure or managed compliance service, provided the provider holds a valid commercial license covering all managed nodes across all clients. The provider remains responsible for compliance with all other terms of this license, including Use Prohibitions, on behalf of its clients.

Audit

Alexander4, LLC may audit your use of the Software to verify compliance with the licensed node count. Audits may be conducted no more than once per twelve (12) month period, upon thirty (30) days' prior written notice. You agree to provide reasonable cooperation, including access to enrollment records and server configuration, during any such audit. If an audit reveals a material discrepancy (exceeding the licensed node count by more than 5%), you agree to pay the underpaid license fees plus the reasonable cost of the audit.

OEM and Embedded Use

Original equipment manufacturers, systems integrators, and value-added resellers who wish to embed, pre-install, or distribute the Software as part of a product or solution must contact Alexander4, LLC to negotiate custom OEM terms. Such use is not permitted under the standard license or Community tier.

Assignment and Change of Control

This license may not be assigned or transferred, whether voluntarily, by operation of law, merger, acquisition, change of control, or otherwise, without the prior written consent of Alexander4, LLC. Such consent shall not be unreasonably withheld. Any attempted assignment without consent is void. Alexander4, LLC may assign this license without restriction.

Use Prohibitions

This software may not be used by, for, or on behalf of:

  • Any military organization, department of defense, armed forces, defense contractor, intelligence agency, or any entity primarily engaged in military or weapons-related activities. This includes but is not limited to the United States Department of Defense, its branches, agencies, and contractors operating under defense contracts.
  • Any manufacturer, distributor, or retailer of firearms, ammunition, weapons, or weapons components.
  • Any manufacturer, distributor, or retailer of pesticides, herbicides, or chemical poisons intended to kill living organisms.
  • Any operator of private prisons, for-profit detention facilities, or for-profit immigrant detention centers.
  • Any developer, vendor, or operator of surveillance technology designed for mass monitoring, including spyware, location tracking, or communications interception targeting individuals without their consent.

Community Tier

You may use the Software to manage up to 25 nodes at no cost and with no time limit. All features are included. Beyond 25 nodes, a paid commercial license is required. See COMMERCIAL-TERMS.md for pricing.

THE COMMUNITY TIER IS PROVIDED WITHOUT ANY SUPPORT OBLIGATION WHATSOEVER. ALEXANDER4, LLC IS NOT OBLIGATED TO RESPOND TO BUG REPORTS, FEATURE REQUESTS, CONFIGURATION QUESTIONS, OR ANY OTHER INQUIRY FROM COMMUNITY TIER USERS. COMMUNITY SUPPORT VIA GITHUB ISSUES IS PROVIDED ON A VOLUNTARY, BEST-EFFORT BASIS AND MAY BE DISCONTINUED AT ANY TIME WITHOUT NOTICE.

YOU ASSUME ALL RISK ASSOCIATED WITH YOUR USE OF THE SOFTWARE UNDER THE COMMUNITY TIER. THE SOFTWARE IS A POWERFUL INFRASTRUCTURE MANAGEMENT TOOL CAPABLE OF MAKING SWEEPING CHANGES TO EVERY MANAGED NODE SIMULTANEOUSLY. MISCONFIGURATION, MISUSE, OR FAILURE TO PROPERLY TEST CHANGES CAN RESULT IN DATA LOSS, SERVICE OUTAGES, OR IRREVERSIBLE DAMAGE TO YOUR SYSTEMS. ALEXANDER4, LLC BEARS NO RESPONSIBILITY FOR SUCH OUTCOMES UNDER THE COMMUNITY TIER OR ANY OTHER TIER. SEE THE NO WARRANTY AND LIMITATION OF LIABILITY SECTIONS BELOW.

Security and Access Warning

THE SOFTWARE IS A STATE ENFORCEMENT ENGINE CAPABLE OF MODIFYING SYSTEM CONFIGURATIONS, INSTALLING AND REMOVING SOFTWARE, MANAGING USER ACCOUNTS, ALTERING FIREWALL RULES, AND EXECUTING ARBITRARY COMMANDS ACROSS ALL MANAGED NODES SIMULTANEOUSLY. AN UNAUTHORIZED PARTY WHO GAINS ACCESS TO THE VIGO SERVER, ITS CREDENTIALS, OR ITS CONFIGURATION FILES COULD CAUSE SEVERE AND IRREVERSIBLE DAMAGE TO YOUR ENTIRE MANAGED INFRASTRUCTURE.

YOU ARE SOLELY RESPONSIBLE FOR SECURING ACCESS TO THE SOFTWARE, INCLUDING BUT NOT LIMITED TO: PROTECTING MTLS CERTIFICATES AND PRIVATE KEYS, RESTRICTING NETWORK ACCESS TO THE SERVER AND ITS GRPC/REST INTERFACES, IMPLEMENTING APPROPRIATE AUTHENTICATION AND ROLE-BASED ACCESS CONTROLS, SAFEGUARDING ENROLLMENT TOKENS, AND MAINTAINING THE PHYSICAL AND LOGICAL SECURITY OF ALL SYSTEMS RUNNING THE SOFTWARE.

THE SOFTWARE IS DESIGNED WITH SECURITY AS A CORE PRINCIPLE AND EMPLOYS MUTUAL TLS, SIGNATURE VERIFICATION, ROLE-BASED ACCESS CONTROL, TAMPER-EVIDENT AUDIT LOGGING, AND ONE-TIME ENROLLMENT TOKENS. HOWEVER, NO SOFTWARE IS FREE FROM ALL VULNERABILITIES, AND ALEXANDER4, LLC DOES NOT WARRANT THAT THESE MEASURES WILL PREVENT ALL UNAUTHORIZED ACCESS, MISUSE, OR EXPLOITATION.

Export Controls

You agree to comply with all applicable export control laws and regulations, including the U.S. Export Administration Regulations (EAR) and sanctions administered by the U.S. Office of Foreign Assets Control (OFAC). You may not export, re-export, or transfer the Software to any country, entity, or person prohibited by applicable law.

No Warranty

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.

Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL ALEXANDER4, LLC, ITS OFFICERS, DIRECTORS, EMPLOYEES, OR AGENTS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, DATA, BUSINESS OPPORTUNITY, OR GOODWILL, ARISING OUT OF OR IN CONNECTION WITH THIS LICENSE OR THE USE OR INABILITY TO USE THE SOFTWARE, REGARDLESS OF THE THEORY OF LIABILITY (CONTRACT, TORT, STRICT LIABILITY, OR OTHERWISE), EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

THE TOTAL AGGREGATE LIABILITY OF ALEXANDER4, LLC UNDER THIS LICENSE SHALL NOT EXCEED THE AMOUNTS PAID BY YOU FOR THE SOFTWARE DURING THE TWELVE (12) MONTHS PRECEDING THE CLAIM. FOR COMMUNITY TIER USERS WHO HAVE PAID NOTHING, THE TOTAL AGGREGATE LIABILITY SHALL NOT EXCEED FIFTY U.S. DOLLARS ($50).

Force Majeure

Neither party shall be liable for any delay or failure to perform its obligations under this license (other than payment obligations) to the extent such delay or failure results from causes beyond the party's reasonable control, including but not limited to acts of God, natural disasters, pandemics, war, terrorism, government actions, labor disputes, power failures, internet or telecommunications outages, or cyberattacks. The affected party shall provide prompt written notice and use reasonable efforts to mitigate the impact.

Termination

Violations of the Use Prohibitions section result in immediate and automatic termination with no cure period. For all other violations, Alexander4, LLC will provide written notice describing the violation. You have thirty (30) days from receipt of notice to cure the violation. If the violation is not cured within the cure period, the license terminates automatically.

Upon termination, you must cease all active use of the Software. You may retain copies solely for regulatory record-keeping and disaster recovery archives, provided such copies are not actively used.

Governing Law and Jurisdiction

This license is governed by and construed in accordance with the laws of the State of Oregon, United States, without regard to its conflict of laws principles. Any legal action or proceeding arising under this license shall be brought exclusively in the state or federal courts located in Jackson County, Oregon, and the parties irrevocably consent to personal jurisdiction and venue therein.

Dispute Resolution

Before initiating any legal action, the parties agree to attempt in good faith to resolve any dispute through informal negotiation for a period of thirty (30) days following written notice of the dispute. If the dispute is not resolved through negotiation, either party may pursue binding arbitration administered by JAMS under its Streamlined Arbitration Rules and Procedures, with the arbitration conducted in Jackson County, Oregon. The arbitrator's decision shall be final and binding and may be entered as a judgment in any court of competent jurisdiction. Notwithstanding the foregoing, either party may seek injunctive or other equitable relief in any court of competent jurisdiction to protect its intellectual property rights or confidential information.

For licensees located in jurisdictions where mandatory pre-dispute arbitration clauses are unenforceable by law, any dispute not resolved through informal negotiation shall be brought exclusively in the state or federal courts located in Jackson County, Oregon, as specified in the Governing Law section above.

Severability

If any provision of this license is held to be unenforceable or invalid, that provision shall be modified to the minimum extent necessary to make it enforceable, or if modification is not possible, severed from this license. All remaining provisions shall continue in full force and effect.

Entire Agreement

This license, together with the COMMERCIAL-TERMS.md, CONNWAER-COMMERCIAL-TERMS.md, any signed commercial license agreement, and any Design Partner Agreement, constitutes the entire agreement between the parties with respect to the Software and supersedes all prior or contemporaneous understandings, agreements, or representations.

Contact

Alexander4, LLC vigo.licensing@alexander4.io