CDA.SECURITY, LLC MISSION ORDER FRAMEWORK

Version 1.0

Effective Date: 2026-01-01

This document describes the framework for a Mission Order. A Mission Order is created and accepted electronically at the time of purchase and is legally binding upon Customer and CDA.Security, LLC (“CDA.Security”). Each Mission Order is governed by and incorporates the CDA.Security Master Services Agreement (“Agreement”). Capitalized terms used but not defined herein have the meanings given in the Agreement.

MISSION ORDER

Mission Order Number: [Dynamically Generated at Purchase]

Date: [Date of Purchase]

Customer: [Customer Name and Contact Information from Account]

This Mission Order is entered into between Customer and CDA.Security and is subject to the terms of the CDA.Security Master Services Agreement v1.0, which is incorporated herein by reference.

1. SERVICES PURCHASED

Mission Name: [e.g., “External Network Reconnaissance”]
Mission ID: [e.g., “RECON-EXT-01”]
Description: [Standardized description of the specific service, its objectives, and scope.]
Deliverables: [Standardized list of deliverables, e.g., “Reconnaissance Findings Report in PDF format.”]

2. MISSION CYCLE

Start Date: [Date selected by Customer or auto-assigned, e.g., “YYYY-MM-DD”]
End Date: [Calculated based on standard mission duration, e.g., “YYYY-MM-DD”]
Duration: [e.g., “14 calendar days”]

3. FEES

Mission Fee: $[Total Price]
Payment Method: [e.g., “Credit Card on File”]
Payment Status: PAID IN FULL

4. CUSTOMER REQUIREMENTS & AUTHORIZATION

Primary Technical Contact:
- Name: [Customer to provide]
- Email: [Customer to provide]
- Phone: [Customer to provide]
Includes Active Operations: [Yes/No]
- Selection of “Yes” constitutes disclosure only and does not authorize CDA.Security to perform any active, disruptive, or exploitative operations unless and until the parties expressly agree to such activities in the applicable Mission Order and any required written authorization or addendum governing scope, methods, and permissions. CDA.Security may decline to perform Active Operations in its sole discretion, if required authorizations are incomplete or unclear.
Includes Regulated Data (Including CUI): [Yes/No]
- Selection of “Yes” constitutes disclosure only and does not authorize CDA.Security to access or process Regulated Data unless and until the parties execute the applicable Regulated Data Addendum or other written agreement expressly permitting such access. CDA.Security may decline to perform Regulated Data efforts in its sole discretion, if required authorizations are incomplete or unclear.
Required Information / Assets in Scope: [List of required information, e.g., “Root domain names,” “IP address ranges,” “Cloud account IDs.” Customer must provide this information via the secure portal before the Mission Start Date.]
Authorization: By executing this Mission Order, Customer represents and warrants that it has full authority to authorize CDA.Security to perform the Services on the assets and systems identified above and agrees to provide CDA.Security personnel with the necessary access and cooperation as described in the Agreement.

5. AGREEMENT

By clicking “Confirm Purchase” or a similar button, Customer agrees to this Mission Order and the full CDA.Security, LLC agreement stack, including the Master Services Agreement and all incorporated Policies and applicable Addendums.