Use the Standard Contract for Microsoft’s commercial marketplace but add the following sections: 

Addition to section 1.e. (Reservation of Rights):

Customer shall retain all right, title and interest in and to Customer Data
(as defined below). Publisher may process information, including without
limitation, login information, system integrations, API usage information,
and information regarding Customer’s use of the Offerings (“Usage Data”),
for customer success, customer satisfaction and support purposes.



Addition to section IX (Pricing and payment):

During the term of the subscription, If Customer’s average compute
instances scans (“ACI”) in any given month exceeds the ACI, according to the
applicable Order, Publisher shall notify Customer and the parties shall
discuss in good faith an expansion of the subscription. If the parties have
not resolved the issue within 30 days, Customer shall promptly comply with
the applicable ACI under the then-current Order. Otherwise, Publisher may
perform a true-up, issue an increase of Order and invoice Customer for the
excess compute instances for the remainder of the then-current subscription
period (therefore increasing the ACI under the Order), at the same price
under the Order, per compute instance in excess.



Addition to Section XI (Miscellaneous):

o. Publicity. Subject to Customer’s prior written approval, Publisher may
use Customer’s name and logo on its website and in its marketing materials
as a reference customer.