Contract expiry is the point when a paid, promotional, or fixed-term agreement ends and the terms can change. In cyber security, this often applies to software licenses, cloud services, security subscriptions, domain registrations, and support contracts. Once a contract expires, access, pricing, service levels, or update rights may change immediately or after a short grace period.
This matters because security controls depend on active agreements. An expired endpoint agent may stop receiving threat signatures, a firewall license may disable advanced filtering, or a backup service may no longer meet recovery guarantees. Attackers also take advantage of expiry by sending fake renewal emails, exploiting neglected certificates, or waiting for protections to lapse. Defenders reduce risk by tracking renewal dates, automating alerts, reviewing what features are tied to the contract, and verifying that renewals preserve security settings and coverage.