Terms & Conditions

1. Authorized Use Only

ByteBreach exists to teach defensive and offensive security technique inside deliberately vulnerable, isolated practice environments. Every module, terminal, target, credential, and challenge on the Platform is provided for training purposes only. You agree to use each module, tool, target, and credential exclusively within the authorized sandbox or environment explicitly provided by the academy, and never against a third-party system, network, account, or individual without documented, written authorization from that system’s owner.

Where a learning activity describes a technique that would be unlawful or harmful if misapplied, the activity is provided so that you can recognize it, defend against it, and practice it safely. Downloading, running, adapting, or deploying such a technique against a system you are not authorized to test is a breach of these terms.

2. Prohibited Activities

The following are strictly prohibited on the Platform and in connection with any academy infrastructure, whether or not they occur inside a lab environment:

• Unauthorized access, scanning, exploitation, or denial of service against third-party systems, cloud tenants, networks, accounts, or endpoints.
• Automated credential stuffing, password spraying, bulk account creation, or any form of automated reconnaissance that targets systems outside the Platform.
• Malware deployment, ransomware simulation against real infrastructure, command-and-control staging, or the weaponization of educational payloads.
• Harassment, intimidation, doxxing, or disruption of other users, instructors, or the surrounding learning community.
• Attempting to bypass access controls, rate limits, scoring logic, or administrative tooling, including by editing client code, forging submissions, or automating flag validation.
• Scraping, redistributing, reselling, or systematically copying the Platform’s proprietary content, tracks, and challenge material in bulk.

We may suspend or terminate access immediately and without notice where activity threatens other users, third-party systems, or the integrity of the learning environment.

3. Accounts, Eligibility, and Conduct

The Platform is intended for students, educators, practitioners, and researchers who are eighteen years of age or older, or who are using it with the involvement of a parent, guardian, or educational institution. You are responsible for keeping your credentials confidential, for all activity that occurs under your account, and for notifying us promptly if you believe an account has been used without your authorization.

Our code of conduct is simple: be respectful, contribute honestly, give credit, and treat other learners as colleagues. Harassment, hate speech, impersonation, and deliberate misinformation about the material are not tolerated.

4. Content, Lab Material, and Intellectual Property

All curriculum text, guides, diagrams, practice labs, challenge scenarios, flag data, code samples, artwork, the ByteBreach name and logo, and the software that powers the Platform are owned by ByteBreach Security Academy or its contributors and are protected by intellectual property law. The ownership confirmation and authorization documentation for the ByteBreach brand and architecture is published with our app store submissions.

We grant you a limited, personal, non-transferable, revocable licence to access the Platform and to use the published material for your own study, teaching, and authorized professional work. This licence does not transfer ownership and does not permit republication of the material as your own, commercial resale, or inclusion in another paid product. Where you publish derivative work or teaching material, please attribute ByteBreach Security Academy and link back to the source page.

Our public learning guides are additionally covered by the Editorial Policy, which explains how we develop, review, and correct published material.

5. Challenges, Scoring, and Rewards

Practice lab flags are checked against the reference answer after whitespace trimming and letter-case normalization. Some submissions are reviewed manually, and we reserve the right to reject a submission that does not demonstrate a genuine attempt or that appears to have been obtained by attacking the validation path rather than by solving the activity.

XP, rank tiers, leaderboard standings, and daily-challenge rewards are platform incentives, not monetary value, not a service contract, and not a credential. Reward amounts, the availability of any particular track or challenge, and the ranking algorithm may be changed, reduced, or withdrawn at our discretion, and any displayed total is indicative rather than binding. Participation in a challenge is not a contract to deliver any particular reward.

6. Advertising and Sponsorship

The Platform is supported in part by advertising. We use Google AdSense for web traffic and Google AdMob within the Android application. Third-party vendors, including Google, may use cookies or similar technologies to serve and measure advertisements based on your prior activity on this and other websites. As a result, you may see interest-based advertising here.

Advertisements are served by third parties and are not endorsements by ByteBreach Security Academy. We do not control the content of advertisements, and we do not accept payment for the placement of deceptive, unlawful, or misleading creative. You can opt out of personalized advertising through the links in our Cookie Policy, and you can opt out of a personalised Google Ads experience through Google Ads Settings. You may also opt out of third-party vendor cookies through aboutads.info.

7. Third-Party Services and Links

The Platform links to external resources such as vendor documentation, standards publications, community channels, and reference sites. We do not control those resources and are not responsible for their content, availability, or privacy practices. Your use of any third-party service is governed by that provider’s own terms and privacy policy.

8. Disclaimer of Warranties and Limitation of Liability

The Platform is provided on an “as is” and “as available” basis, for educational purposes. To the fullest extent permitted by law, ByteBreach Security Academy disclaims all warranties, express or implied, including implied warranties of merchantability, fitness for a particular purpose, accuracy of technical content, non-infringement, and uninterrupted availability.

Nothing in the Platform constitutes professional, legal, financial, or compliance advice, and nothing in it guarantees any certification outcome or employment outcome. Security technique that is correct in an authorised lab may be unlawful when applied elsewhere; you remain solely responsible for how you use what you learn.

To the maximum extent permitted by law, ByteBreach Security Academy and its contributors are not liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss of data, profits, goodwill, or reputation, arising from your use of, or inability to use, the Platform — including any damage arising from activities carried out in reliance on the published material. Nothing in these terms excludes liability that cannot lawfully be excluded.

9. Privacy and Security

We collect the minimum information needed to operate accounts, record learning progress, moderate submissions, and keep the service secure. How we handle that information, which advertising and analytics cookies are used, and the controls available to you are described in our Privacy Policy and Cookie Policy.

10. Termination, Changes, and Contact

You may stop using the Platform at any time and may request deletion of your account and associated learning data at any time. We may suspend or terminate access where these terms are breached, where required by law, or where the Platform is being restructured. Sections that by their nature should survive termination — including intellectual property, disclaimers, and limitation of liability — continue to apply.

We may revise these terms from time to time. The revision date at the top of this page identifies the current version. Continued use of the Platform after an update constitutes acceptance of the revised terms.

Questions about these terms, or a request to report a suspected infringement, can be sent to us through the Contact page. We aim to acknowledge formal notices within five business days.