Acceptable Use Policy

Every practical technique taught by SecByte is intended for use inside our own training environments or against systems for which you hold documented, written authorisation from the system owner. Security testing without that authorisation is unlawful in most jurisdictions. Our professional services are delivered only under a signed engagement agreement and a defined scope agreed with the asset owner.

SecByte does not sell, supply or facilitate: malware or ransomware, credential-theft services, unauthorised access to any system or account, stolen data or credentials, surveillance of individuals without lawful basis, denial-of-service capability, or exploitation services against third parties. Requests for such work are refused and may be reported to the relevant authorities.

• Do not attack, scan, overload or attempt to gain unauthorised access to SecByte systems outside a designated training environment.
• Do not share, resell, scrape or republish exam questions, question banks, lab content or course material.
• Do not share your account, impersonate another candidate, or misrepresent your identity.
• Do not upload malicious files, unlawful content, or content you do not have the right to submit.
• Do not use SecByte services to harass, threaten or defraud anyone.

Deliberately vulnerable labs and capture-the-flag challenges are isolated for practice. Techniques learned there must not be applied outside them. Attempting to pivot from a lab to production infrastructure, other tenants, or the wider internet is a serious breach.

Breaches may result in warning, suspension of access, invalidation of exam attempts, revocation of credentials, termination of the account without refund, and — where the law requires it — referral to law enforcement. Decisions may be appealed under the process set out in the Code of Conduct.

Report suspected misuse of SecByte services or a security issue in our platform to contact@secbyte.org. See the Security page for responsible-disclosure guidance.