1. Scope
This code applies to all candidates, students, credential holders, instructors and proctors, from the moment an account is created and for as long as a SecByte credential is held.
2. Professional obligations
- Act honestly, fairly and in the public interest when performing security work.
- Test, assess or access systems only with documented authorisation from the system owner.
- Respect the confidentiality of client, employer and third-party data encountered during your work.
- Report vulnerabilities responsibly and never exploit them for personal gain.
- Maintain and continually develop technical competence; do not accept work beyond your ability.
- Avoid conflicts of interest and disclose them promptly where they arise.
3. Examination integrity
- Sit every exam yourself, unaided, without impersonation or proxy.
- Never record, reproduce, memorise-and-publish, share or sell exam questions or answers.
- Do not use unauthorised tools, additional devices, remote assistance or brain-dump material.
- Do not attempt to interfere with proctoring, timing or scoring mechanisms.
4. Credential representation
- State only credentials you currently hold, using their exact titles and status.
- Do not alter certificates, badges or verification records.
- Do not imply that SecByte endorses your employer, product or service.
5. Respectful community
Harassment, discrimination, threats, doxxing and abusive conduct toward other candidates, staff or instructors are prohibited in all SecByte channels, labs and support interactions.
6. Reporting a violation
Report suspected violations — including leaked exam content or fraudulent credentials — to contact@secbyte.org. Reports may be made in confidence; we do not disclose the reporter's identity to the subject of the report except where legally required.
7. Sanctions
- Formal written warning.
- Invalidation of an exam attempt without refund.
- Suspension of one or more credentials for a defined period.
- Permanent revocation of credentials and a public revocation entry in the verification register.
- Permanent ban from future SecByte examinations.
8. Investigation and appeal
We notify you in writing of any allegation and give you 14 days to respond with evidence before a decision is made. Decisions are issued in writing with reasons. You may appeal within 30 days to contact@secbyte.org; appeals are reviewed by a person who was not involved in the original decision and are answered within 30 days. Appeal outcomes are final.