Terms of Service

1. Who we are and this agreement

CyberFocus (the "Service") is an online cybersecurity learning platform at https://cyberfocus-seven.vercel.app, operated by CyberFocus Legal ("we", "us"). These Terms of Service ("Terms") are a binding agreement between you and us.

You accept these Terms by ticking the agreement box when you sign up or sign in, or, as a guest, by using the Service. For accounts we record which version you accepted and when. Our Privacy Policy and, for offensive modules, the Ethical-Use Pledge form part of these Terms.

If you do not agree, please do not use the Service.

2. Who can use CyberFocus

• ▸You must be at least 16 years old. We ask you to confirm this when you sign up, and we do not knowingly allow younger users.
• ▸If you are under the age of majority where you live, you may use the Service only with the permission of a parent or legal guardian, who accepts these Terms on your behalf.
• ▸You must not be barred from using the Service under the laws that apply to you, and you must not have been removed from it by us before.
• ▸If you use the Service for an organization, such as a school or employer, you confirm that you may accept these Terms for it.

3. Guest mode and accounts

• ▸Guest mode: you can learn without an account. Guest progress is stored only in your browser; clearing your browser data deletes it, and we cannot recover it.
• ▸Accounts: you sign in with a one-time email link or with Google or GitHub. We never see or store a password.
• ▸Keep your email and sign-in accounts secure. You are responsible for activity under your account; tell us promptly at balmzyny780@gmail.com if you suspect unauthorized use.
• ▸One person per account. Do not share, sell or transfer your account.

4. Legal and authorized use only

CyberFocus teaches real offensive and defensive techniques so that you can protect systems. All hands-on exercises run inside simulations provided by the Service. IP addresses, hostnames, credentials and targets shown in lessons are fictional and exist only inside those simulations.

The golden rule: use what you learn only on systems you own, or on systems whose owner has given you explicit, prior, written permission to test, and only within the scope of that permission. That includes networks at your school, workplace or internet provider.

Unauthorized access to, interference with or disruption of computer systems is a crime in most countries, for example under the U.S. Computer Fraud and Abuse Act, the UK Computer Misuse Act 1990, national laws implementing EU Directive 2013/40/EU, and the Saudi Anti-Cyber Crime Law. Nothing in the Service gives you permission to test any system outside our simulations.

You alone are responsible for how you use any knowledge, technique or tool from the Service, and for complying with the laws that apply to you.

5. The Ethical-Use Pledge

Before you open an offensive module (such as reconnaissance, web exploitation, privilege escalation or a capstone box), you must take our Ethical-Use Pledge. The pledge is versioned: we record which version you took and when (in your browser as a guest, and in your account when signed in), and we ask again if it changes. Breaking the pledge is a material breach of these Terms.

The pledge, word for word:

• ▸I only test systems I own or have explicit written permission to test.
• ▸I use these skills to learn, defend and report — never to cause harm.
• ▸I understand that unauthorized hacking is a crime in almost every country.

6. Acceptable use

While using the Service, you agree not to:

• ▸attack, scan, probe or load-test CyberFocus itself, its infrastructure or its providers, or try to access other users' accounts or data (see section 7 for how to report issues);
• ▸bypass or interfere with security features, rate limits or access controls;
• ▸use bots or scripts to farm XP, streaks or badges, or otherwise manipulate progress;
• ▸scrape, copy or redistribute our content at scale, or use it to train machine-learning models, without our written permission;
• ▸submit unlawful, harassing, hateful or malicious content (including malware) through feedback or any other channel;
• ▸impersonate anyone or misrepresent your affiliation with anyone;
• ▸use the Service in any way that breaks the law or these Terms.

7. Found a vulnerability in CyberFocus?

Please report it privately to balmzyny780@gmail.com (see our security.txt). Give us reasonable time to fix it before disclosing it publicly. Do not access or modify other users' data, degrade the Service, or use social engineering or physical attacks.

Good-faith research that follows these rules will not be treated as a breach of these Terms. This does not authorize testing of any third party, including our hosting and database providers, whose own policies apply.

8. Our content and your license to use it

• ▸The Service, including its curriculum, lessons, labs, simulations, code, design and the CyberFocus name, belongs to us or our licensors and is protected by intellectual-property laws.
• ▸We give you a personal, non-exclusive, non-transferable, revocable license to use the Service for your own learning. You may quote short excerpts with attribution, for example when sharing your progress.
• ▸Names of third-party tools and products (for example, Nmap) belong to their owners and are used only to identify them. Their use does not imply endorsement.

9. Feedback you send us

• ▸You keep ownership of what you send us. By submitting feedback, bug reports or ideas, you let us use them, without payment or obligation, to run and improve the Service.
• ▸Please do not include passwords, secrets or other people's personal data in feedback.

10. Third-party services and links

The Service relies on third-party providers, including Supabase (database and sign-in), Vercel (hosting and, if you allow it, analytics) and, if you choose them, Google or GitHub for sign-in. Those sign-in options are also governed by their own terms. Links to other websites, such as tool documentation, are provided for convenience; we are not responsible for their content.

11. A beta service, and what XP is (and isn't)

• ▸CyberFocus is in active development. Lessons, labs, features and XP rules may change, and parts of the Service may sometimes be unavailable.
• ▸XP, levels, streaks and badges are learning motivators only. They have no monetary value, cannot be sold or exchanged, and we may adjust them, for example to fix bugs or keep things fair.
• ▸Completing CyberFocus content is not a professional certification or qualification, and it does not authorize you to test any system.

12. Disclaimers

The Service is provided "as is" and "as available". To the fullest extent permitted by law, we make no warranties of any kind, express or implied, including warranties of merchantability, fitness for a particular purpose, accuracy and non-infringement.

Security knowledge changes quickly. Content may be incomplete or out of date, and it is not professional, legal or security advice for your specific situation. Some jurisdictions do not allow certain warranty exclusions, so parts of this section may not apply to you.

13. Limitation of liability

To the fullest extent permitted by law, we are not liable for any indirect, incidental, special, consequential, exemplary or punitive damages, or for any loss of profits, revenue, data or goodwill, arising out of or relating to the Service or these Terms. We are not liable for the consequences of your use of any technique, tool or knowledge from the Service against any system.

To the fullest extent permitted by law, our total liability for all claims relating to the Service is limited to the greater of the amount you paid us in the 12 months before the claim (currently nothing, as the Service is free) or USD 50.

Nothing in these Terms excludes or limits liability that cannot be excluded or limited by law, such as liability for fraud, gross negligence, willful misconduct, or death or personal injury caused by negligence, or affects your statutory rights as a consumer.

14. Indemnity

To the extent permitted by law, you agree to indemnify and hold harmless us and our operators against claims, damages, losses and expenses (including reasonable legal fees) arising from your misuse of the Service, your breach of these Terms or of any law, or your use of anything learned on the Service against any system without authorization.

15. Suspension, termination and deleting your account

• ▸You can stop using the Service at any time, and permanently delete your account instantly at Your data.
• ▸We may suspend or end your access, with or without notice, if you breach these Terms (especially sections 4 to 6), if the law requires it, or to protect other users or the Service.
• ▸We may change or discontinue the Service. Where practical, we will give reasonable notice so you can download your data first.
• ▸Sections 4, 5, 8, 9, 12, 13, 14, 17 and 18 survive termination.

16. Changes to these Terms

• ▸We may update these Terms. Every version has a version number and date, shown at the top of this page.
• ▸For material changes, signed-in users are asked to review and accept the new version before continuing, and we give notice in the Service. Changes apply from the date they take effect and are never retroactive.
• ▸If you do not agree with a change, you can stop using the Service and delete your account.

17. Governing law and disputes

• ▸These Terms are governed by the laws of the Kingdom of Saudi Arabia, without regard to conflict-of-law rules.
• ▸If you are a consumer, you also keep the protection of the mandatory laws of the country where you live, and you may bring claims in your local courts where the law allows.
• ▸Before starting a formal proceeding, please contact us at balmzyny780@gmail.com so we can try to resolve the issue informally within 30 days.

18. General

• ▸These Terms, the Privacy Policy and the Ethical-Use Pledge are the entire agreement between you and us about the Service.
• ▸If any provision is found unenforceable, the rest remains in effect. Not enforcing a provision is not a waiver of it.
• ▸You may not transfer your rights under these Terms. We may transfer ours as part of a reorganization, merger or sale of the Service, with notice to you.
• ▸If we provide a translation, the English version controls in case of conflict.
• ▸We are not responsible for delays or failures caused by events beyond our reasonable control.

19. Contact

Questions about these Terms? Email balmzyny780@gmail.com. The Service is operated by CyberFocus Legal.