Acceptable Use Policy

Practice only inside SimulatedCyber, on systems you own, or on systems where you have clear permission to test. A technique, command, indicator, or workflow shown in a lesson is educational content—not authorization to use it against another system.

Do not use SimulatedCyber to facilitate unauthorized access, malware, credential theft, surveillance, evasion, harassment, privacy invasion, fraud, disruption, or other harm. Do not probe, overload, interfere with, reverse engineer, or attempt to bypass controls protecting SimulatedCyber or its hosting environment, except where applicable law expressly permits a limited activity.

Do not automate excessive requests, scrape protected content, introduce malicious code, impersonate others, or use the service in a way that violates law or another person’s rights.

Do not place real passwords, authentication tokens, private keys, protected school or employer data, regulated data, or another person’s sensitive personal information into profile fields, notes, reports, or simulations. Use synthetic or properly authorized information.

You may describe completed work as hands-on practice in SimulatedCyber. Do not present a simulation completion as a professional certification, license, security clearance, academic credential, or real employment experience.

SimulatedCyber may restrict access or take other reasonable action in response to misuse. If you believe you found a security issue in the real service, stop testing, do not access or retain other people’s data, and report the issue to simulatedcyber@gmail.com with enough detail to reproduce it safely.