Terms of Service
Terms of Service Effective Date: April 22, 2026 Last Updated: April 22, 2026 These Terms of Service ("Terms") form a binding agreement between you ("you," "your," or "User") and LufSec LLC, an Arizona limited liability company ("LufSec," "we," "us," or "our"), governing your access to and use of lufsec.com, blog.lufsec.com, any related subdomains, our online courses, labs, certifications, consulting and advisory services, and any other products or services we offer (collectively, the "Services"). By accessing or using the Services, you agree to these Terms and to our Privacy Policy. If you do not agree, do not use the Services. If you are using the Services on behalf of a company or other organization, you represent that you have authority to bind that entity, and "you" refers to that entity. 1. Eligibility To use the Services, you must be at least 16 years old (or the age of digital consent in your jurisdiction, whichever is higher) and capable of forming a legally binding contract. By using the Services, you represent that you meet these requirements and that you are not barred from using the Services under the laws of the United States or any other applicable jurisdiction. 2. Accounts 2.1 Registration Some Services require you to create an account. You agree to provide accurate, current, and complete information and to keep it up to date. 2.2 Account Security You are responsible for safeguarding your credentials and for all activity that occurs under your account. Notify us immediately at [email protected] if you suspect unauthorized access. We are not liable for losses caused by unauthorized use of your account. 2.3 One Account Per User Accounts are personal to you. You may not share, transfer, sell, or allow others to use your account, and you may not create an account for anyone else without their permission. 3. Purchases, Payments, and Taxes 3.1 Fees Prices for courses, labs, memberships, and consulting services are as displayed on the Site or in a written engagement letter at the time of purchase. All fees are stated in U.S. dollars unless otherwise noted. 3.2 Billing Payments are processed by third-party payment processors (such as Stripe or PayPal). By providing payment information, you authorize us and our processors to charge the applicable fees, taxes, and any recurring charges for subscriptions. 3.3 Subscriptions and Auto-Renewal If you purchase a subscription, it will automatically renew at the end of each billing period at the then-current rate until you cancel. You can cancel at any time from your account dashboard; cancellation takes effect at the end of the current billing period. 3.4 Taxes You are responsible for any sales, use, VAT, GST, or similar taxes associated with your purchase, except for taxes on LufSec's net income. 3.5 Refunds Unless otherwise stated in a specific offer or required by law: Self-paced online courses: refundable within 14 days of purchase, provided you have completed less than 25% of the course content and have not downloaded substantial resources or earned a certificate. Live or cohort-based training: refundable up to 7 days before the start date; non-refundable thereafter. Consulting and assessment engagements: governed by the applicable Statement of Work or engagement letter. Deposits are generally non-refundable once work begins. Bundles, lifetime access, or promotional purchases: may be non-refundable; terms will be stated at checkout. To request a refund, email [email protected] with your order number. 4. License to Use the Services Subject to your compliance with these Terms and payment of applicable fees, LufSec grants you a limited, non-exclusive, non-transferable, non-sublicensable, revocable license to access and use the Services for your personal, internal educational, or internal business purposes. This license does not permit you to: Resell, redistribute, or publicly share course content, labs, exercises, videos, slides, or certificates. Reproduce, modify, create derivative works from, or publicly perform or display our content. Use the Services to build a competing product or training program. Scrape, crawl, or use automated means to access the Services except as permitted by our robots.txt. Remove or obscure copyright, trademark, or other proprietary notices. All rights not expressly granted are reserved by LufSec. 5. Course Content, Certificates, and Enrollment 5.1 Access Unless stated otherwise, course access is granted for the term specified at purchase (e.g., 12 months, lifetime, or for the duration of a cohort). We may update, improve, or retire courses at our discretion. 5.2 Certificates Certificates issued by LufSec confirm completion of specific course requirements. They are not industry certifications, accredited degrees, or warranties of professional competence. Certificates may be revoked if we determine they were earned in violation of these Terms (for example, through cheating or account sharing). 5.3 Labs and Practice Environments You may only use LufSec-provided lab environments, virtual machines, and target systems for their intended educational purpose. Attacking, scanning, or exploiting any system that is not part of your assigned LufSec lab — or that you do not own or have explicit written permission to test — is strictly prohibited and may be illegal. 6. Ethical Use and Cybersecurity Conduct LufSec teaches offensive and defensive cybersecurity, including ethical hacking, penetration testing, AI security, automotive pentesting, IoT hacking, and similar subjects. By using the Services, you agree: Only to apply the knowledge, tools, and techniques learned on systems you own or have explicit, documented authorization to test. Never to use the Services to plan, facilitate, or carry out unauthorized access, data theft, ransomware, denial-of-service attacks, surveillance, harassment, or any other unlawful activity. To comply with all applicable laws, including the Computer Fraud and Abuse Act (18 U.S.C. § 1030), the Digital Millennium Copyright Act, the GDPR/UK GDPR where applicable, and the export control laws of the United States and your country of residence. Not to use the Services if you are located in, ordinarily resident in, or a national of a country subject to U.S. embargoes (currently including Cuba, Iran, North Korea, Syria, and the Crimea, Donetsk, and Luhansk regions), or if you are on any U.S. government restricted-party list. You are solely responsible for how you apply what you learn. LufSec does not authorize, condone, or take responsibility for any illegal or unauthorized use of our materials. 7. Acceptable Use of the Site You agree not to: Upload or transmit malware, viruses, or other harmful code (except in designated lab environments); Attempt to gain unauthorized access to any part of the Site, other users' accounts, or LufSec infrastructure outside of sanctioned lab exercises; Interfere with, disrupt, or overload the Site or any server or network connected to it; Reverse engineer, decompile, or attempt to extract source code except as permitted by law; Use the Site to send spam, phishing, or unsolicited commercial communications; Impersonate any person or entity or misrepresent your affiliation; Harvest email addresses or other information from the Site; Post unlawful, defamatory, harassing, hateful, or infringing content. We may investigate and take appropriate action against any violation, including suspending or terminating your account, issuing refunds or refusing refunds as appropriate, reporting to law enforcement, and pursuing legal remedies. 8. User Content 8.1 Your Content You may submit content through the Services, such as forum posts, blog comments, lab submissions, reviews, testimonials, and support messages ("User Content"). You retain ownership of your User Content. 8.2 License to Us You grant LufSec a worldwide, royalty-free, sublicensable, transferable license to host, store, reproduce, modify, create derivative works from, publish, and display your User Content for the purpose of operating, promoting, and improving the Services. For testimonials and reviews, you also grant us the right to use your first name, last initial, job title, and employer (if provided) in marketing materials unless you tell us otherwise. 8.3 Responsibility You represent that your User Content does not violate any law or third-party right, and that you have all necessary rights to grant the license above. We may remove User Content that we believe violates these Terms or is otherwise objectionable, but we have no obligation to monitor User Content. 9. Intellectual Property The Services, including all course materials, videos, text, graphics, logos, software, lab environments, and the "LufSec" name and marks, are owned by LufSec or its licensors and are protected by copyright, trademark, and other intellectual property laws. Except for the limited license in Section 4, nothing in these Terms transfers any intellectual property rights to you. 10. Copyright Complaints (DMCA) If you believe material on the Site infringes your copyright, send a written notice to our designated agent that includes: A physical or electronic signature of the copyright owner or authorized agent; Identification of the copyrighted work claimed to be infringed; Identification of the infringing material and its location on the Site; Your contact information; A statement that you have a good-faith belief the use is not authorized; A statement, under penalty of perjury, that the information is accurate and that you are authorized to act on behalf of the copyright owner. Send notices to: [email protected] (Subject: DMCA Notice) or to the mailing address in Section 19. 11. Third-Party Services and Links The Services may link to or integrate with third-party platforms (for example, Hack The Box, YouTube, Stripe, PayPal, LinkedIn, Facebook, Instagram, or research references). We do not control and are not responsible for third-party services. Your use of them is governed by their own terms and privacy policies. 12. Consulting and Professional Services Consulting engagements — including penetration testing, vulnerability assessments, risk assessments, PCI compliance work, data recovery, and advisory services — are governed by a separate Statement of Work, engagement letter, and any applicable NDA or Rules of Engagement. In the event of a conflict between those engagement documents and these Terms, the engagement documents control for that engagement. You represent and warrant that you have all rights and authorizations necessary for us to perform the engaged services (including ownership of or written authorization to test the target systems). 13. Disclaimers THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED. To the fullest extent permitted by law, LufSec disclaims all warranties, including implied warranties of merchantability, fitness for a particular purpose, title, non-infringement, and any warranty arising out of course of dealing or usage of trade. Educational purpose only. LufSec's courses and materials are for educational and informational purposes. They are not a substitute for professional legal, financial, compliance, or security advice tailored to your specific situation. Cybersecurity is a fast-changing field; we do not warrant that techniques taught will remain effective, safe, or lawful over time. Completing a course does not guarantee employment, certification, or specific security outcomes. No guarantee of results. We do not warrant that the Services will be uninterrupted, error-free, secure, or free from vulnerabilities, or that any defects will be corrected. 14. Limitation of Liability TO THE MAXIMUM EXTENT PERMITTED BY LAW, LUFSEC AND ITS OWNERS, OFFICERS, EMPLOYEES, CONTRACTORS, AND AGENTS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, LOST REVENUE, LOST DATA, BUSINESS INTERRUPTION, OR LOSS OF GOODWILL, ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICES, EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. OUR TOTAL AGGREGATE LIABILITY FOR ANY CLAIM ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICES WILL NOT EXCEED THE GREATER OF (A) THE AMOUNTS YOU PAID TO LUFSEC FOR THE SPECIFIC SERVICE GIVING RISE TO THE CLAIM DURING THE 12 MONTHS PRECEDING THE CLAIM, OR (B) ONE HUNDRED U.S. DOLLARS ($100). Some jurisdictions do not allow the exclusion or limitation of certain damages, so some of the above may not apply to you. Nothing in these Terms limits liability that cannot be limited under applicable law. 15. Indemnification You agree to defend, indemnify, and hold harmless LufSec and its owners, officers, employees, contractors, and agents from and against any claims, damages, liabilities, losses, costs, and expenses (including reasonable attorneys' fees) arising out of or related to: (a) your use or misuse of the Services; (b) your violation of these Terms or any applicable law; (c) your User Content; (d) your violation of any third-party right; or (e) your unauthorized application of techniques learned through the Services, including any unauthorized testing, access, or exploitation of systems. 16. Termination You may stop using the Services and close your account at any time. We may suspend or terminate your access to the Services (in whole or in part), with or without notice, if we believe you have violated these Terms, created risk or legal exposure for LufSec or others, or engaged in fraudulent or unlawful behavior. Upon termination, your license to use the Services ends immediately. Sections that by their nature should survive termination (including Sections 4, 6, 8.2, 9, 10, 13, 14, 15, 17, and 18) will survive. 17. Governing Law and Dispute Resolution 17.1 Governing Law These Terms are governed by the laws of the State of Arizona, USA, without regard to its conflict-of-laws rules. The United Nations Convention on Contracts for the International Sale of Goods does not apply. 17.2 Informal Resolution Before filing a formal claim, you agree to contact us at [email protected] and attempt to resolve the dispute informally for at least 30 days. 17.3 Binding Arbitration If informal resolution fails, any dispute arising out of or relating to these Terms or the Services will be resolved by binding arbitration administered by the American Arbitration Association (AAA) under its Commercial Arbitration Rules (or Consumer Arbitration Rules, if applicable). The arbitration will take place in Maricopa County, Arizona, in English, before a single arbitrator. Judgment on the award may be entered in any court of competent jurisdiction. 17.4 Class Action Waiver You and LufSec agree that disputes will be resolved on an individual basis, not as a class, consolidated, or representative action. The arbitrator may not consolidate claims or preside over any form of representative or class proceeding. 17.5 Exceptions Either party may seek injunctive or equitable relief in court for intellectual property infringement, misuse of confidential information, or violations of Section 6 (Ethical Use). Small-claims court is also available for qualifying disputes. 17.6 Opt-Out You may opt out of arbitration and the class-action waiver by sending written notice to [email protected] within 30 days of first accepting these Terms, stating your name, email, and that you opt out. 18. Export Controls and Sanctions You agree to comply with all applicable U.S. and international export control and sanctions laws. You represent that you are not located in, ordinarily resident in, or a national of any country subject to a U.S. government embargo, and that you are not on any U.S. government restricted-party list. You agree not to use the Services in connection with any weapons of mass destruction, including nuclear, chemical, or biological weapons, or missile technology. 19. Changes to These Terms We may update these Terms from time to time. When we do, we will revise the "Last Updated" date above. If the changes are material, we will provide reasonable notice, such as an email to your registered address or a prominent notice on the Site, before the changes take effect. Your continued use of the Services after the effective date constitutes acceptance of the updated Terms. If you do not agree, you must stop using the Services. 20. Miscellaneous Entire Agreement. These Terms, together with the Privacy Policy and any Statement of Work or engagement letter, constitute the entire agreement between you and LufSec concerning the Services. Severability. If any provision is found unenforceable, the remaining provisions will remain in full force and effect. No Waiver. Our failure to enforce any right or provision is not a waiver of that right or provision. Assignment. You may not assign or transfer these Terms without our prior written consent. We may assign these Terms in connection with a merger, acquisition, or sale of assets. Force Majeure. We are not liable for any delay or failure caused by circumstances beyond our reasonable control, including natural disasters, war, terrorism, labor disputes, internet or utility outages, or governmental actions. Notices. We may give notice by email to your registered address or by posting on the Site. You may give notice to us by email to [email protected] or by mail to the address in Section 21. Relationship. Nothing in these Terms creates any partnership, joint venture, agency, or employment relationship. Headings. Section headings are for convenience only and do not affect interpretation.