Terms & Conditions

By creating an account or using thebugbountyroom.com ("the Platform") you agree to these terms. If you do not agree, do not use the Platform.

TheBugBountyRoom provides educational cybersecurity training: learning tracks, intentionally vulnerable practice applications, and simulated bug bounty programs.

All targets are owned and operated by us for training purposes only.

You may only attack targets hosted on our own subdomains while logged in, and only within the scope each program defines.

Strictly forbidden: attacking any real third-party site, attacking our infrastructure outside designated targets, attempting to escape sandbox restrictions, sharing or selling solutions, automated scraping or hammering that degrades the service for others.

Breaking these rules results in immediate account termination without refund.

Accounts require admin approval. You are responsible for keeping your credentials secure. Accounts are personal and non-transferable.

Paid plans grant full access for the billed period. Access ends when the period expires unless renewed. See our Refund & Cancellation policy.

Certificates confirm completion of track requirements and remain verifiable through the Platform.

The Platform is provided "as is". We are not liable for indirect damages arising from use of the service. Skills taught are for legal, authorised security testing only - you are solely responsible for how you apply them.

We may update these terms; continued use after changes means acceptance. Material changes will be announced on the site.