Terms and Conditions
Please read these Terms and Conditions carefully before using the ExploitGrid platform. By accessing or using our service, you agree to be bound by these terms.
Last updated: 9/18/2026
Acceptance of Terms
By accessing and using ExploitGrid ("the Platform", "our Service"), you accept and agree to be bound by the terms and provision of this agreement. If you do not agree to abide by the above, please do not use this service.
These Terms and Conditions constitute a legally binding agreement between you ("User", "you") and ExploitGrid and its operator(s) ("ExploitGrid", "we", "us", "our") regarding your use of the Platform.
Service Description
Platform Overview
ExploitGrid is a cybersecurity training and competition platform that provides hands-on, live-fire learning experiences through isolated virtual environments. Our service operates as a Player-versus-Player (PvP) cyber range where users engage in authorized offensive (red team) and defensive (blue team) exercises against each other's virtual machines within a controlled network environment. Our service includes:
- • Virtual machine environments (Linux VMs) provisioned for each user for cybersecurity practice
- • PvP matchmaking where users are paired as attacker and defender in real-time adversarial exercises
- • VPN-based network access (OpenVPN) connecting users to the isolated cyber range
- • Educational content, AI-powered mentorship, and skill development tools
- • Collaboration and communication tools (chat, leaderboards)
- • Progress tracking, matchmaking rating (MMR), and skill assessment
- • Community features, leaderboards, and achievement systems
Nature of Activities
Important: ExploitGrid involves real offensive and defensive cybersecurity techniques executed against real (virtualized) systems. Users will actively attempt to exploit, compromise, and gain access to other users' virtual machines, and will have their own virtual machines subjected to the same activities by other users. All such activities are conducted within ExploitGrid's isolated network environment and constitute authorized access as defined in Section "Consent to Adversarial Activities" below.
Educational and Professional Purpose
ExploitGrid is designed for educational and professional development purposes, enabling cybersecurity practitioners, students, and enthusiasts to develop practical offensive and defensive skills in a controlled, legal environment. All activities must be conducted within the confines of our platform for legitimate learning, training, and competitive purposes only.
Consent to Adversarial Activities
Mutual Consent and Authorization Framework
By creating an account and participating in PvP activities on ExploitGrid, you explicitly and voluntarily:
- 1. Grant Authorization: You authorize other ExploitGrid users to attempt to access, exploit, and compromise your assigned virtual machine(s) during PvP sessions as part of the platform's intended functionality. This authorization constitutes your express consent to such access for purposes of applicable computer crime laws, including but not limited to the U.S. Computer Fraud and Abuse Act (CFAA), the UK Computer Misuse Act, and equivalent laws in other jurisdictions.
- 2. Acknowledge Reciprocal Access: You acknowledge that when you participate as an attacker, the defending user has similarly authorized your access to their virtual machine for the duration and scope of the PvP session.
- 3. Accept Scope Limitations: This authorization is strictly limited to: (a) the virtual machine(s) assigned to the PvP session, (b) the duration of the active PvP session, and (c) activities conducted through the ExploitGrid VPN network. Any access to systems, networks, or resources outside this scope is unauthorized and may constitute a criminal offense.
- 4. Acknowledge Inherent Risks: You understand that participating in live-fire cybersecurity exercises carries inherent risks, including but not limited to: exposure to offensive techniques, potential data loss on your virtual machine, and the possibility (despite our security measures) that a sophisticated attack could affect your VPN-connected device.
- 5. Accept Responsibility for Device Security: You are solely responsible for ensuring the security of the device from which you connect to ExploitGrid. We strongly recommend connecting from an isolated virtual machine (VM) or a dedicated device that does not contain sensitive personal or professional data.
Withdrawal of Consent
You may withdraw your consent to adversarial activities at any time by ceasing to participate in PvP sessions and, if desired, disconnecting from the VPN. Withdrawal does not affect the lawfulness of activities conducted during sessions in which you participated. You may also request account termination to permanently withdraw from the platform.
User Accounts and Registration
Account Creation
- • You must be at least 18 years old to create an account. Due to the nature of this platform, which involves live offensive and defensive cybersecurity techniques, use by minors is not permitted under any circumstances
- • You must provide accurate and complete information during registration
- • You are responsible for maintaining the confidentiality of your account credentials
- • You are responsible for all activities that occur under your account
- • One account per person; multiple accounts are not permitted
Account Security
- • You must immediately notify us of any unauthorized use of your account
- • We recommend using strong, unique passwords and enabling two-factor authentication
- • You must not share your account credentials with others
- • We are not liable for losses caused by unauthorized use of your account
Account Termination
We reserve the right to suspend or terminate your account at any time for violation of these terms, illegal activity, or any other reason we deem appropriate. You may also terminate your account at any time through your account settings.
Acceptable Use Policy
Permitted Activities
- • Using the platform for educational, training, and competitive purposes
- • Participating in PvP sessions, including offensive and defensive exercises, within the designated platform environment
- • Collaborating with other users through approved features
- • Sharing knowledge and helping others learn
- • Providing feedback and suggestions for platform improvement
Prohibited Activities
Strictly Forbidden:
- • Using knowledge or techniques gained from the platform for illegal activities
- • Attempting to attack, access, or exploit any systems, networks, or devices outside of the ExploitGrid platform environment, including other users' personal devices, home networks, or any third-party infrastructure
- • Attempting to escape the VPN sandbox or access resources outside the designated ExploitGrid network
- • Sharing exploits or techniques for malicious purposes outside the platform
- • Disrupting or attempting to compromise the platform's security infrastructure
- • Harassing, threatening, or abusing other users
- • Uploading malicious content or malware designed to affect the platform itself
- • Violating intellectual property rights
- • Creating multiple accounts or impersonating others
- • Attempting to reverse engineer or extract platform code
- • Using the platform for commercial purposes without authorization
- • Using the platform to develop, test, or refine malware, ransomware, or other malicious tools intended for use outside the platform
- • Accessing the platform from a sanctioned country or territory, or while subject to applicable trade sanctions (see "Export Compliance" section)
Consequences of Violation
Violation of this Acceptable Use Policy may result in immediate account suspension or termination, legal action, reporting to appropriate law enforcement authorities, and forfeiture of any credits or subscription fees. We have zero tolerance for misuse of our platform.
Platform Monitoring and Law Enforcement Cooperation
Activity Monitoring
You acknowledge and consent to the fact that ExploitGrid actively monitors all activity on the platform, including but not limited to:
- • All commands executed during PvP sessions (both attacker and defender sides)
- • VPN connection/disconnection events and traffic patterns
- • Authentication attempts and session activity
- • Virtual machine operations and resource usage
- • Chat communications (stored in encrypted format)
- • Abuse detection signals and security events
This monitoring is essential for platform security, abuse prevention, and legal compliance. Detailed logs are maintained as described in our Privacy Policy.
Law Enforcement Cooperation
Notice: ExploitGrid will cooperate with law enforcement agencies and regulatory authorities when required by law or when we have reasonable grounds to believe that illegal activity has occurred. This cooperation may include, without limitation: disclosure of activity logs, command histories, PvP session records, account information, IP addresses, and any other data maintained by the platform. We may also proactively report suspected illegal activity to the appropriate authorities. We will attempt to notify affected users unless prohibited by law or court order.
Export Compliance and Restricted Use
User Representations and Warranties
By using ExploitGrid, you represent and warrant that:
- • You are not located in, under the control of, or a national or resident of any country or territory that is subject to comprehensive trade sanctions or embargoes imposed by the United States (OFAC), European Union, United Kingdom, or United Nations, including but not limited to: Cuba, Iran, North Korea, Syria, and the Crimea, Donetsk, and Luhansk regions
- • You are not listed on any applicable restricted or denied party list, including the U.S. Treasury Department's Specially Designated Nationals (SDN) List, the U.S. Commerce Department's Entity List, or any equivalent list maintained by the EU, UK, or UN
- • You will not use the platform to provide services to, or for the benefit of, any person or entity in a sanctioned country or territory, or any sanctioned person
- • You are responsible for compliance with all applicable export control laws, sanctions regulations, and trade restrictions in your jurisdiction
- • You will not use the platform to transfer or export cybersecurity tools, techniques, or knowledge in violation of applicable export control regulations, including the Wassenaar Arrangement and the U.S. Export Administration Regulations (EAR)
Service Availability
ExploitGrid's services are not offered in, and are not intended for use in, countries or territories subject to comprehensive trade sanctions. We reserve the right to restrict or terminate access to our platform for any user or region where continued service would violate applicable sanctions or export control laws, at our sole discretion and without prior notice.
Consequences of Violation
If we determine, in our sole discretion, that a user has breached any of the representations in this section, we will immediately terminate the user's account without refund and may report the matter to the relevant authorities. Users who make false representations regarding their sanctions status may be subject to civil and criminal penalties under applicable law.
Subscription and Payment Terms
Subscription Plans
- • Multiple subscription tiers are available with different features and limits
- • Subscription fees are charged in advance on a recurring basis
- • Prices are subject to change with advance notice
- • Free tier limitations may apply
Payment Processing
Payments are processed securely through our authorized payment service providers, including Stripe, Paddle, and PayPal. Paddle may act as the merchant of record for certain transactions. By providing payment information, you authorize the applicable payment processor to charge the fees to your payment method. You are responsible for maintaining valid payment information.
Refund Policy
Refund Eligibility Categories
Refunds may be considered under the following circumstances:
- Technical Issues: Platform downtime exceeding 48 consecutive hours or critical functionality failures preventing service use
- Billing Errors: Incorrect charges, duplicate transactions, or unauthorized payments
- Service Non-Delivery: Purchased credits not delivered to your account within 24 hours
- Credit Purchase Refund: For one-time credit purchases (e.g., 100 credits), a refund may be requested within 30 days if less than 25% of the credits from that specific transaction have been consumed. The refund will cover only the unused portion of the credits; consumed credits are non-refundable.
- Account Security: Unauthorized purchases made due to account compromise (with proof)
Refund Timeframes
- Standard Refund Requests: Must be submitted within 30 days of the original purchase
- Technical Issue Claims: Must be reported within 30 days of the incident
- Billing Error Reports: Must be submitted within 60 days of the charge
- Security Breach Claims: Must be reported within 7 days of discovery
Non-Refundable Items
- • Credits purchases where 25% or more of the credits from the relevant transaction have been consumed, or the credits are fully used
- • The consumed portion of any partially used credit purchase
- • Subscription fees after the 30-day initial cancellation period
- • Purchases made more than 30 days ago (except for specific circumstances above)
- • Credits purchased with promotional discounts or bonus offers
- • Credits used in team subscriptions that have been shared with team members
Refund Process
To request a refund, you must:
- Contact our support team at [email protected] with your refund request
- Provide your account email, transaction ID, and reason for the refund request
- Include any relevant documentation (screenshots, error messages, etc.)
- Allow up to 5-7 business days for review and processing
Processing and Timeline
- • Review Period: 5-7 business days for refund request evaluation
- • Processing Time: 5-10 business days after approval for funds to appear in your account
- • Credit Card Refunds: May take 1-2 additional billing cycles to appear on statements
Subscription Cancellation
- • Subscriptions can be cancelled at any time from your account settings
- • Cancelled subscriptions remain active until the end of the current billing period
- • No refunds for partial months unless cancelled within the 30-day initial period
- • Unused credits remain in your account after cancellation but may expire
- • Failed payments may result in automatic service suspension
Note: Refunds are processed through the same payment method used for the original purchase. We reserve the right to refuse refunds for accounts with evidence of fraud, refund abuse, or violations of our Terms of Service.
Consumer Rights
If you are a consumer purchasing for personal use, you may have additional rights under applicable consumer protection laws in your jurisdiction, including potential cooling-off periods, withdrawal rights, or mandatory refund periods. These rights are honored in accordance with applicable law and the terms of the merchant of record for your transaction.
Credits and Virtual Currency
Credits purchased on the platform are for use within the platform only and have no real-world monetary value outside of the platform. Credits cannot be transferred, sold, or exchanged for cash. Unused credits may expire as outlined in your subscription terms. Credits represent a pre-paid license to use platform features and do not constitute stored value, currency, or property.
Intellectual Property
Platform Content
All content, features, and functionality of the ExploitGrid platform, including but not limited to text, graphics, logos, software, and design, are owned by ExploitGrid and protected by copyright, trademark, and other intellectual property laws.
User-Generated Content
- • You retain ownership of content you create and upload to the platform
- • You grant us a license to use, display, and distribute your content on the platform
- • You must not upload content that infringes on others' intellectual property rights
- • We may remove content that violates these terms or applicable laws
License to Use
We grant you a limited, non-exclusive, non-transferable license to access and use the platform for your personal, educational use in accordance with these terms.
Privacy and Data Protection
Your privacy is important to us. Our collection, use, and protection of your personal information is governed by our Privacy Policy, which is incorporated into these terms by reference. By using our service, you consent to our privacy practices as described in the Privacy Policy.
We implement appropriate security measures to protect your personal information, but cannot guarantee absolute security. You acknowledge that you provide information at your own risk.
You acknowledge and consent to the monitoring and logging of your platform activity as described in the "Platform Monitoring and Law Enforcement Cooperation" section above and in our Privacy Policy, including the recording of all commands executed during PvP sessions.
Disclaimers and Limitations
Warranty Disclaimer ("As Is" Provision)
THE PLATFORM IS PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS, WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, OR COURSE OF PERFORMANCE. EXPLOITGRID DOES NOT WARRANT THAT THE PLATFORM WILL BE UNINTERRUPTED, SECURE, OR ERROR-FREE, THAT DEFECTS WILL BE CORRECTED, OR THAT THE PLATFORM OR THE SERVERS THAT MAKE IT AVAILABLE ARE FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS.
Service Availability
We strive to provide continuous service availability but cannot guarantee uninterrupted access. The platform may be temporarily unavailable due to maintenance, updates, or technical issues. We are not liable for any losses resulting from service interruptions.
Educational Disclaimer
Important: The information and techniques taught and practiced on ExploitGrid are for educational and professional development purposes only. Users are solely responsible for ensuring their activities comply with applicable laws and regulations in their jurisdiction. ExploitGrid does not condone, support, or encourage illegal activities of any kind. Skills acquired on this platform must only be applied in legally authorized contexts.
Security Notice and User Responsibility
While ExploitGrid incorporates multiple layers of security controls, including network segmentation, VPN isolation, abuse detection systems, and automated enforcement, no online service can guarantee absolute protection against all threats. Due to the adversarial nature of the platform, cyber-attacks between participants are an intended and expected part of the experience. Despite our security measures, there is an inherent risk that a sophisticated attack could extend beyond the intended scope. We strongly recommend that users access the platform exclusively from an isolated environment such as a virtual machine (VM) to minimize risk to their primary operating systems and personal data. By using the platform, you acknowledge that you understand these inherent risks and you are solely responsible for implementing appropriate safety measures on your devices.
Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, EXPLOITGRID AND ITS AFFILIATES, OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, AND LICENSORS WILL NOT BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO DATA LOSS, DEVICE COMPROMISE, SECURITY BREACHES, LOSS OF PROFITS, LOSS OF DATA, OR BUSINESS INTERRUPTION, ARISING FROM OR RELATED TO YOUR USE OF OR INABILITY TO USE THE PLATFORM, PARTICIPATION IN PVP SESSIONS, INTERACTIONS WITH OTHER USERS, OR ANY CONTENT OR ACTIVITIES ON THE PLATFORM-EVEN IF EXPLOITGRID HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES OR EVEN IN THE EVENT THAT A VULNERABILITY WITHIN THE PLATFORM IS EXPLOITED BY ANOTHER USER. IN NO EVENT SHALL EXPLOITGRID'S TOTAL AGGREGATE LIABILITY EXCEED THE GREATER OF (A) THE AMOUNTS YOU HAVE PAID TO EXPLOITGRID IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM, OR (B) ONE HUNDRED U.S. DOLLARS ($100). YOUR SOLE REMEDY FOR ANY DISSATISFACTION WITH THE SERVICE IS TO DISCONTINUE USE OF THE PLATFORM AND, WHERE APPLICABLE, REQUEST A REFUND IN ACCORDANCE WITH OUR REFUND POLICY. SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OR LIMITATION OF CERTAIN DAMAGES, SO SOME OF THE ABOVE LIMITATIONS MAY NOT APPLY TO YOU.
Indemnification
You agree to indemnify, defend, and hold harmless ExploitGrid and its affiliates, officers, directors, employees, and agents from and against any and all claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from or related to: (a) your use of the platform; (b) your violation of these terms; (c) your violation of any applicable law or regulation; (d) your violation of any third-party rights; (e) any content you submit or transmit through the platform; or (f) your use of techniques or knowledge gained from the platform outside of authorized contexts.
Termination
Termination by User
You may terminate your account at any time by contacting us or using the account deletion feature in your settings. Upon termination, your right to use the platform will cease immediately.
Termination by ExploitGrid
We may terminate or suspend your account immediately, without prior notice, for any reason, including but not limited to violation of these terms, illegal activity, suspected sanctions violations, or behavior that we deem harmful to the platform or other users.
Effect of Termination
Upon termination, all rights and licenses granted to you will terminate, and you must cease all use of the platform. The following provisions survive termination: Consent to Adversarial Activities (with respect to sessions already completed), Platform Monitoring and Law Enforcement Cooperation, Export Compliance, Intellectual Property, Disclaimers and Limitations (including Limitation of Liability and Indemnification), Governing Law and Disputes, and any other provisions that by their nature should survive.
Governing Law and Disputes
Governing Law
These Terms and Conditions are governed by and construed in accordance with the laws of the Arab Republic of Egypt, without regard to its conflict of laws provisions. Any disputes arising from these terms or your use of the platform will be subject to the exclusive jurisdiction of the competent courts of Cairo, Egypt, and you consent to the personal jurisdiction of such courts.
Dispute Resolution
We encourage users to contact us directly at [email protected] to resolve any disputes informally before initiating formal proceedings.
Binding Arbitration
If a dispute cannot be resolved informally within thirty (30) days, you and ExploitGrid agree that any dispute, claim, or controversy arising out of or relating to these Terms or the use of the platform shall be resolved by binding arbitration administered by the Cairo Regional Centre for International Commercial Arbitration (CRCICA) under its Arbitration Rules. The seat of arbitration shall be Cairo, Egypt, and the language of the arbitration proceedings shall be English. The arbitrator's decision shall be final and binding and may be entered as a judgment in any court of competent jurisdiction. The arbitrator shall have authority to award any remedy that would be available in court, including injunctive relief.
Class Action Waiver
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, YOU AND EXPLOITGRID AGREE THAT EACH PARTY MAY BRING CLAIMS AGAINST THE OTHER ONLY IN YOUR OR ITS INDIVIDUAL CAPACITY AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS, CONSOLIDATED, OR REPRESENTATIVE ACTION OR PROCEEDING. UNLESS BOTH YOU AND EXPLOITGRID AGREE OTHERWISE, THE ARBITRATOR MAY NOT CONSOLIDATE MORE THAN ONE PERSON'S CLAIMS AND MAY NOT OTHERWISE PRESIDE OVER ANY FORM OF A CLASS OR REPRESENTATIVE PROCEEDING.
Exceptions
Notwithstanding the foregoing, either party may seek injunctive or other equitable relief in any court of competent jurisdiction to prevent the actual or threatened infringement of intellectual property rights or to address platform security emergencies. Nothing in this section shall prevent ExploitGrid from seeking relief in any jurisdiction to enforce its rights.
Consumer Protection and Mandatory Law Carve-Out
If you are a consumer in a jurisdiction where mandatory consumer protection laws apply (including but not limited to the European Union, United Kingdom, or Australia), nothing in these Terms shall limit or exclude your mandatory statutory rights under applicable EU regulations or local consumer protection law. In such cases, the arbitration and class action waiver provisions above shall apply only to the extent permitted by applicable law. EU consumers retain the right to bring claims before the courts of their member state of residence as required by Regulation (EU) No 1215/2012 (Brussels I Recast). Nothing in these Terms affects your rights under the EU Consumer Rights Directive (2011/83/EU) or equivalent national legislation.
Force Majeure
ExploitGrid shall not be liable for any failure or delay in performing its obligations under these Terms where such failure or delay results from events beyond our reasonable control, including but not limited to: natural disasters, war, terrorism, riots, embargoes, acts of civil or military authorities, fire, floods, pandemics, power outages, internet or telecommunications failures, cyberattacks on ExploitGrid's infrastructure, or actions by third-party service providers. During such events, our obligations will be suspended for the duration of the event.
Changes to Terms
We reserve the right to modify these Terms and Conditions at any time. Changes will be effective immediately upon posting on the platform. We will notify users of material changes through email or platform notifications at least fourteen (14) days before the changes take effect. Your continued use of the platform after changes are posted constitutes acceptance of the modified terms. If you do not agree with the updated Terms, you must discontinue use of the platform and may terminate your account.
General Provisions
Severability
If any provision of these Terms and Conditions is found to be unenforceable or invalid by a court of competent jurisdiction, such provision will be modified to the minimum extent necessary to make it enforceable, or if modification is not possible, severed from these Terms. The remaining provisions will continue in full force and effect.
Entire Agreement
These Terms, together with our Privacy Policy and Security Policy, constitute the entire agreement between you and ExploitGrid regarding the use of the platform and supersede all prior or contemporaneous understandings, agreements, representations, and warranties, both written and oral, regarding the platform.
Assignment
You may not assign or transfer your rights or obligations under these Terms without our prior written consent. ExploitGrid may assign its rights and obligations under these Terms without restriction, including in connection with a merger, acquisition, or sale of all or substantially all of its assets. Any attempted assignment in violation of this section is void.
Waiver
No waiver by ExploitGrid of any term or condition set out in these Terms shall be deemed a further or continuing waiver of such term or condition, or a waiver of any other term or condition. Any failure of ExploitGrid to assert a right or provision under these Terms shall not constitute a waiver of such right or provision.
Notices
All notices to ExploitGrid should be sent to [email protected]. Notices to you may be sent to the email address associated with your account. Notices are deemed received when sent by email (upon delivery confirmation) or when posted on the platform.
Questions About These Terms?
If you have any questions about these Terms and Conditions, please contact us:
By using ExploitGrid, you acknowledge that you have read, understood, and agree to be bound by these Terms and Conditions.