Terms of Service

• You sign in with a Google account. Use one account per person. Duplicate accounts may be suspended.
• Give accurate registration details. The name on your certificate comes from them.
• You are responsible for what happens on your account, so don't share it with anyone.
• Organizers may change or remove usernames and team names that are offensive or misleading.

Taking part in the competition means following the Rules, which cover flags, scoring, hints, what you may attack and how the rules are enforced. Organizers decide on scores, rankings and rule violations.

• Only attack the targets a challenge gives you. Never attack, overload or try to break into this platform, its servers or other players.
• Don't share flags, answers or accounts, and don't automate flag guessing.
• Don't post or link anything illegal, hateful or harmful.
• If you find a vulnerability in the platform, report it to us instead of exploiting it.

Challenges and lessons teach offensive security techniques for authorized, educational use. Only test systems you own or have explicit permission to test. Using these techniques against other systems may be illegal, and you are responsible for what you do with them.

• Challenges, challenge files, lessons and the site's design belong to ZeroDay Alliance or the challenge authors. You may use them for your own learning, but don't copy or republish them without permission.
• Challenge files can contain deliberately vulnerable code or suspicious-looking samples. Open them in a safe environment, such as a virtual machine.

• Finish every task in the CTF Learning Path while signed in and you get a certificate. It shows that you completed the path's practice tasks. It is not an academic or professional qualification.
• Every certificate has a unique ID and a public page. Anyone with its link or QR code can open that page to check it is genuine.
• We may withdraw a certificate that was earned dishonestly, for example through someone else's account.

Organizers may suspend or delete accounts that break these terms or the rules. You can ask us to delete your account at any time by emailing hello@zerodayalliance.com.

We may change, pause or end the site, competitions, challenges or lessons at any time, and we may adjust scores when that is needed to keep the competition fair.

The site and everything on it are provided "as is", without warranties of any kind. As far as the law allows, ZeroDay Alliance is not liable for indirect losses, lost data, or harm that results from using challenge files or the techniques taught here.

When we change these terms, we update the date at the top of this page. Using the site after a change means you accept the new terms.

Questions about these terms? Email hello@zerodayalliance.com.