Ethics & Responsible Use

Our Mission

To provide comprehensive cybersecurity training to help professionals, students, and enthusiasts develop skills to defend systems, identify vulnerabilities, and improve security postures—always within legal and ethical boundaries.

Code of Conduct

All users of CyberSec Lounge are expected to adhere to the following principles:

• Authorization First: Only test systems you own or have explicit written permission to test.
• Legal Compliance: Understand and comply with all applicable laws including the Computer Fraud and Abuse Act (CFAA) and similar international legislation.
• No Harm: Never cause damage, disruption, or data loss to systems or networks.
• Responsible Disclosure: Report vulnerabilities responsibly to affected parties before public disclosure.
• Privacy Respect: Protect the confidentiality of any information discovered during authorized testing.
• Professional Integrity: Use knowledge gained to improve security, not to exploit or harm others.

Authorized Testing Only

The techniques and tools covered in our training materials are powerful and must only be used in authorized contexts:

• Your own personal systems and home lab environments
• Systems where you have explicit written authorization (penetration testing contracts)
• Designated training platforms (HackTheBox, TryHackMe, OverTheWire, etc.)
• Bug bounty programs with clear scopes and rules of engagement
• Educational lab environments provided by schools or employers

What is NOT Acceptable

The following activities are strictly prohibited and may result in criminal prosecution:

• Unauthorized access to computer systems, networks, or data
• Testing systems without explicit written permission
• Distributed Denial of Service (DDoS) attacks
• Data theft, modification, or destruction
• Distributing malware or malicious tools
• Using techniques learned here for illegal purposes

Legal Framework

Cybersecurity professionals must operate within legal boundaries. Key legislation includes:

• Computer Fraud and Abuse Act (CFAA) - United States
• Computer Misuse Act - United Kingdom
• NIS2 Directive - EU Member States
• Council of Europe Convention on Cybercrime - International

Familiarize yourself with the laws applicable in your jurisdiction before engaging in any security testing activities.

Educational Purpose

This platform exists solely for educational purposes. Our goal is to:

• Train the next generation of cybersecurity defenders
• Help organizations understand their security vulnerabilities
• Promote secure software development practices
• Foster a community of ethical security professionals
• Advance the field of information security through knowledge sharing

Instructor Commitment

Our instructors are committed to:

• Presenting techniques in an educational context with defensive considerations
• Emphasizing legal and ethical implications of security testing
• Providing guidance on responsible vulnerability disclosure
• Encouraging defensive mindset and security awareness
• Supporting authorized testing and certification preparation

Reporting Concerns

If you become aware of any misuse of training materials or unethical behavior, please contact us immediately via Discord. We take all reports seriously and will investigate appropriately.

Your Responsibility

By accessing and using the training materials on CyberSec Lounge, you acknowledge that:

• You understand the legal and ethical implications of cybersecurity testing
• You will only use these skills for authorized, legal purposes
• You accept full responsibility for your actions
• You will help maintain the integrity of the cybersecurity community

Content & Copyright

CyberSec Lounge is maintained by Davy Rogers and draws on practical experience in cybersecurity, application security, and authorized testing. While we strive for accuracy, if you notice any errors, outdated information, or areas that need improvement, please share your feedback with our community via Discord. Your contributions help us maintain high-quality educational content.

Licensing

All content on CyberSec Lounge is released under the Creative Commons Attribution-ShareAlike 4.0 International License. You are free to share and adapt the material for any purpose, even commercially, as long as you provide appropriate attribution and distribute your contributions under the same license.

Source Attribution & Copyright Concerns

We have made every effort to create original educational content and provide appropriate attribution where third-party ideas, tools, or references are discussed. If you believe any content may require source attribution or have copyright concerns you wish to discuss, please contact us via Discord. We welcome dialogue about attribution and will work with you to address any concerns. This is not an admission of any infringement, but rather an invitation for open communication.