Terms of Service

1. Who you are dealing with

These terms are a contract between you and pwnd.rs, Street 1, 1234 AB City (“we”, “us”), for the use of pwnd.rs (the “Service”). Our full details are on the imprint. By creating an account you accept these terms and our Privacy Policy.

2. The Service

pwnd.rs is a hands-on security training platform. Depending on your plan it gives you:

• Attack labs: story-world exercises in which you break into throwaway target systems that we provision for you, in isolation, for the duration of the exercise.
• Fix labs: you repair the vulnerable code and our sandboxed checks verify the fix.
• Live sessions: instructor-led events with teams, a leaderboard and session-scoped access to the labs used in the event.
• Certificates: a certificate of completion for a course, with a public verification page at /cert/<id>.

Targets are disposable. We may reset, replace or shut them down at any time; your progress and scores are saved, running instances are not. We continuously change labs, courses and checks, and may retire content.

A certificate confirms that the named account completed every lab of a course on pwnd.rs. It is not an accredited qualification and we make no promise about how third parties will value it.

3. Accounts and age

You must be at least 16 years old to use the Service. Instructors and team owners may not seat anyone younger.

One account per person, with your real name and a working email address. Keep your password to yourself; everything done with your account counts as done by you. Tell us at hello@pwnd.rs as soon as you suspect misuse. You can review and revoke your sessions under Security & devices.

4. Acceptable use

The Service teaches offensive techniques. You may use them only against the targets we provide to you, inside the lab, while the exercise runs. That is the entire scope of the authorisation you get from us. In particular you must not:

• attack, probe or scan any system that is not a lab target assigned to you: not third-party systems, not other participants’ targets, not the pwnd.rs platform itself, not our hosting provider;
• use a lab target as a jump host, proxy or staging point for anything outside the lab, or move data in or out of it that does not belong to the exercise;
• try to break out of a sandbox or target isolation, or interfere with the checks, scoring or leaderboard;
• publish or sell flags, captures, solutions or lab content, or automate completion for someone else;
• share your account, scrape the Service, or put excessive load on it.

Using what you learn here against systems you are not authorised to test is a crime in most countries, and nothing in these terms authorises it. Abuse ends your account immediately, without refund of the current period, and we may preserve evidence and report it to the authorities. Lab submissions are stored for a limited time precisely so we can investigate.

5. Content and intellectual property

Labs, story worlds, lesson texts, checks, target images and certificates are ours or licensed to us. You get a personal, non-transferable licence to use them for your own training (or, on a Teams plan, for the training of the seated members) for as long as your plan allows. You may not copy, redistribute or create derivative training from them.

What you submit in a lab (code, fixes, write-ups, course reviews) stays yours. You grant us a licence to run it, store it, show it to instructors, and use it in anonymised form to improve labs and detect cheating. Feedback and suggestions may be used freely.

The name pwnd.rs and the logo are our trademarks. Do not use them to suggest an endorsement.

6. Plans, prices and billing

Prices are in euro and include VAT at the rate of your billing country. Businesses in another EU member state with a valid VAT number are invoiced without VAT under the reverse-charge mechanism; you then account for the VAT yourself. Payments are processed by Mollie; your card details never reach us. Invoices are emailed to you.

Launch period. Billing starts on Nov 1, 2026. If you subscribe before that date, checkout only charges €0.01 to verify your card and set up the payment mandate; your plan is free until Nov 1, 2026, and the first real charge is taken on that day.

Automatic renewal. Subscriptions renew automatically at the end of each period (one month or twelve months) at the then-current price until you cancel. You can cancel at any time from Plan & billing; the cancellation takes effect at the end of the period you have paid for, and you keep access until then. We do not refund unused time, except where section 7 or mandatory law says otherwise. Plan changes are prorated as shown at the moment you confirm them.

Failed payments. If a renewal charge fails we retry and email you. After a short grace period access is suspended until payment succeeds.

Price changes. We may change prices for the next period by emailing you at least 30 days before the renewal they apply to. If you do not want the new price, cancel before that renewal; staying subscribed means you accept it.

7. Right of withdrawal (EU consumers)

If you buy as a consumer in the EU you may withdraw from a purchase within 14 days without giving a reason, by emailing hello@pwnd.rs from your account address. Nothing more formal is needed.

Because the Service is digital content delivered immediately, the checkout asks you to confirm that you want access right away and that you understand you thereby lose the right of withdrawal once access starts. If you tick that box, there is no 14-day refund. If you buy during the launch period, nothing beyond the €0.01 verification is charged until Nov 1, 2026, so until then withdrawing simply means cancelling.

Outside the statutory right, refunds are at our discretion. Ask; we are reasonable people.

8. Teams and seats

A pwnd Teams subscription is bought by a team owner for a number of seats. The owner, or the business the owner acts for, is our contracting party and is responsible for the subscription, for the conduct of every seated member under section 4, and for having the right to invite them. Members get Pro-level access for as long as they hold a seat.

The owner can share invite links, set an auto-join email domain, add or remove seats and remove members at any time; removing a member ends their Pro access immediately. The owner sees the team’s members and their training progress. Members keep their own accounts and their own data when they leave the team.

9. Availability and liability

The Service is provided “as is”. We make reasonable efforts to keep it running, patched and backed up, but we do not guarantee uninterrupted availability, that a target will start on the first try, or that a lab is free of errors. Maintenance may happen without notice. Labs deliberately contain vulnerable software; it runs isolated from you and from us, and you must not rely on it for anything but the exercise.

To the extent the law allows, our total liability for all claims arising out of the Service in any twelve-month period is limited to the amount you paid us in those twelve months, and we are not liable for indirect damage, lost profits or lost data. This limit does not apply to damage caused by our intent or gross negligence, to death or personal injury, or to anything that cannot be limited under the mandatory law of your country of residence.

You will compensate us for claims by third parties that result from your breach of section 4.

10. Termination

You can delete your account at any time from your account page. That cancels any personal subscription (no refund of the running period) and permanently removes your progress, captures, certificates and reviews, including the public verification pages of your certificates. Export your data first if you want to keep it.

We may suspend or terminate your account with immediate effect if you breach these terms, in particular section 4, if a payment remains outstanding after the grace period, or if we are required to by law. We may also discontinue the Service as a whole with at least 30 days’ notice, refunding any prepaid period beyond the shutdown date.

Sections 4, 5, 9 and 12 survive termination.

11. Changes to these terms

We may update these terms. For changes that matter to you we give at least 30 days’ notice by email; the date at the top tells you when the current version took effect. If you keep using the Service after a change takes effect, you accept it; if you do not agree, cancel and delete your account before then.

12. Governing law and disputes

These terms are governed by the laws of the Netherlands. If you are a consumer, you also keep the protection of the mandatory consumer law of the country where you live, and you may bring a claim there. Otherwise the courts of our registered seat have exclusive jurisdiction.

Before going to court, write to us; most problems are a misunderstanding we can fix in a day.

13. Contact

pwnd.rs, Street 1, 1234 AB City. Email hello@pwnd.rs. Privacy questions go to privacy@pwnd.rs.