Acceptable use

Use LevelUpCTF only for authorised training and assessment. You agree not to:

• attempt to escape a training sandbox or access infrastructure outside the authorised exercise;
• attack other learners, probe accounts outside your workspace, or attempt to access another organisation's data;
• publish mission content, evidence, answers or solution material without written permission; or
• use the workspace to plan or execute activity against systems you do not own or have explicit authorisation to test.

Report suspected sandbox escapes or platform vulnerabilities to the platform security team.

Your account

You are responsible for keeping your credentials secure. Report suspected compromise to your organisation contact and the platform security team. Access may be suspended under the applicable organisation agreement or for a violation of these terms.

The LevelUpCTF challenge-type skill vector uses 15 axes: Web, Cryptography, Binary Exploitation, Smart Contracts, Reverse Engineering, Forensics, General Security, OSINT, AI Security, API Security, Malware Analysis, Incident Response, OT/ICS Security, Mobile Security, and Boot2Root. LevelUpCTF records attempt timestamps and outcomes, tool and command execution events, retries, hint usage, and sandbox session metadata. Session replay is recorded where the selected service or workspace enables it. Free-tier telemetry is mandatory because it supports difficulty calibration, fair matchmaking, abuse prevention, and aggregate platform reliability.

Deleting an account immediately disables access and removes live profile, authentication, and direct identity data. Encrypted backups expire within 30 days. De-identified aggregate solve-time and calibration metrics may be retained and cannot be used to restore the account.

Content and confidentiality

Mission content, scenarios, evidence and platform code are owned by the platform operator and its licensors, and may be confidential. They are provided only for the authorised training programme and may not be redistributed without written permission.

Your responses and profile content remain subject to the applicable organisation agreement. Do not upload material you are not authorised to share.

Service and liability

Service levels, support, liability and dispute-resolution terms are governed by the applicable organisation agreement. These workspace terms do not create a separate consumer subscription or SLA.

Changes to these terms

Material changes will be coordinated through the organisation contact before they take effect. The current version of this page is the workspace terms text.