Terms of Service

By accessing or using the bugasm platform (“Service”), including all associated websites, APIs, lab environments, and related services operated by bugasm (“Company,” “we,” “us,” or “our”), you agree to be bound by these Terms of Service (“Terms”). If you do not agree, do not use the Service.

If you are using the Service on behalf of an organization, you represent and warrant that you have the authority to bind that organization to these Terms.

bugasm is a cybersecurity training platform that provides hands-on labs focused on AI security, including but not limited to large language model (LLM) exploitation, AI agent security, and MCP server hardening. The Service includes:

• Ephemeral, sandboxed lab environments provisioned on demand
• AI-graded challenge submissions and automated scoring
• Flag-based and AI-judged challenge verification
• Structured learning paths and completion certificates
• Author tools for creating and publishing lab content
• Enterprise features including team management, assignments, and reporting

To use certain features you must create an account. You agree to provide accurate, current, and complete information during registration and to keep your account information up to date.

You are responsible for safeguarding your account credentials and for all activity that occurs under your account. You must notify us immediately at security@bugasm.com if you suspect unauthorized access.

We reserve the right to suspend or terminate accounts that violate these Terms or that have been inactive for an extended period, with reasonable notice where practicable.

bugasm labs run in isolated, ephemeral sandbox environments. You may only interact with systems and targets explicitly provided within your assigned sandbox. Specifically, you agree not to:

• Attempt to access, attack, probe, or exploit any system, network, or service outside the boundaries of your assigned lab sandbox
• Attempt to escape the sandbox, bypass isolation controls, or access the underlying host infrastructure
• Use the platform to develop, test, or distribute malware, exploits, or attack tooling intended for use against unauthorized targets
• Exfiltrate data from lab environments for purposes unrelated to completing the lab exercise
• Share, publish, or sell flags, solutions, or scoring bypass techniques that undermine the integrity of the platform
• Interfere with other users’ lab sessions, submissions, or accounts
• Use automated systems (bots, scrapers, or scripts) to interact with the Service in a manner that degrades performance or circumvents rate limits
• Reverse-engineer AI scoring models, submission endpoints, or grading rubrics to fabricate passing scores
• Violate any applicable law, regulation, or third-party right

We monitor lab environments for policy violations. Violation of this section may result in immediate account suspension or termination without prior notice.

Lab sandbox environments are ephemeral and are provisioned solely for the duration of the lab exercise. You acknowledge that:

• Sandbox environments may be destroyed at any time upon lab completion, timeout, or at our discretion
• You have no expectation of data persistence within sandbox environments beyond the active lab session
• Resource limits (CPU, memory, network, storage, session duration) are enforced and may vary by plan tier
• We may collect telemetry, logs, and submission data from lab sessions for platform improvement, security monitoring, and scoring integrity

Certain labs use AI-based scoring (including large language model judges) to evaluate submissions. You acknowledge that:

• AI grading is probabilistic and may not always produce identical results for the same input
• Scores and feedback generated by AI judges are provided “as is” and do not constitute professional certification or accreditation
• We reserve the right to adjust scores, invalidate submissions, or recalibrate grading criteria at any time
• Attempts to manipulate AI judges through prompt injection or other adversarial techniques directed at the scoring system itself (as opposed to the lab target) are a violation of these Terms

The Service, including all lab content, platform code, scoring systems, learning paths, branding, and documentation, is owned by bugasm or its licensors and is protected by intellectual property laws. These Terms do not grant you any ownership rights in the Service.

Your content. If you create and publish lab content through the Author Studio, you retain ownership of the original content you create. By publishing content on the platform, you grant bugasm a worldwide, non-exclusive, royalty-free license to host, display, distribute, and make available your content to other users of the Service. You may remove your published content at any time, which will terminate this license prospectively.

Feedback. Any feedback, suggestions, or ideas you provide about the Service may be used by us without obligation or compensation to you.

Certain features of the Service require a paid subscription. Pricing, plan tiers, and included resources are described on our pricing page. By subscribing to a paid plan, you agree to pay all applicable fees.

We may change pricing with at least 30 days’ notice. Continued use of a paid plan after a price change constitutes acceptance of the new pricing. Refunds are handled in accordance with our refund policy, if any, published on our website.

Your use of the Service is subject to our Privacy Policy, which describes how we collect, use, and share your information. By using the Service, you consent to the practices described in the Privacy Policy.

The Service is provided “as is” and “as available” without warranties of any kind, whether express, implied, or statutory, including but not limited to warranties of merchantability, fitness for a particular purpose, non-infringement, or uninterrupted availability.

We do not warrant that lab environments will be free of errors, that AI-graded feedback will be accurate or complete, or that the Service will meet your specific requirements.

To the maximum extent permitted by applicable law, bugasm and its officers, directors, employees, and agents shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits, data, or goodwill, arising out of or in connection with your use of the Service, regardless of the theory of liability.

Our total aggregate liability for all claims arising out of or relating to these Terms or the Service shall not exceed the amount you paid us in the twelve (12) months preceding the claim, or one hundred US dollars (US$100), whichever is greater.

You agree to indemnify, defend, and hold harmless bugasm and its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or related to your use of the Service, your violation of these Terms, or your violation of any applicable law or third-party right.

You may stop using the Service and close your account at any time. We may suspend or terminate your access to the Service at any time, with or without cause, including for violation of these Terms.

Upon termination, your right to use the Service ceases immediately. Any active lab sessions will be terminated and sandbox environments destroyed. Sections that by their nature should survive termination (including intellectual property, limitation of liability, indemnification, and governing law) will continue to apply.

We may update these Terms from time to time. If we make material changes, we will notify you by posting the updated Terms on the Service and updating the “Last updated” date. For material changes, we will provide at least 30 days’ notice before the new terms take effect.

Your continued use of the Service after the effective date of updated Terms constitutes acceptance. If you do not agree to the updated Terms, you must stop using the Service.

These Terms are governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to conflict-of-law principles. Any dispute arising under these Terms shall be resolved exclusively in the state or federal courts located in Delaware.

These Terms constitute the entire agreement between you and bugasm regarding the Service and supersede all prior agreements. If any provision is found unenforceable, the remaining provisions continue in full effect. Our failure to enforce any right or provision does not constitute a waiver. You may not assign or transfer these Terms without our prior written consent. We may assign these Terms freely.

If you have questions about these Terms, contact us at legal@bugasm.com.