Acceptable Use Policy and Ethical Hacking Agreement

Last updated: 29 October 2026

Hacker Blueprint teaches offensive security: how attackers break into networks, so that you can find and fix the same weaknesses before they do. Those skills are powerful. This policy sets the rules for using them. It is part of our Terms of Service. By buying from us, joining the Academy, downloading a lab, or taking part in the Community, you accept it.

1. The core rule

You may only apply what you learn from us to systems, networks, accounts and data that you either own or have explicit, written permission to test from someone who has the authority to give it.

Everything else in this policy follows from that rule.

2. What you agree to

You agree that you will:

use our training, notes, scripts and lab environments only for lawful, authorised security work: learning, certification preparation, authorised penetration tests, red team engagements with a signed scope, bug bounty programmes within their published rules, or your own systems;
run our lab environments only on hardware you control, isolated from other networks, as described in the VM Licence and Safety Notice;
comply with all laws that apply to you, including computer misuse, data protection, export control and intellectual property laws, wherever you are and wherever the systems you touch are located;
keep any credentials, keys, exploits or findings from an authorised engagement confidential and handle them as the engagement requires;
stop immediately and tell the system owner if you discover you have gone outside an authorised scope.

3. What you must not do

You must not:

access, scan, probe, exploit, disrupt or damage any computer, network, account, service or data without authorisation, including "just to see if it works";
use any technique, tool or script from our material against another person, organisation, or public service without written permission;
develop, distribute or deploy malware, ransomware, botnets or denial-of-service tooling for use against systems you are not authorised to test;
use the Services to harass, stalk, dox, intimidate or defraud anyone;
use the Services to break the terms of any certification exam, including sharing exam questions, lab details or answers, or seeking them from others;
redistribute, resell or publicly post our paid content or lab environments, or help others gain unauthorised access to them;
attempt to attack, scan or interfere with hackerblueprint.com, our Cloudflare infrastructure, Whop, Buy Me a Coffee, Discord, or any other service we use;
use the Services in a country, or for a person or organisation, where doing so would breach sanctions or export control laws.

4. Legal background

Unauthorised access to computer systems is a crime in almost every country. Examples include the Computer Fraud and Abuse Act in the United States, the Computer Misuse Act 1990 in the United Kingdom (including section 3A on supplying articles for use in offences), section 202c of the German Criminal Code, Directive 2013/40/EU on attacks against information systems across the EU, and equivalent laws elsewhere. Our material is provided for education and for authorised, defensive security work. Possessing security tools for that purpose is lawful in these jurisdictions; using them without authorisation is not. You are responsible for knowing the law where you are.

5. Consequences

If we reasonably believe you have broken this policy we may, without refund:

suspend or permanently end your access to the Academy, Downloads and Community;
remove you from the Discord server;
refuse future purchases;
preserve relevant records and, where we are legally required to or where someone has been harmed, report the matter to law enforcement or the affected party.

We will tell you what happened and why, unless doing so would compromise an investigation or is prohibited by law.

6. Reporting misuse

If you become aware that someone is using our material against systems they are not authorised to test, or is sharing our paid content, please email hacking.academy@protonmail.com. We take reports seriously and keep the identity of reporters confidential where we can.

7. Your acknowledgement

By using the Services you confirm that you have read and understood this policy, that you are at least 18 years old, and that you will use what you learn responsibly and lawfully.