
Legal
The terms that govern your use of the SecureFlag platform and services.
These Terms of Service (the “Terms”) are entered into between you and SecureFlag Limited, a company registered in England and Wales under company number 12368322 with a registered address of C/O Russell-Cooke LLP (File No. 00179010.1), 2 Putney Hill, London, England, SW15 6AB (“SecureFlag”, “we”, “us”, or “our”), and govern your access to and use of the SecureFlag websites, platform, applications, content, and related services (together, the “Services”).
By accessing or using the Services, creating an account, or clicking to accept these Terms, you agree to be bound by these Terms and by our Privacy Policy, which is incorporated by reference. If you do not agree to these Terms, you must not access or use the Services. If you are using the Services on behalf of an organisation, you represent that you have authority to bind that organisation to these Terms.
To access certain features of the Services you must register for an Account. You agree to provide accurate, current, and complete information and to keep it up to date. You are responsible for safeguarding your login credentials and for all activity that occurs under your Account.
You must notify us promptly at support@secureflag.com of any unauthorised use of your Account or any other breach of security. We are not liable for any loss or damage arising from your failure to protect your credentials.
Subject to your compliance with these Terms and, where applicable, payment of the relevant fees, we grant you a limited, non-exclusive, non-transferable, non-sublicensable, revocable licence to access and use the Services for your internal training and secure development purposes.
The Services are intended for lawful, educational, and professional use only. Exercises, vulnerable applications, and other materials provided through the Services are for training within the sandboxed environments we make available and must not be used to attack, test, or exploit any system without proper authorisation.
You agree that you will not, and will not permit any third party to:
We may suspend or terminate access to the Services if we reasonably believe you have breached this section.
You retain ownership of any User Content you submit through the Services. You grant us a worldwide, non-exclusive, royalty-free licence to host, store, process, and display your User Content solely to the extent necessary to provide and improve the Services.
You are solely responsible for your User Content and represent that you have all rights necessary to submit it and that it does not infringe the rights of any third party.
The Services and all Content, including software, exercises, text, graphics, logos, and trademarks, are owned by or licensed to SecureFlag and are protected by intellectual property laws. Except for the limited licence expressly granted in these Terms, no rights are granted to you in respect of the Services or Content.
The “SecureFlag” name and logo are trademarks of SecureFlag Limited. You may not use them without our prior written permission.
Certain Services are provided on a paid Subscription basis. Applicable fees, billing frequency, and Subscription terms are set out in the relevant order form, plan description, or agreement between you (or your organisation) and SecureFlag.
Unless otherwise agreed in writing, fees are non-refundable, are exclusive of applicable taxes, and Subscriptions may renew automatically for successive terms. We may change our fees on prospective notice for future Subscription terms.
The Services may integrate with or contain links to third-party services and websites that we do not control, such as cloud infrastructure and integration providers. Your use of any third-party service is governed by that provider’s own terms and privacy policies, and we are not responsible for their content, products, or practices.
Each party may have access to the other party’s confidential information in connection with the Services. Each party agrees to use the other’s confidential information only to perform its obligations under these Terms and to protect it using at least the same degree of care it uses for its own confidential information of a similar nature.
The Services and Content are provided “as is” and “as available”, without warranties of any kind, whether express, implied, or statutory, including any implied warranties of merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Services will be uninterrupted, error-free, or secure, or that any training will guarantee any particular security outcome.
To the maximum extent permitted by law, SecureFlag will not be liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss of profits, revenue, data, or goodwill arising out of or in connection with your use of the Services.
To the maximum extent permitted by law, our total aggregate liability arising out of or relating to these Terms or the Services will not exceed the amounts paid by you (or your organisation) for the Services in the twelve (12) months preceding the event giving rise to the liability. Nothing in these Terms excludes or limits liability that cannot be excluded or limited under applicable law.
You agree to indemnify and hold harmless SecureFlag and its officers, employees, and agents from and against any claims, liabilities, damages, losses, and expenses, including reasonable legal fees, arising out of or in any way connected with your use of the Services, your User Content, or your breach of these Terms.
You may stop using the Services at any time. We may suspend or terminate your access to the Services, with or without notice, if you breach these Terms, if required by law, or if we discontinue the Services. Upon termination, the licences granted to you will end and you must cease all use of the Services.
Any provisions that by their nature should survive termination — including intellectual property, disclaimers, limitation of liability, indemnification, and governing law — will survive.
These Terms and any dispute or claim arising out of or in connection with them are governed by and construed in accordance with the laws of England and Wales. The courts of England and Wales will have exclusive jurisdiction, save that we may seek injunctive relief in any jurisdiction.
We may update these Terms from time to time. Changes are effective when posted on this page. Your continued use of the Services after changes are posted constitutes your acceptance of the updated Terms. We recommend reviewing this page periodically.
If you have any questions about these Terms, please contact us via email at support@secureflag.com or by post to SecureFlag Limited, C/O Russell-Cooke LLP (File No. 00179010.2), 2 Putney Hill, London, England, SW15 6AB.
Terms of Service — Last updated August 2026