Terms of Service

These Terms of Service ("Terms") constitute a legally binding agreement between you ("User," "you," or "your") and Xalgorix ("Company," "we," "us," or "our"), the operator of BountyLabs. By creating an account, accessing, or using the BountyLabs platform in any capacity, you acknowledge that you have read, understood, and agree to be bound by these Terms and our Privacy Policy. If you do not agree to these Terms, you must immediately cease all use of the platform.

BountyLabs is a web-based educational platform designed to teach bug bounty methodology, vulnerability identification, and responsible security research practices. The platform provides structured learning paths, interactive labs with sandboxed environments, daily challenges, quizzes, progress tracking with XP and streaks, AI-powered hints and feedback, and tools for documenting security findings.

All lab environments, challenges, and exercises are contained within isolated sandbox environments provided for educational purposes. BountyLabs does not provide access to real-world targets, and all training scenarios are simulated or use intentionally vulnerable applications designed for legal security testing.

You agree to use the knowledge and skills acquired through BountyLabs only in legal, ethical, and authorized contexts — such as authorized penetration testing engagements, bug bounty programs with explicit scope, CTF competitions, and your own isolated lab environments. The techniques taught on this platform are intended to develop defensive security awareness and responsible research capabilities.

Violation of these prohibitions may result in immediate account termination, forfeiture of all progress and data, and potential legal liability. We reserve the right to report illegal activity to the appropriate law enforcement authorities.

Accounts are created and managed through Firebase Authentication. You are responsible for maintaining the confidentiality of your login credentials and for all activities that occur under your account. You agree to immediately notify us of any unauthorized use of your account or any other security breach.

You must provide accurate and complete information when creating your account. You are responsible for keeping your account information up to date. We reserve the right to suspend or terminate accounts that contain false or misleading information.

One person or entity may not maintain more than one free account. Premium subscription terms are governed by the applicable billing agreement processed through Dodo Payments.

All content on BountyLabs — including but not limited to text, graphics, logos, icons, images, lab designs, challenge configurations, learning path curricula, software, and documentation — is the property of Xalgorix or its content suppliers and is protected by applicable intellectual property laws. You may not reproduce, distribute, modify, create derivative works of, publicly display, or commercially exploit any platform content without our prior written consent.

You retain ownership of any notes, findings, wordlists, or other content you create within the platform. By using BountyLabs, you grant us a limited, non-exclusive license to store, process, and display your content solely for the purpose of providing and improving the service.

You are solely responsible for verifying the accuracy and applicability of any AI-generated content before applying it in real-world scenarios. Xalgorix shall not be liable for any damages or consequences arising from reliance on AI-generated hints, suggestions, or code. Always exercise professional judgment and validate findings through independent research and testing.

To the maximum extent permitted by applicable law, BountyLabs and Xalgorix, including their officers, directors, employees, agents, and affiliates, shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, data, use, goodwill, or other intangible losses arising from or related to your use of or inability to use the platform.

We do not warrant that the platform will be uninterrupted, error-free, or secure, or that any defects will be corrected. The platform is provided on an "as-is" and "as-available" basis without warranties of any kind, whether express, implied, or statutory, including but not limited to implied warranties of merchantability, fitness for a particular purpose, and non-infringement.

In no event shall our total aggregate liability exceed the amount you have paid to us in the twelve (12) months preceding the claim, or one hundred dollars ($100.00), whichever is greater. Some jurisdictions do not allow the exclusion or limitation of certain damages, so some of the above limitations may not apply to you.

We may revise these Terms from time to time at our sole discretion. When material changes are made, we will notify you via an in-app notification or by email to the address associated with your account. The "Last updated" date at the top of this page will reflect the most recent revision. Your continued use of BountyLabs after any changes constitutes your acceptance of the revised Terms. If you do not agree to the modified Terms, you must discontinue your use of the platform and may request deletion of your account.