Acceptable use

Use AimCorp CTF only for authorised training and assessment. You agree not to:

• attempt to escape a training sandbox or access infrastructure outside the authorised exercise;
• attack other learners, probe accounts outside your workspace, or attempt to access another organisation's data;
• publish mission content, evidence, answers or solution material without written permission; or
• use the workspace to plan or execute activity against systems you do not own or have explicit authorisation to test.

Report suspected sandbox escapes or platform vulnerabilities to the platform security team.

Your account

You are responsible for keeping your credentials secure. Report suspected compromise to your organisation contact and the platform security team. Access may be suspended under the applicable organisation agreement or for a violation of these terms.

The AimCorp CTF challenge-type skill vector uses 16 axes: Web, Cryptography, Binary Exploitation, Smart Contracts, Reverse Engineering, Forensics, General Security, OSINT, AI Security, API Security, Malware Analysis, Incident Response, OT/ICS Security, Mobile Security, Boot2Root, and Space Operations. AimCorp CTF records attempt timestamps and outcomes, tool and command execution events, retries, hint usage, and workspace session metadata. Session replay is available only when enabled for your organisation workspace. Your organisation agreement and administrator control replay access and retention. Contact your programme administrator for the approved workspace policy.

Deleting an account immediately disables access and removes live profile, authentication, and direct identity data. Encrypted backups expire within 30 days. De-identified aggregate solve-time and calibration metrics may be retained and cannot be used to restore the account.

Content and confidentiality

Mission content, scenarios, evidence and platform code are owned by the platform operator and its licensors, and may be confidential. They are provided only for the authorised training programme and may not be redistributed without written permission.

Your responses and profile content remain subject to the applicable organisation agreement. Do not upload material you are not authorised to share.

Service and liability

Service levels, support, liability and dispute-resolution terms are governed by the applicable organisation agreement. These workspace terms do not create a separate consumer subscription or SLA.

Changes to these terms

Material changes will be coordinated through the organisation contact before they take effect. The current version of this page is the workspace terms text.