Terms of Service — WebVerse Pro

1.Acceptance of Terms

These Terms of Service (the “Terms”) govern your use of WebVerse Pro (the “Service”), operated by WebVerse Labs (“WebVerse,” “we,” “us,” or “our”). By creating an account, signing in with Google, or otherwise accessing or using any part of the Service, you agree to be bound by these Terms and by our Privacy Policy, which is incorporated by reference. If you do not agree, do not use the Service.

We may update these Terms from time to time as described in Section 14. The “Last updated” date at the top of this page reflects the date of the most recent revision.

2.Eligibility

To use the Service you must:

be at least 16 years old (or older where the age of digital consent in your jurisdiction is higher);
have the legal capacity to enter into a binding contract;
not appear on any sanctions list maintained by the United States, Canada, the European Union, the United Kingdom, or the United Nations;
not be located in a jurisdiction subject to a comprehensive embargo under United States export controls;
not have been previously suspended or removed from the Service.

By creating an account, you represent and warrant that you meet each of these requirements. If we discover that you do not, we may suspend or terminate your account at our discretion and without refund.

3.Account Registration

3.1Accuracy of information

When you sign up, you agree to provide accurate and current information — in particular, an email address you actually control. You agree to keep that information up to date. We may suspend accounts that we determine are based on materially false information.

3.2Account security

You are responsible for maintaining the confidentiality of your password (if you use email and password sign-in) and the security of any device that holds an active session. Do not share your credentials. If you suspect that your account has been accessed without your permission, change your password immediately and email [email protected]. You are responsible for all activity that occurs under your account, except to the extent caused by our failure to comply with these Terms.

3.3One account per person

You may operate one account per person. Automated account creation, scripted signups, and the use of disposable or burner email addresses to create multiple accounts are prohibited. We may merge or delete duplicate accounts that we identify.

4.Acceptable Use Policy

WebVerse exists to teach offensive web security in a safe, controlled environment. The Acceptable Use Policy below is what makes that environment safe. Violation is grounds for immediate suspension or permanent termination of your account, and may be reported to law enforcement or to your internet service provider where serious enough.

4.1Sandbox boundaries

Lab and challenge environments are sandboxes. Your authorized attack surface is the lab or challenge container assigned to your account, and only that. The following are not part of the sandbox and you must not attack them:

The underlying servers, networks, or operating systems that host the platform;
Other users’ VPN sessions, lab environments, dashboard sessions, or accounts;
The WebVerse API outside the bounds of normal authenticated use;
The dashboard application;
The marketing site and any of its forms;
Any internal systems, services, or infrastructure that support the platform;
Any third-party service we rely on, or any other third party.

Probing, scanning, or fuzzing any of the above outside an explicitly invited program is a material breach of these Terms and may also be a violation of computer-misuse statutes wherever the affected system is located.

4.2No real-world attacks

Your VPN connection must not be used to source attacks against systems you are not authorized to attack. Specifically, you must not use the Service to:

Send unsolicited traffic, scan, exploit, or otherwise attack any third-party system;
Participate in or amplify a denial-of-service attack;
Conduct phishing, credential stuffing, or fraud against third parties;
Distribute malware or operate command-and-control infrastructure.

We monitor for outbound abuse and we cooperate with abuse complaints from third parties. Any account found to be sourcing real-world attacks through our network will be permanently banned. We reserve the right to share connection metadata, account information, and timing with affected parties and with law enforcement when we have a good-faith basis to do so.

Flag values are unique per account. Do not share flag values with other users. Do not publish writeups, walkthroughs, or videos that reveal flag values, that bypass the intended learning by giving away the answer wholesale, or that reproduce verbatim the contents of protected lab files. Generic technique writeups that explain the underlying vulnerability class without revealing flag content or detailed answer keys are welcome and encouraged.

4.4Reverse engineering

You may not reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code of any part of the Service for the purpose of building or assisting a competing product. Security research that follows the responsible-disclosure process described in Section 7 is welcome and is not considered a breach of this provision.

4.5No resource abuse

Do not abuse the platform’s compute, memory, storage, or bandwidth. Specifically:

Do not run cryptominers, distributed compute jobs, or any workload unrelated to the intended use of a lab;
Do not use lab containers as long-lived hosts for personal services;
Do not attempt to break out of the resource limits we impose on lab containers;
Do not script the platform to start, stop, or interact with labs at a frequency that a human user would not.

4.6No spam, harassment, or illegal content

Do not use the Service or any user-facing surface (including chosen username, profile avatar, future comment or writeup features) to harass, threaten, defame, or post unlawful content. Do not impersonate WebVerse staff or other users.

4.7No automated scraping

Do not scrape, mirror, or systematically download lab or challenge content beyond what is necessary to solve the lab or challenge in front of you. Do not crawl the dashboard or API outside the bounds of normal use. We may rate-limit, throttle, or block access that we determine to be automated and unrelated to legitimate use.

5.Subscription, Billing, and Refunds

5.1Plans

We offer a Free tier with a curated subset of labs and challenges, and a Pro tier billed monthly or annually that unlocks the full catalog and any Pro-only features. Current pricing is shown on our pricing page in United States dollars (USD) and is the canonical source of truth.

5.2Auto-renewal and cancellation

Pro subscriptions auto-renew at the end of each billing period until you cancel. You can cancel at any time from your dashboard settings; your access continues until the end of the current paid period and does not renew thereafter. If you cancel mid-period, you are not charged again, and you do not lose access to the Pro features you have already paid for during that period.

5.3Refunds

We offer a seven (7) day refund on the very first Pro subscription you purchase, no questions asked. Email [email protected] within seven days of the original charge and we will refund it.

Subsequent renewals, additional purchases, and partial periods are non-refundable, except where required by applicable consumer-protection law. If we materially change a feature you relied on, we may at our discretion grant a pro-rata refund — we are reasonable people; please ask.

5.4Price changes

We may change subscription pricing in the future. Changes apply only to renewals occurring after the change takes effect. We will notify active subscribers by email at least thirty (30) days before any price increase takes effect. If you do not accept the new price, you can cancel before the renewal date and your subscription will end at the end of the current period at the existing price.

5.5Taxes

Pricing displayed on the pricing page is exclusive of taxes. Where we are required to collect tax (sales tax, GST/HST, VAT, etc.), the applicable amount is calculated and added at checkout by Stripe Tax based on your billing address. You are responsible for any taxes that we are not required to collect from you directly.

6.Intellectual Property

6.1Service IP

The Service, including all software, lab and challenge designs, fictional company branding, documentation, marketing copy, logos, and infrastructure, is owned by WebVerse Labs or its licensors and is protected by copyright, trademark, and other intellectual-property laws. These Terms grant you a personal, non-exclusive, non-transferable, revocable license to use the Service in accordance with these Terms. No other rights are granted.

6.2User content

When you submit content to the Service — for example, a writeup, comment, profile bio, or solution — you retain ownership. You grant WebVerse a worldwide, royalty-free, non-exclusive license to host, display, reproduce, and distribute that content within the Service for the purpose of operating and promoting the Service. You can revoke this license at any time by deleting the content (or by deleting your account, which deletes the content with it), subject to a reasonable processing window for backups.

You represent and warrant that your content does not infringe the intellectual-property or privacy rights of any third party, and that you have the right to grant the license in the previous paragraph.

6.3Open-source notices

The Service uses open-source software. Each open-source component remains subject to its own license. A list of major dependencies and their licenses is available on request from [email protected].

7.Security Research and Responsible Disclosure

We welcome reports from security researchers acting in good faith. If you believe you have discovered a security vulnerability in any part of the Service that is not a deliberately inserted lab or challenge bug, please email [email protected] with:

A description of the vulnerability;
Steps to reproduce it, ideally on a non-production-impacting test path;
Your assessment of the impact;
Any constraints we should know about regarding disclosure timing.

We will acknowledge receipt within five business days. We commit to investigating, to keeping you informed of progress, and to crediting you in any public disclosure we make if you wish.

For research conducted in good faith and within the bounds of this section, we will not pursue legal action against you, and we will not ask any third party or law enforcement agency to do so on our behalf. Good faith means: no exfiltration of data belonging to other users, no destruction of data, no service-disrupting attacks, no social-engineering of WebVerse staff or contractors, and a 90-day disclosure window measured from your initial report (or sooner by mutual agreement).

8.Account Suspension and Termination

8.1By you

You can delete your account at any time from the dashboard settings. Deletion is irreversible. Your data is removed within 30 days, except for backups that are overwritten on a 90-day cycle and for billing records that Stripe retains under its own legal obligations.

8.2By us

We may suspend or terminate your account, with or without notice, if we determine in good faith that:

You have violated these Terms or the Acceptable Use Policy;
You have committed fraud, including chargebacks initiated without first contacting us for a refund under Section 5.3;
Your account has been inactive for an extended period (currently no fixed cutoff, but we reserve the right to introduce one with prior notice);
Continued operation of your account creates legal risk for WebVerse, our subprocessors, or our users;
We are required to do so by law or by a lawful order from a competent authority.

8.3Effect of termination

On termination, your access to the Service ends. Any active VPN session is disconnected; any running lab is stopped. Sections of these Terms that by their nature are intended to survive termination — including Section 6, Section 9, Section 10, Section 11, and Section 13 — survive.

Termination does not entitle you to a refund of any prepaid amount, except where required by law or where granted at our discretion under Section 5.3.

9.Disclaimers

The Service is provided “as is” and “as available.” To the maximum extent permitted by law, WebVerse disclaims all warranties of any kind, whether express, implied, statutory, or otherwise, including without limitation warranties of merchantability, fitness for a particular purpose, non-infringement, accuracy, uninterrupted availability, error-free operation, or that the Service will meet your expectations.

WebVerse does not guarantee that any specific lab will remain available, that any specific feature will continue to be supported, or that the Service will be available without downtime. Lab content and platform features are subject to change, addition, removal, or replacement at our discretion.

You are solely responsible for any conduct you engage in while using the Service and for any consequences of that conduct, including but not limited to legal consequences arising from misuse of the VPN or violation of the Acceptable Use Policy.

10.Limitation of Liability

To the maximum extent permitted by applicable law, WebVerse’s total cumulative liability to you for any and all claims arising out of or related to the Service or these Terms is limited to the greater of (a) the total amount you paid to WebVerse in the twelve (12) months immediately preceding the event giving rise to the claim, or (b) one hundred United States dollars (USD $100).

WebVerse will not be liable for any indirect, incidental, special, consequential, punitive, or exemplary damages, including without limitation loss of profits, loss of revenue, loss of data, business interruption, or loss of goodwill, even if WebVerse has been advised of the possibility of such damages.

Some jurisdictions do not allow the exclusion or limitation of certain damages. In those jurisdictions, the exclusions and limitations above apply only to the maximum extent permitted by law.

11.Indemnification

You agree to defend, indemnify, and hold harmless WebVerse Labs, its founder, employees, contractors, agents, and subprocessors from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys’ fees) arising out of or related to:

Your use of the Service;
Your violation of these Terms or any law or regulation;
Your violation of any third party’s rights, including intellectual-property, privacy, or contractual rights;
Any attack, scan, or other activity sourced from your VPN session against a system you were not authorized to attack.

We will provide you with prompt notice of any claim subject to indemnification. We reserve the right to assume the exclusive defense of any matter subject to indemnification, in which case you agree to cooperate with our defense.

12.DMCA / Copyright

WebVerse responds to notices of alleged copyright infringement consistent with the United States Digital Millennium Copyright Act (DMCA) and analogous notice-and-takedown procedures in other jurisdictions.

If you believe that content on the Service infringes a copyright you hold, please send a written notice to [email protected] that includes:

An electronic or physical signature of the rights holder or an authorized agent;
Identification of the copyrighted work claimed to be infringed;
Identification of the material that is claimed to be infringing and where it is located on the Service (a URL is ideal);
Your contact information, including address, telephone number, and email;
A statement that you have a good-faith belief that the use is not authorized by the copyright owner, its agent, or the law;
A statement, made under penalty of perjury, that the information in the notice is accurate and that you are the rights holder or authorized to act on the rights holder’s behalf.

We will respond to valid notices in a timely manner, including by removing or disabling access to allegedly infringing content. Counter-notices may be sent to the same email address and must contain the elements required by the DMCA.

Repeat infringers will have their accounts terminated.

13.Governing Law and Dispute Resolution

These Terms and any dispute arising out of or related to them or to the Service are governed by the laws of New Brunswick, Canada, without regard to conflict-of-laws principles. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

The parties will attempt in good faith to resolve any dispute by direct negotiation. If the parties cannot resolve a dispute within thirty (30) days of written notice, the dispute will be resolved by binding arbitration administered in New Brunswick, Canadaunder the then-current commercial arbitration rules of a recognized arbitration body in that jurisdiction, by a single arbitrator. The arbitrator’s decision will be final and enforceable in any court of competent jurisdiction.

Notwithstanding the previous paragraph, either party may bring an action in small-claims court for any qualifying claim, and either party may seek injunctive or other equitable relief in a court of competent jurisdiction to protect its intellectual-property rights or to enforce the Acceptable Use Policy on an emergency basis.

Class waiver. To the maximum extent permitted by law, you and WebVerse each agree that any dispute will be resolved in your individual capacity and not as a plaintiff or class member in a purported class, consolidated, or representative proceeding.

14.Changes to Terms

We may update these Terms from time to time. Material changes will be communicated to active users via email or via a prominent in-product banner before the change takes effect. Your continued use of the Service after the effective date of revised Terms constitutes your acceptance of the revised Terms. If you do not accept a revision, you should stop using the Service and delete your account before the effective date.

15.Severability, Assignment, Entire Agreement

Severability. If any provision of these Terms is held to be invalid or unenforceable by a court of competent jurisdiction, the remaining provisions remain in full force and effect, and the invalid or unenforceable provision will be reformed to the minimum extent necessary to make it enforceable while preserving its original intent.

Waiver. Our failure to enforce any right or provision of these Terms is not a waiver of that right or provision. A waiver of any breach is not a waiver of any future breach.

Assignment. You may not assign or transfer these Terms or any rights under them without our prior written consent. We may assign these Terms in connection with a merger, acquisition, reorganization, or sale of all or substantially all of our assets, on notice to you.

No agency. Nothing in these Terms creates a partnership, joint venture, agency, or employment relationship between you and WebVerse.

Entire agreement. These Terms, together with the Privacy Policy and any other policies we publish that are incorporated by reference, constitute the entire agreement between you and WebVerse with respect to the Service and supersede any prior agreements between you and us regarding the Service.

16.Contact

Questions about these Terms can be sent to:

[email protected]

This document is a general template adapted for WebVerse Pro and does not constitute legal advice. For questions about how it applies to your jurisdiction, consult an attorney.