Terms of Service
1. What this is
VulnBox Arena ("we," "us," the "Service") is a self-contained, fictional cybersecurity training simulator. Every network, target machine, exploit, credential, and vulnerability in the Service is fabricated and runs entirely on our own servers -- the Service never scans, attacks, or interacts with any real external system, and no command it simulates performs a real exploit against real software. It is intended for legitimate security education and practice only.
By creating an account or using the Service, you agree to these Terms. If you do not agree, do not use the Service.
2. Accounts
You must provide a working password and keep your account credentials confidential -- you're responsible for activity that happens under your account. You must be old enough to form a binding contract in your jurisdiction (or have a parent/guardian's consent) to sign up. We may suspend or terminate accounts that violate these Terms, abuse the Service's infrastructure (e.g. scripted/automated play that circumvents rate limits, leaderboard manipulation), or are used for anything illegal.
You can delete your account at any time from your profile page; this permanently removes your account data as described in that flow.
3. Subscriptions and billing
The Easy difficulty tier and the weekly rotating challenge are free. The Medium, Hard, and Hard -- Chained tiers require an active "VulnBox Pro" subscription, currently priced at $4.99 per month, billed automatically on a recurring monthly basis until you cancel. Exact price and billing frequency are also shown at checkout before you pay.
Payments are processed by Stripe, Inc. We never see or store your card number -- Stripe's own terms and privacy policy govern the payment transaction itself.
You can cancel anytime via the "Manage Plan" button in-app, which opens Stripe's self-service billing portal. Cancellation stops future billing; you keep access to paid tiers through the end of the billing period you already paid for.
4. Refunds
All subscription payments are non-refundable, including for partial billing periods, except where required by law. Cancel anytime to stop future charges -- see our Refund Policy for the full detail.
5. Acceptable use
You agree not to: attempt to use anything you learn or do in the Service against any real, external system without proper authorization; interfere with or disrupt the Service's infrastructure; attempt to bypass subscription gating or rate limits; scrape, resell, or redistribute the Service's content; or use the Service to harass other players (including via in-app chat, mail, or crew features, where enabled).
6. Trademarks and third-party references
The Service's simulated terminal reimplements the general behavior of well-known real command-line tools (for example nmap, hydra, hashcat, sqlmap) purely for training realism. These are reimplementations operating on fictional in-memory data, not the real software, and are not sponsored by, affiliated with, or endorsed by the makers or trademark holders of the tools they're named after. All trademarks referenced anywhere in the Service remain the property of their respective owners.
7. Disclaimer of warranties
The Service is provided "as is" and "as available," without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, or non-infringement. We don't guarantee the Service will be uninterrupted, error-free, or secure.
8. Limitation of liability
To the maximum extent permitted by law, VulnBox Arena and its operator will not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of data, revenue, or profits, arising from your use of the Service. Our total liability for any claim relating to the Service is limited to the amount you paid us in the 3 months before the claim arose.
9. Changes to these Terms
We may update these Terms from time to time. Material changes will be reflected by an updated "Last updated" date above. Continued use of the Service after a change means you accept the updated Terms.
10. Governing law
These Terms are governed by the laws of the State of Oklahoma, USA, without regard to conflict-of-law principles.
11. Contact
Questions about these Terms, billing, or your account: [email protected].
VulnBox Arena is operated by VulnBox Arena.