Service provider
The SBT VulnLab electronic service is provided by Security Bez Tabu Wojciech Ciemski, Gorzelnicza 8, 04-212 Warsaw, Poland, NIP 9522112211, REGON 368630032. Contact: kontakt@securitybeztabu.pl.
Platform rules
Terms of Use
Last updated: 14 July 2026.
Service and agreement
SBT VulnLab provides a free account, controlled cybersecurity laboratories, progress tracking, and completion certificates. The agreement is concluded when the learner creates an account after accepting this version of the Terms and remains in force until the account is deleted or access is terminated under these Terms. Access is activated after the learner confirms the email address using a one-time technical message. The platform does not conduct marketing mailing.
Technical requirements
Use requires a current web browser with JavaScript, cookies, local storage, and HTTPS support, an internet connection, and a valid email address. Security testing tools such as an intercepting proxy are optional and must be used only against the laboratory endpoints exposed by SBT VulnLab.
Educational and authorized use
SBT VulnLab is provided for cybersecurity education. You may use the techniques only inside the platform or against systems for which you have explicit authorization. Attempts to target the platform infrastructure, other accounts, or third-party systems are prohibited.
Accounts
Provide accurate account details, protect your password, and do not share access or account-specific flags. Activity that threatens availability or bypasses platform controls may result in account suspension.
Progress and credentials
Certificates confirm completion recorded by the platform. They do not by themselves certify professional competence, employment eligibility, or authorization to test third-party systems.
Availability and changes
Training content and platform behavior may be updated to improve safety, accuracy, and educational quality. Planned or emergency maintenance may temporarily affect availability.
Complaints and contact
A complaint or security report should identify the account or affected function, date, observed behavior, and expected resolution. Send it to kontakt@securitybeztabu.pl. The operator will respond without undue delay using the email address assigned to the account.
Ending use
The learner may stop using the service and request account deletion at any time. The operator may restrict or terminate access after a serious or repeated breach, an attack on infrastructure or other accounts, or where required by law.
Personal data
Rules for account, security-event, progress, and certificate data are described in the Privacy Information available on the platform.