Legal

DefendTheOrg Holiday Giveaway Official Rules

Last updated: November 12, 2026

These are the official rules for the DefendTheOrg Holiday Giveaway, a promotion run by RCX Digital Labs LLC on the Defend the Org platform at defendtheorg.com. By entering you accept these rules and the decisions of the Sponsor, which are final. These rules sit alongside our Terms of Service, and where they differ on this promotion specifically, these rules apply.

1. No purchase necessary

No purchase or payment of any kind is necessary to enter or win. A free DefendTheOrg account is all that is required, and creating one costs nothing. Buying a subscription does not improve your chances of winning, and nothing in this promotion requires you to buy anything at any point.

Void where prohibited by law.

2. Sponsor

This promotion is run by RCX Digital Labs LLC, operator of DefendTheOrg at defendtheorg.com (the "Sponsor", "we", or "us"). Questions about these rules or about the promotion should go to the address below.

Email: ryan@rcxdigitallabs.com

3. Entry period

The promotion opens on Monday, November 16, 2026 at 9:00 a.m. Pacific Time and closes on Tuesday, November 24, 2026 at 9:00 a.m. Pacific Time (the "Entry Period").

The Sponsor's server clock decides whether an entry falls inside the Entry Period, and that decision is final. Entries recorded before it opens or after it closes do not count, and the entry pages are closed outside those times.

4. Who can enter

To enter you must, at the time you enter:

  • be 18 years of age or older;
  • hold a DefendTheOrg account, which is free to create; and
  • not be the Sponsor, or a member of the Sponsor's immediate family or household.

5. Where it is open

The promotion is open worldwide except where prohibited or restricted by law. It is void in any jurisdiction where it would be unlawful, and specifically it is not open to residents of Quebec, Italy, or Brazil, or to residents of any country subject to comprehensive United States sanctions.

You are responsible for knowing whether entering is lawful where you live. If you win and we cannot lawfully award you the prize, the prize is forfeited and we may select another winner.

One account per person. Entering through more than one account, or through any account that is not yours, disqualifies every entry associated with you.

6. How to enter

There are three ways to earn an entry, and you may earn each one once. The maximum is three entries per person for the whole promotion.

  • The Profile. Complete the giveaway profile form, including the written response. Earns one entry when saved.
  • The Challenge. Complete all three parts — the ten-question drill, the two ATT&CK tactics, and the alert triage. Earns one entry when the last part is submitted. You get one attempt at each part, and your score does not affect whether the entry counts.
  • The Share. Post your generated entry card publicly on X and submit the link to that post. The post must be public and must include the card image we generated for you — a reviewer opens the link and checks for it, and a post without the card does not earn the entry. This entry counts only once a reviewer has approved it, which is not automatic and may take until after the Entry Period closes.

7. Prizes

Five prizes are available in total:

  • Four prizes of one month of free DefendTheOrg subscription access. Approximate retail value (ARV) of each: US$20.
  • One grand prize of three months of free DefendTheOrg subscription access. ARV: US$60.

8. What a prize is, and is not

Each prize is awarded as a single-use promotion code that applies free access to a DefendTheOrg subscription. A prize is not cash, is not transferable, and cannot be exchanged for cash or credit. An active DefendTheOrg account is required to redeem one.

No more than one prize will be awarded per person. The Sponsor may substitute a prize of equal or greater value if a prize becomes unavailable. Any taxes on a prize are the winner's responsibility.

9. Odds of winning

Your odds depend on the total number of eligible entries received across all entrants, which is not known until the Entry Period closes. Each entry you earn is counted separately, so earning all three entries gives you three times the chance of being selected in the random draw compared with earning one.

10. How the four one-month prizes are selected

The four one-month prizes are awarded by random draw from all eligible entries, on or about November 24, 2026, after the Entry Period closes.

The draw works like this: once the Entry Period closes we lock the list of eligible entries and publish a digest of it, then draw against a random seed. Because the entry list is fixed before the seed is chosen, and because the draw is a plain function of the two, anyone can re-run it from the published seed and entry list and get the same winners. We publish both so the result can be checked rather than taken on trust.

No person may win more than one prize, so an entrant already holding a prize is excluded from later draws.

11. How the three-month grand prize is selected

The three-month grand prize is not drawn at random. It is selected by the Sponsor from the written responses given in the Profile step, among entrants who earned at least one entry during the Entry Period.

Responses are judged on how clearly they describe what the entrant is working toward, how specific they are, and what three months of access would let them do. The Sponsor's decision is final and is not subject to review. Because this prize is awarded on the content of a written response rather than by chance, skill is involved.

12. Winner notification and claiming a prize

Winners are notified by email, at the address on their DefendTheOrg account, within three business days of selection. Keep that address current — it is the only address we use, and a notification that bounces or goes unread is still a notification.

You have 30 days from the date we send your notification to claim your prize. A prize that is not claimed within 30 days is forfeited, and the Sponsor may select an alternate winner for it or leave it unawarded.

13. Disqualification

The Sponsor may disqualify any entry, and any entrant, for:

  • entering through more than one account, or through an account that is not yours;
  • automating, scripting, or otherwise manipulating entry;
  • submitting a post link that is not yours, is not public, or does not contain the entry card we generated for you;
  • altering a generated entry card before posting it;
  • any attempt to interfere with the promotion or with another entrant.

14. Changes and early closure

The Sponsor may modify, suspend, or end this promotion at any time, including before the scheduled close, if it cannot be run as planned — for example because of a technical failure, abuse, or anything else outside the Sponsor's reasonable control. If the promotion ends early, the Sponsor may award the prizes from the eligible entries received up to that point, or award none.

Material changes to these rules will be posted on this page with a new last-updated date.

15. Publicity

By entering, you agree that the Sponsor may publish your DefendTheOrg account name in connection with announcing the results, without further notice, compensation, or permission, except where that is prohibited by law. We will not publish your email address, and we will not publish your written response.

16. Privacy

Information you give us when entering is handled under our Privacy Policy, which applies to this promotion in full.

Your written response from the Profile step is private. It is never posted to any platform by us, never shown to other entrants, and never drawn onto your entry card. It is read only by the Sponsor, and only to judge the grand prize.

Your entry card is generated from your own profile and your own Challenge results, and it is yours to post or not post. If you post it, you are publishing it yourself, and what you publish is public.

17. Not affiliated with X

This promotion is not sponsored, endorsed, or administered by, or associated with, X Corp. One method of entry involves posting publicly on X, and in doing so you are also bound by that platform's own terms. X Corp has no responsibility for this promotion or for any prize.

18. Limitation of liability

To the fullest extent permitted by law, the Sponsor is not liable for any loss or damage arising out of entering this promotion or accepting or using a prize, including an entry that is lost, late, misdirected, or not recorded because of a network, browser, or technical failure. The Sponsor's total liability in connection with this promotion will not exceed the approximate retail value of the prize concerned.

Nothing in these rules excludes any liability that cannot lawfully be excluded.

19. Governing law

These rules, and any dispute arising out of this promotion, are governed by the laws of the State of California, without regard to its conflict-of-laws provisions. You agree that any such dispute will be resolved exclusively in the state or federal courts located in California.