Terms and Conditions

DefendTheOrg is a hosted, web-based blue-team training platform. The Service provides hands-on, scenario-based exercises in detection engineering, threat hunting, incident response, security operations, MITRE ATT&CK, and code review, along with progress tracking, leaderboards, and related features. The Service is delivered through your browser; no software is downloaded or licensed for offline use.

The Service is provided for educational and skill-development purposes. It is not certification, accredited education, legal or professional security advice, or a substitute for your organization's own incident response procedures.

To access most of the Service you must create an account. You agree to provide accurate information (including a valid name and email) and to keep your credentials secure. You are responsible for all activity that occurs under your account. Accounts are personal and may not be shared; one person may not maintain multiple accounts.

Paid access to the Service is sold on a recurring subscription basis (currently monthly and annual plans). Subscriptions are billed in advance through our payment processor, Stripe, and renew automatically at the end of each billing period until cancelled. You may cancel at any time from your account; cancellation takes effect at the end of the then-current billing period and you will retain access until that time.

Refunds: if the Service is not the right fit, email us within 7 days of your initial purchase and we will issue a full refund, no questions asked. After 14 days from purchase we do not issue refunds, but you may cancel at any time to stop future billing. We may change pricing or plan terms; material changes to the price you pay will be communicated by email at least 30 days in advance.

The Service invites you to submit detection queries, incident response decisions, threat-hunting findings, code review notes, and other work product (collectively, "Submissions"). You retain ownership of your Submissions.

By making a Submission, you grant DefendTheOrg a worldwide, non-exclusive, royalty-free, transferable license to host, store, reproduce, display (including pseudonymously on leaderboards, profiles, and aggregate statistics), and use the Submission to operate, support, and improve the Service. We will not sell your Submissions or redistribute them as standalone products.

You represent that you have the right to make each Submission and that it does not infringe any third party's rights or contain confidential information you are not authorized to share.

You agree not to: (a) reverse engineer, decompile, or attempt to extract source code or non-public content from the Service; (b) scrape or use automated means to access the Service without our prior written permission; (c) resell, redistribute, or share access to paid content outside your own account; (d) interfere with or attempt to compromise the Service, its infrastructure, or other users; or (e) use the Service for any unlawful purpose.

The Service contains simulated attack and defense scenarios. You agree to use techniques and tools learned through the Service only against systems you own or are explicitly authorized to test. You are solely responsible for ensuring your use complies with applicable law.

All exercises, labs, courses, log datasets, scenarios, written content, software, and other materials made available through the Service are owned by RCX Digital Labs LLC or its licensors and are protected by intellectual property laws. Subject to your compliance with these Terms and an active subscription where required, we grant you a personal, non-transferable, non-sublicensable license to access and use that content for your own training.

Training scenarios on the Service are gamified simulations and are not guaranteed to reflect every real-world attack pattern, tool behavior, or environmental detail. The Service is provided "as is" and "as available," without warranties of any kind, whether express or implied, including warranties of merchantability, fitness for a particular purpose, non-infringement, accuracy, or that the Service will be uninterrupted or error-free. You should not rely on the Service as your sole source of guidance for production security operations.

To the fullest extent permitted by law, RCX Digital Labs LLC and its officers, employees, and contractors will not be liable for any indirect, incidental, special, consequential, or punitive damages, or for lost profits, lost data, or training outcomes, arising out of or related to your use of the Service. Our total aggregate liability for any claim arising out of or relating to the Service or these Terms will not exceed the amount you paid us in the twelve (12) months immediately preceding the event giving rise to the claim.

You may terminate your account at any time by cancelling your subscription and, if you wish, requesting account deletion. We may suspend or terminate your access if you breach these Terms or if we are required to do so by law. Refunds on termination are issued only as required by Section 3 or by applicable law. Sections 4–8 and 10–13 survive termination.

Our collection and use of personal information is described in our Privacy Policy, which is incorporated into these Terms by reference. Payments are processed by Stripe; we do not store full payment card numbers on our servers.

We may update these Terms from time to time. If we make material changes, we will notify you by email at the address associated with your account and update the "Last Updated" date above. Continued use of the Service after the effective date of an update constitutes acceptance of the updated Terms.

These Terms are governed by the laws of the State of California, USA, without regard to its conflict-of-laws principles. You and DefendTheOrg agree that any dispute arising out of or relating to these Terms or the Service will be brought exclusively in the state or federal courts located in California, and you consent to the personal jurisdiction of those courts.

RCX Digital Labs LLC

Email: ryan@rcxdigitallabs.com