Terms of Service

1. Acceptance of these terms

These Terms of Service (the “Terms”) govern your access to and use of the Invictus Academy platform (the “Service”), operated by Invictus Incident Response B.V. (“Invictus”, “we”, “us”). By signing in to or using the Service you agree to these Terms. If you are using the Service on behalf of an organisation, you accept these Terms for that organisation.

2. The Service

Invictus Academy is a cloud-native cyber range for incident-response and forensics training. It provides simulated incidents, investigation tooling, and performance measurement in a controlled environment. The Service is provided for education and professional development; it is not a production security tool and its outputs are not security advice for any specific real-world system.

3. Accounts and access

Access is provided through single sign-on, typically via an account your organisation provisions. You are responsible for keeping your credentials secure and for activity carried out under your account. Tell your administrator or us promptly if you believe your account has been compromised.

4. Acceptable use

The Service deliberately contains offensive-security material and lets you practise attacker and defender techniques. That capability is confined to the range. You agree that you will:

• use these techniques only against the range assets and labs assigned to you, and only for training;
• not attack, probe, overload, or attempt to disrupt the platform itself, its infrastructure, other tenants, other users, or any system you are not explicitly authorised within the Service to test;
• not attempt to de-anonymise lab data, or to identify the real people, organisations, or systems behind any lab;
• not copy, exfiltrate, or redistribute lab content, other users’ data, or platform data outside the Service;
• not use the Service to develop, stage, or launch activity against any third party; and
• comply with your organisation’s policies and applicable law.

5. Content and intellectual property

Labs, datasets, documentation, and the software that makes up the Service are owned by Invictus or its consortium partners and licensors, and are licensed to you for training use only. These Terms grant you no right to redistribute or create derivative works from that material except as the Service expressly allows.

6. Your submissions

You retain your own findings, notes, and reports that you create in the Service. You grant Invictus the licence needed to host and process that material to operate the Service and to measure your training progress, as described in the Privacy Policy.

7. Availability and changes

The Service is a training environment and may be updated, suspended, or withdrawn, in whole or in part, including for maintenance or to change labs. We may modify these Terms; where we do, we will update the date above and, for material changes, make reasonable efforts to notify you or your organisation.

8. Disclaimers

To the extent permitted by law, the Service is provided “as is” and “as available”, without warranties of any kind. Simulated incidents are illustrative and do not guarantee any particular real-world outcome, detection capability, or level of security for your own environment.

9. Limitation of liability

To the extent permitted by law, Invictus is not liable for indirect or consequential loss, or for loss of data, profits, or goodwill, arising from your use of the Service. Nothing in these Terms excludes liability that cannot lawfully be excluded.

10. Suspension and termination

We may suspend or terminate access if these Terms are breached, if required to protect the Service or its users, or when an organisation’s engagement ends. You or your organisation may stop using the Service at any time.

11. Governing law

These Terms are governed by the laws of the Netherlands, and the courts of the Netherlands have jurisdiction, without prejudice to any mandatory consumer or employment protections available to you.

12. Contact

Questions about these Terms can be raised with your organisation’s administrator or with Invictus Incident Response B.V., Weena 690, 3012 CN Rotterdam, the Netherlands.