Legal
Ethics and acceptable use
CyberHero teaches how systems fail. That knowledge is only useful, and only lawful, when it is applied with permission.
Last updated: 12 November 2026
The one rule
Do not test, scan, access or interfere with a system you do not own unless you have explicit authorisation from someone who does. Curiosity is not consent. A missing password is not an invitation. A public IP address is not a target.
What this site is for
- Learning how computers, operating systems and networks work.
- Understanding defensive concepts and security habits.
- Preparing for legal, consenting practice on dedicated platforms.
- Building a foundation for an IT or security career.
What you may not do
- Use anything you learn here to access a system without permission.
- Attempt to attack, overload or probe CyberHero or its infrastructure.
- Upload malware, stolen credentials or personal data to the site.
- Share your account or resell access to the content.
- Present a CyberHero completion certificate as an accredited qualification.
Practice that stays legal
Use platforms that own their targets and consent to the exercise, such as TryHackMe, Hack The Box Academy, PortSwigger Web Security Academy and picoCTF. Keep a home lab isolated on a host-only network and never expose a vulnerable machine to the public internet.
If you find a vulnerability in a system you do not own, stop, do not access data, and report it privately to the owner. See the resources page for legal practice options.
Reporting a problem with CyberHero
If you believe you have found a security issue in this site, email clintonneemok11@gmail.com with enough detail to reproduce it. Do not access other users' data, degrade the service or publish the issue before it is fixed. Good-faith reports will be acknowledged and credited if you want.
Consequences
Accounts used to attack the site, harass other learners or upload harmful material may be suspended or removed. Where the law is engaged, the matter may be reported to the relevant authority.
Law is local
The UK Computer Misuse Act, the EU's NIS2 framework, the US Computer Fraud and Abuse Act and national laws elsewhere all treat unauthorised access differently. “I did not mean harm” is not a defence. Learn the rules where you live, and when in doubt, ask for written permission before touching anything.