Capture The Bug Terms and Conditions (CTB T&C)
The Capture The Bug (“CTB”) Terms and Conditions are a legal document that explains the rules for using the CTB website, including all sub-domains and any associated web-based applications. These terms and conditions apply to anyone who visits or uses the website, which is owned and operated by CAPTURE THE BUG LIMITED an incorporated company in New Zealand.
Our Legal Terms, including the Privacy Policy and other guidelines or rules posted on our Website, such as the Program Guide and the Researcher Agreement, serve as the complete agreement between you and CTB. These terms supersede any other prior agreements, understandings, representations, or warranties related to our Website and its content. We reserve the right to change our Legal Terms without prior notification. You must regularly review these terms to ensure that you continue to agree to them. We will post the latest copies of our Legal Terms on our Website, and you should review them before using our Website. You agree to be bound to any changes made to our Legal Terms after they are posted. Therefore, it is essential for you to periodically review our Legal Terms to make sure you still agree to them.
1. Definitions
Capture The Bug (“CTB”) Terms and Conditions
The Capture The Bug (“CTB”) Terms and Conditions are a legal document that explains the rules for using the CTB website, including all sub-domains and any associated web-based applications. These terms and conditions apply to anyone who visits or uses the website, which is owned and operated by CAPTURE THE BUG LIMITED, an incorporated company in New Zealand.
Our Legal Terms, including the Privacy Policy and other guidelines or rules posted on our Website, such as the Program Guide and the Researcher Agreement, serve as the complete agreement between you and CTB. These terms supersede any other prior agreements, understandings, representations, or warranties related to our Website and its content. We reserve the right to change our Legal Terms without prior notification. You must regularly review these terms to ensure that you continue to agree to them. We will post the latest copies of our Legal Terms on our Website, and you should review them before using our Website. You agree to be bound to any changes made to our Legal Terms after they are posted. Therefore, it is essential for you to periodically review our Legal Terms to make sure you still agree to them.
1. Definitions
| Key Term | Definition |
|---|---|
| Agreement | A legally binding contract between the Customer and Capture the Bug that outlines the terms and conditions under which Customers can access and use CTB’s Bug Bounty Platform and services. |
| Bounty | Financial reward offered by Customer to Security Researchers for identifying and reporting qualifying vulnerabilities in the Target Assets. |
| Capture The Bug website | http://www.capturethebug.xyz/ including all sub-domains and any associated web-based applications. |
| Content | Content refers to the text, information, graphics, audio, video, and data that are offered on the platform. |
| Crowdsourced Security Program | Referred to in DPTS including Bug Bounty, VDP, or on-demand penetration testing program established by the Customer through the Hosted Service, in which Security Researchers are invited to test the security of the Target Assets and report any vulnerabilities discovered. |
| CTB | Capture The Bug – A New Zealand-based incorporated company that provides crowdsourced security and Bug Bounty Platform services. |
| Customer | Individual or Organisation who wishes to engage the CTB Platform and services. |
| Customer Data | Any data or information provided by Customer to CTB or inputted by Customer into the Hosted Service under this “Agreement”. |
| Distributed Penetration Testing Service (DPTS) | Distributed penetration testing is a type of security testing in which a group of individuals or Organisations contribute their skills and expertise to test the security of a system or network. In a distributed penetration testing scenario, the testing is typically conducted remotely and may involve a large number of testers working together to identify and report vulnerabilities. |
| Hosted Services | The cloud-based platform and related services provided by CTB to facilitate the Crowdsourced Security Program, including DPTS as described in the Contract. |
| Know Your Customer (KYC) | Know Your Customer or KYC is the mandatory process required by CTB to identify and verify the Security Researchers. |
| Legal Terms | Including the Privacy Policy and other guidelines or rules posted on our Website, such as the Program Guide and the Researcher Agreement, Customer's Terms and Conditions. |
| Member | Member may be a person who has registered with CTB to participate in its programs and use its services. |
| Program Guide | The written description of the scope, rules, and other details of a Crowdsourced Security Program, as provided by the Customer to CTB. |
| Sample Test Report | A sample report provided by CTB to Customer for the purpose of demonstrating the format and content of the Testing Report. |
| Security Researchers | Individuals who participate in the Crowdsourced Security Program by testing the security of the Target Assets and reporting any vulnerabilities discovered. There are two types of security researchers present on the platform: CTB Verified and Unverified or General Researchers. CTB Verified Researchers have completed the Know Your Customer through a Third Party Partner appointed by CTB. |
| Services | Services Provided by CTB to Customer, including but not limited to the crowdsourced security testing services, and Hosted services. |
| Target Assets | The websites, applications, or other systems that are the subject of a Crowdsourced Security Program. |
| Testing Report | The written report provided by CTB to Customer, detailing the results of the Testing Services, including any vulnerabilities identified and recommendations for remediation. |
| us/we/our | Capture The Bug Ltd. (CTB) |
| User | Collective identifier which refers to Surfer, Member, Researcher, or customer |
| VDP (Vulnerability Disclosure Program) | Customer allows external security researchers to report vulnerabilities in their Target Assets through Hosted services. |
| Visitor / Surfer | Surfer would be someone who simply browses the Website, but has not registered for an account or become a member of the platform. This person may be looking for information or researching the platform, but they have not yet taken the step of creating an account or participating in any of the activities or services offered on the platform. |
| You | Any person(s) individual, entity, company, trust, partnership, sole trader, who agrees to use our Platform. |
2. Uses of Licence
CTB provides the Customer with a license to access and use the CTB Website that is not exclusive, cannot be transferred, and can be withdrawn at any time and at the full discretion of CTB. Customers may only use the CTB Website in accordance with the CTB; Legal Terms, Agreement(s), and Terms and Conditions which include any amended or established documents of the same or similar nature in the future. If you use our Website for any other reason this will be considered a violation and breach of this license, resulting in an immediate termination of your membership without prejudice to all legal rights reserved by CTB.
3. Legal Obligations
You must follow all relevant laws and regulations when using our website. If we receive any complaints or reports of violations of our Legal Terms, we have the right to investigate and take any necessary action, such as cancelling your account or reporting any illegal activity to authorities. We may also share information about you, including your profile, email, usage history, and IP address, as may be required by our legal obligations and with third parties in accordance with our Privacy Policy.
4. Intellectual Property and Copyrights
Our Website may contain service marks or trademarks belonging to CTB, as well as those of other companies, in the form of words, graphics, and logos. Using our Website does not give you the right or license to use these service marks/trademarks without the prior written consent of the respective owner. Our Website is also protected under international copyright laws. It is strictly prohibited to copy, redistribute, use, or publish any part of our Website. Your use of our Website does not give you any ownership rights to our Website. We value the intellectual property of others and expect our users to do the same. We will take all available action, which may include legal action against users who infringe on the copyright rights of others. It may include terminating their access to our Website. We will decide on the appropriate action at our discretion.
You may contact us if someone is using your work without permission on our Website or if you think there is something on our Website that is using your work without permission. You can contact us by email at [email protected]. We will take appropriate action to protect your rights.
If you choose to visit third-party websites through links on our Website, you do so at your own risk. We do not endorse or guarantee these websites and have no affiliation with them. We also cannot control these third-party websites’ legal documents and privacy practices. Please be aware that accessing these websites may expose you to risks that we cannot protect you from.
5. Warranty Disclaimer
CTB is not responsible for any technical malfunction or other problems of any telephone network or Service, computer systems, servers or providers, computer or mobile phone equipment, software, failure of email or players on account of technical problems or traffic congestion on the Internet or at any website or combination thereof, including injury or damage to Members or to any other person’s computer, mobile phone, or other hardware or software, related to or resulting from participating or downloading materials in connection with the Web and/or in connection with the Service. Under no circumstances will CTB be responsible for any loss or damage, including personal injury or death, resulting from the use of our Website, attendance at a CTB event, from any Member Content posted on or through the Service, or from the conduct of any Members of the Service, whether online or offline.
6. Limitation of Liability
CTB is not responsible for any errors or omissions on our Website, any interruptions or unavailability of our Website, or any damages resulting from the use of our Website. CTB will not provide any refunds or other compensation for any reason, including delays, cancellations, strikes, government issues, or force majeure. CTB and its directors, employees, and agents will not be liable to you or any third party for any indirect, consequential, special, incidental, exemplary, or punitive damages, including any losses resulting from your use of our Website, even if CTB is aware or has been advised of the possibility of such damages. CTB liability to you for any reason will always be limited to you ceasing use of our Website.
7. Eligibility
By using our Website, you agree that you are not a citizen or resident of a country where using or participating in our Website is prohibited by law, regulation, treaty, or administrative act. You also agree that you are not a citizen or resident of, or located in, a country or region that is subject to sanctions or embargoes from New Zealand or other sovereign countries that may affect your ability to engage with our services. Our Website is not intended for use by children under the age of 16. If you have not reached the age of majority in your jurisdiction of primary residence and citizenship, you must have your parents’ permission to use our Website. There are additional eligibility requirements for Researchers, as outlined in the Researcher Agreement.
8. Security
In order to access certain features of our Website, you may need to set up an account. You must provide accurate and complete information when creating your account and must not use someone else’s account without their permission. You are responsible for all activity on your account and should be careful with your password. If you discover unauthorized use of your account, you must notify us immediately. You may not transfer your account to someone else. If we or anyone else suffers damages due to unauthorized use of your account, you may be liable. However, we are not responsible for any damages or losses you may incur due to unauthorized use of your account.
9. General Terms
Our Legal Terms will be interpreted and enforced as if they were agreed upon and carried out in New Zealand and will be governed by the laws of New Zealand, without considering any conflicting legal principles. You must bring any legal action related to our Website within one year of the cause of action arising, or it will be permanently waived and barred. If any part or provision of these Legal Terms is deemed illegal, invalid, or unenforceable by a Court with competent jurisdiction, the remaining provisions will remain in effect and the rights and obligations of the parties will be interpreted and enforced as if the illegal, invalid, or unenforceable provision had not been included in the Legal Terms. If there is a conflict between the content on our Website and our Legal Terms, the Legal Terms will take precedence. In the event of a conflict within the Legal Terms, the order of precedence will be, from highest to lowest priority: any Program Guide, the Researcher Terms and Conditions, these Terms of Service, the Privacy Policy, and any other terms that make up the Legal Terms. Our failure to enforce any provision of the Legal Terms does not waive our right to enforce that provision. The rights of CTB under the Legal Terms will survive the termination of the Legal Terms.
10. Acceptance of the Terms and Conditions
By using our Platform, you agree and acknowledge that you have read and understand all of these terms and conditions and accept that:
CAPTURE THE BUG IS PROVIDED “AS-IS,” “AS AVAILABLE,” WITH “ALL FAULTS”, AND ALL WARRANTIES, EXPRESS OR IMPLIED, ARE DISCLAIMED (INCLUDING BUT NOT LIMITED TO THE DISCLAIMER OF ANY IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE). CAPTURE THE BUG MAY CONTAIN BUGS, ERRORS, PROBLEMS OR OTHER LIMITATIONS. CAPTURE THE BUG, INCLUDING ALL OUR AFFILIATES, HAVE NO LIABILITY WHATSOEVER FOR YOUR USE OF OUR WEBSITE, OTHER THAN AS SPECIFIED IN OUR LEGAL TERMS. CAPTURE THE BUG CANNOT GUARANTEE AND DOES NOT PROMISE ANY SPECIFIC RESULTS FROM USE OF OUR WEBSITE. CAPTURE THE BUG DOES NOT REPRESENT OR WARRANT THAT CAPTURE THE BUG IS ACCURATE, COMPLETE, RELIABLE, CURRENT OR ERROR-FREE OR THAT IT IS FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS. THEREFORE, YOU SHOULD EXERCISE CAUTION IN THE USE AND DOWNLOADING OF ANY SUCH CONTENT AND USE INDUSTRY-RECOGNISED PROGRAMS TO DETECT AND REMOVE VIRUSES. ALL RESPONSIBILITY OR LIABILITY FOR ANY DAMAGES CAUSED BY VIRUSES SOMEHOW ATTRIBUTED TO CAPTURE THE BUG IS DISCLAIMED. WITHOUT LIMITING THE FOREGOING, YOU UNDERSTAND AND AGREE THAT YOU USE CAPTURE THE BUG AT YOUR OWN RISK AND THAT YOU WILL BE SOLELY RESPONSIBLE FOR YOUR USE THEREOF AND ANY DAMAGES TO YOU, YOUR MOBILE DEVICE OR COMPUTER SYSTEM, OR OTHER HARM OF ANY KIND THAT MAY RESULT. WE ARE NOT LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL OR CONSEQUENTIAL DAMAGES (INCLUDING DAMAGES FOR LOSS OF INCOME, BUSINESS, PROFITS, LITIGATION, OR THE LIKE), WHETHER BASED ON BREACH OF CONTRACT, BREACH OF WARRANTY, TORT (INCLUDING NEGLIGENCE), PRODUCT LIABILITY OR OTHERWISE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. THE NEGATION AND LIMITATION OF DAMAGES SET FORTH ABOVE ARE FUNDAMENTAL ELEMENTS OF THE BASIS OF THE BARGAIN BETWEEN YOU AND CAPTURE THE BUG. CAPTURE THE BUG WOULD NOT BE PROVIDED WITHOUT SUCH LIMITATIONS. NO ADVICE OR INFORMATION, WHETHER ORAL OR WRITTEN, OBTAINED BY YOU FROM US THROUGH CAPTURE THE BUG SHALL CREATE ANY WARRANTY, REPRESENTATION OR GUARANTEE NOT EXPRESSLY STATED IN OUR LEGAL TERMS.