These terms govern your access to and use of GenAI Security Lab (the “Service”), operated by Manifest Security LLP. By creating an account or using the Service, you agree to them.
GenAI Security Lab provides hands-on training in the security of AI and large-language-model applications: guided curriculum, interactive labs against intentionally vulnerable targets, skills assessments, and the GSCP certification.
All lab targets are deliberately insecure practice environments provided for education. They are isolated and contain no real customer, production, or third-party data.
You are responsible for the activity under your account and for keeping your credentials secure. Notify us promptly of any unauthorized use. You must be at least 16 years old, or the age of digital consent in your jurisdiction, to hold an account.
Your use of the Service is subject to our Acceptable Use Policy. In short: exploit only the targets we provide, inside the Service. Do not use anything you learn here to attack systems you are not authorized to test.
Paid plans are billed in advance, monthly or yearly, per the pricing shown at checkout. You can change or cancel your plan at any time; changes take effect at the end of the current term.
If you upgrade and change your mind, request a refund within 7 days, provided you have not completed more than 10% of the paid labs (free community labs do not count) or passed the certification exam.
The GSCP credential is earned by passing a proctored, hands-on exam. Certificates are issued to the individual who earned them and may be revoked for confirmed integrity violations. We may update the exam and curriculum as the threat landscape evolves.
The curriculum, labs, target applications, and platform are owned by Manifest Security LLP and licensed to you for your own training. You may not resell, redistribute, or publicly post lab solutions or exam content.
An Individual subscription is a personal licence for one named person. It is for personal use and is not licensed for company-managed training: it may not be administered, assigned or centrally managed by an organisation on behalf of its staff, and an Individual seat cannot be attached to a Team workspace or appear in an organisation's coverage or completion reporting.
Training that an organisation assigns, tracks, or reports on requires a Team or Enterprise plan. Team seats are licensed per named person and may be reassigned when someone leaves the organisation. Buying an Individual subscription with company funds for your own professional development is permitted; managing a group of them as company training is not.
The Service is provided “as is,” for educational purposes, without warranties of any kind. To the fullest extent permitted by law, Manifest Security LLP is not liable for indirect or consequential damages, or for any misuse of the techniques taught. See also our Educational and Sandbox Disclaimer.
We may update these terms; material changes will be notified in-product or by email. Questions go to [email protected].