Terms of Service

Effective Date: March 31, 2026 · Last Updated: March 31, 2026

1. Acceptance of Terms

These Terms of Service (“Terms”) constitute a legally binding agreement between you (“User,” “you,” or “your”) and Information Security Media Group, Inc. (“ISMG,” “we,” “us,” or “our”), governing your access to and use of the Null0ps platform at cybered.academy(the “Platform”).

By creating an account, accessing, or using the Platform, you acknowledge that you have read, understood, and agree to be bound by these Terms, our Privacy Policy, and any additional agreements entered into through the Platform (including Master Service and Staffing Agreements, Statements of Work, and Non-Disclosure Agreements).

If you are entering into these Terms on behalf of an organization, you represent and warrant that you have the authority to bind that organization to these Terms, and references to “you” shall include that organization.

IF YOU DO NOT AGREE TO THESE TERMS, YOU MUST NOT ACCESS OR USE THE PLATFORM.

2. Platform Description

Null0ps is a closed, on-demand cybersecurity talent dispatch platform. The Platform operates as an intermediary connecting vetted cybersecurity professionals (“Talent”) with organizations (“Clients”) for the delivery of cybersecurity services, including but not limited to:

• Advanced cybersecurity training (on-site, remote, and on-demand)
• Penetration testing and red team assessments
• Security advisory and consulting engagements
• Tabletop exercises and crisis simulations
• Hardware security research and testing
• Incident response support
• Executive and strategic security briefings

The Platform is not a public freelance marketplace. Talent professionals are vetted and credentialed before being admitted to the talent pool. Engagements are dispatched through a tiered notification system, and the first qualified professional to accept is assigned to the engagement.

ISMG acts as the platform operator and intermediary—not as an employer of Talent or a provider of cybersecurity services directly. Talent professionals operate as independent contractors. The relationship between Talent and Client is governed by the applicable engagement contracts generated through the Platform.

3. User Accounts and Registration

3.1 Account Roles

The Platform supports four user roles, each with distinct access permissions enforced at the application and database level:

• Admin: Full platform access. Manages Talent approvals, gig lifecycle, contracts, dispatch, payments, and platform settings.
• Producer: Internal account manager. Creates and manages gigs, dispatches Talent, reviews contracts, and manages Client relationships.
• Talent: Cybersecurity professional. Maintains profile, sets availability, receives and claims engagement notifications, delivers services, and receives payouts.
• Client: Organization representative. Books engagements, reviews the training catalog, manages organization profile, and submits post-engagement reviews.

3.2 Registration Requirements

To register for an account, you must:

• Be at least 18 years of age (or the age of majority in your jurisdiction)
• Provide accurate, complete, and current registration information
• Maintain the confidentiality of your account credentials
• Accept responsibility for all activity that occurs under your account
• Promptly notify us of any unauthorized access to or use of your account

3.3 Account Verification

We reserve the right to verify the identity, qualifications, and credentials of any user. Talent accounts are subject to an approval process before activation. We may suspend or terminate accounts that fail verification or provide false information.

3.4 One Account Per Person

Each individual may maintain only one account on the Platform. Creating multiple accounts to circumvent restrictions, manipulate rankings, or for any other purpose is a violation of these Terms and grounds for immediate termination.

4. Talent Obligations

4.1 Accuracy of Credentials

Talent professionals must provide truthful and accurate information regarding their:

• Professional qualifications, certifications, and credentials
• Areas of specialization and technical expertise
• Security clearance level (if claimed)
• Work experience and professional biography

Misrepresentation of credentials is grounds for immediate removal from the Platform and may result in legal action. If your certifications expire or your clearance status changes, you must update your profile promptly.

4.2 Availability and Commitment

Talent must:

• Keep their availability calendar current and accurate
• Only claim engagements they can fulfill in the specified timeframe
• Honour claimed engagements; repeated no-shows or last-minute cancellations will negatively impact reliability scores and may result in tier demotion or account suspension
• Respond to dispatch notifications in a timely manner

4.3 Engagement Delivery

When assigned to an engagement, Talent must:

• Review and comply with the engagement worksheet, including rules of engagement, hardware/software requirements, and NDA obligations
• Arrive prepared for pre-engagement check-in at the specified time
• Deliver services professionally and to the standard expected for the engagement type
• Submit all required deliverables (After-Action Reviews, certificates, reports) within the timeframe specified in the engagement worksheet
• Not solicit or accept direct engagements with Clients outside the Platform during or within twelve (12) months following an engagement (see Section 10)

4.4 Independent Contractor Status

Talent professionals are independent contractors, not employees of ISMG. Nothing in these Terms creates an employment relationship, partnership, joint venture, or agency relationship between ISMG and Talent. Talent is solely responsible for their own tax obligations, insurance, and compliance with applicable laws in their jurisdiction.

5. Client Obligations

5.1 Accurate Booking Information

Clients must provide accurate and complete information when booking engagements, including:

• Engagement scope, objectives, and requirements
• Number of attendees or systems in scope
• Date, time, and location details
• Any applicable clearance, compliance, or access requirements
• Hardware, software, and network prerequisites that Talent will need
• Budget and billing information

5.2 Engagement Environment

Clients are responsible for:

• Providing a safe and professional working environment for on-site engagements
• Ensuring all necessary access credentials, VPN configurations, and lab environments are available before the engagement start time
• Designating a primary point of contact for each engagement
• Obtaining any internal approvals, authorizations, or legal clearances necessary for the engagement scope (particularly for penetration testing, red team, or security assessment activities)

5.3 NDA and Confidentiality Compliance

Clients must comply with the confidentiality provisions outlined in Section 10 and any executed Non-Disclosure Agreements. Client proprietary information shared during engagements is protected under the applicable NDA.

5.4 Payment Obligations

Clients agree to pay all fees associated with booked engagements in accordance with the payment terms specified in Section 8 and the applicable Statement of Work.

5.5 Feedback and Reviews

Clients are encouraged to provide honest and constructive post-engagement reviews. Reviews must be factual and based on the actual engagement experience. Defamatory, fraudulent, or maliciously misleading reviews are prohibited and may be removed at our discretion.

6. Booking and Engagement Flow

The Platform operates the following engagement lifecycle:

1. Booking: Client submits an engagement request through the booking wizard, providing organization details, engagement specifications, and requirements.
2. Contract Generation: The Platform automatically generates a Master Service and Staffing Agreement (MSSA) and a Statement of Work (SOW) based on the booking details.
3. Admin Review: An ISMG Administrator or Producer reviews the booking, contracts, and engagement details. The booking may be approved, modified, or declined.
4. Dispatch: Upon approval, the engagement is published and qualified Talent is notified via email and/or SMS through the tiered dispatch system. For training bookings, the training instructor is given priority notification.
5. Claim:The first qualified Talent professional to accept the engagement is assigned. Assignment is atomic—only one Talent can claim a given engagement.
6. Delivery: Talent performs the engagement in accordance with the worksheet, rules of engagement, and applicable contracts.
7. Completion: Upon delivery, the engagement is marked complete. Deliverables are submitted and approved through the Platform.
8. Payout: Talent receives payment in accordance with Section 8.

ISMG reserves the right to cancel or modify engagements at any stage for operational, legal, or safety reasons. In the event of cancellation after Talent assignment, reasonable compensation may be provided as outlined in the applicable SOW.

7. Contracts and Agreements

7.1 Master Service and Staffing Agreement (MSSA)

Each Client engagement requires an executed MSSA between the Client organization and ISMG. The MSSA is auto-generated through the Platform and covers:

• Scope of services
• Confidentiality obligations
• Intellectual property provisions
• Limitation of liability
• Indemnification
• Insurance requirements
• Termination provisions
• General terms and conditions

The MSSA has a default term of two (2) years from execution and automatically renews unless terminated in writing.

7.2 Statement of Work (SOW)

Each engagement is governed by a SOW that specifies the engagement details, deliverables, timeline, fees, and any engagement-specific terms. The SOW is generated automatically based on the booking details and is appended to the MSSA.

7.3 Non-Disclosure Agreements (NDA)

Engagements may require execution of NDAs between the parties. NDA requirements are specified in the engagement worksheet and must be acknowledged before engagement commencement.

7.4 Governing Law and Venue

All contracts generated through the Platform, including the MSSA, SOW, and NDA, are governed by and construed in accordance with the laws of the State of New York, United States, without regard to its conflict of laws principles. Any legal action arising from these contracts shall be brought exclusively in the United States District Court for the Southern District of New York (SDNY) or the state courts located in New York County, New York.

7.5 Electronic Signatures

Contracts executed through the Platform use electronic signatures. By clicking “Approve” or equivalent actions on the Platform, you agree that your electronic signature is the legal equivalent of your manual signature, in accordance with the Electronic Signatures in Global and National Commerce Act (E-SIGN Act, 15 U.S.C. §§ 7001–7006) and the Uniform Electronic Transactions Act (UETA).

8. Payment Terms

8.1 Client Payment

Clients are invoiced in accordance with the fees specified in the applicable Statement of Work. Payment terms are Net 30 from the date of invoice unless otherwise specified in the SOW. Late payments may accrue interest at the rate of 1.5% per month or the maximum rate permitted by applicable law, whichever is lower.

8.2 Talent Payout

Talent professionals are paid via Stripe Connect following engagement completion and deliverable approval. To receive payouts, Talent must complete Stripe Connect onboarding and maintain an active Stripe account.

Payout amounts are determined by the engagement rate specified in the SOW, minus the applicable Platform fee. Payouts are processed after Client payment is received or in accordance with the timeline specified in the SOW.

8.3 Platform Fee

ISMG charges a Platform fee on each engagement, calculated as a percentage of the total engagement fee. The specific Platform fee rate is disclosed to both Client and Talent prior to engagement confirmation and is documented in the applicable SOW.

8.4 Taxes

All fees are exclusive of applicable taxes. Clients are responsible for any applicable sales tax, VAT, GST, or other transaction taxes. Talent professionals are solely responsible for reporting and paying all applicable income taxes, self-employment taxes, and other taxes arising from payments received through the Platform.

8.5 Refunds and Cancellations

Refund and cancellation policies are specified in the applicable SOW. In general:

• Cancellations more than fourteen (14) days before the engagement start date may receive a full refund minus administrative fees
• Cancellations between seven (7) and fourteen (14) days before the engagement may receive a 50% refund
• Cancellations less than seven (7) days before the engagement are non-refundable unless otherwise agreed in writing
• ISMG reserves the right to waive or modify cancellation fees on a case-by-case basis

8.6 Disputes

Payment disputes must be raised within thirty (30) days of the invoice date. Disputed amounts should be communicated in writing with supporting documentation. Undisputed portions of invoices must still be paid within the original payment terms.

9. Intellectual Property

9.1 Platform Intellectual Property

The Platform, including its design, code, features, content, trademarks, logos (including the Null0ps name and logo), and documentation, is the exclusive property of ISMG and is protected by copyright, trademark, and other intellectual property laws. You may not copy, reproduce, distribute, modify, create derivative works of, or reverse-engineer any part of the Platform without our prior written consent.

9.2 Training Content

Unless otherwise specified in the applicable SOW or separate agreement:

• Talent-created content: Talent retains ownership of pre-existing intellectual property, including training curricula, course materials, tools, and methodologies developed independently prior to or outside of Platform engagements.
• Engagement deliverables:Deliverables created specifically for a Client engagement (e.g., After-Action Reviews, assessment reports, custom lab environments) are owned by the Client upon full payment, subject to Talent’s retained rights in pre-existing IP.
• Catalog listings: By submitting training courses to the Platform catalog, Talent grants ISMG a non-exclusive, worldwide, royalty-free license to display, promote, and distribute the training listing (title, description, tags, and associated metadata) on the Platform and in marketing materials.

9.3 Client Content

Clients retain ownership of all proprietary data, systems, networks, and information provided to Talent during engagements. Talent may not retain, copy, or use Client proprietary information beyond the scope of the engagement.

9.4 Feedback and Suggestions

Any feedback, suggestions, or ideas you provide regarding the Platform may be used by ISMG without restriction or compensation to you.

10. Confidentiality and NDAs

10.1 Confidential Information

“Confidential Information” means any non-public information disclosed by one party to another in connection with the Platform or an engagement, including but not limited to:

• Business strategies, financial information, and pricing
• Security vulnerabilities, assessment findings, and penetration test results
• Network architecture, system configurations, and credentials
• Client customer data and employee information
• Proprietary tools, techniques, and methodologies
• Engagement worksheets, rules of engagement, and NDA contents

10.2 Non-Disclosure Obligations

All parties agree to hold Confidential Information in strict confidence and not to disclose it to any third party without prior written consent, except as required by law, court order, or regulatory authority. Confidentiality obligations survive the termination of these Terms and any engagement for a period of three (3) years, unless a longer period is specified in the applicable NDA.

10.3 Non-Solicitation

During the term of any engagement and for a period of twelve (12) months following its completion, Talent shall not directly solicit or accept work from Clients introduced through the Platform outside of the Platform, and Clients shall not directly engage Talent introduced through the Platform outside of the Platform, without ISMG’s prior written consent. This restriction does not apply to pre-existing relationships documented prior to the engagement.

11. Prohibited Conduct

You agree not to:

• Provide false, misleading, or fraudulent information in your account, profile, or bookings
• Create multiple accounts or share account credentials
• Circumvent, manipulate, or interfere with the dispatch, ranking, or scoring systems
• Submit fraudulent reviews, inflated ratings, or sham feedback
• Access or attempt to access data, accounts, or systems beyond your authorized scope
• Use the Platform to conduct unauthorized security testing against any system
• Engage in activities that violate applicable laws, including the Computer Fraud and Abuse Act (CFAA), UK Computer Misuse Act, India IT Act, or equivalent legislation
• Exceed the scope of engagement worksheets or rules of engagement during security assessments
• Retain, exfiltrate, or misuse data obtained during engagements
• Interfere with the Platform’s infrastructure, security, or availability
• Reverse-engineer, scrape, or harvest data from the Platform
• Use the Platform to send unsolicited communications, spam, or marketing materials

Violation of this section may result in immediate account termination, forfeiture of pending payouts, and referral to law enforcement authorities.

12. Limitation of Liability

12.1 Disclaimer of Warranties

THE PLATFORM IS PROVIDED “AS IS” AND “AS AVAILABLE” WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.

ISMG DOES NOT WARRANT THAT: (A) THE PLATFORM WILL MEET YOUR REQUIREMENTS; (B) THE PLATFORM WILL BE UNINTERRUPTED, TIMELY, SECURE, OR ERROR-FREE; (C) THE RESULTS OBTAINED FROM THE PLATFORM WILL BE ACCURATE OR RELIABLE; OR (D) ANY TALENT PROFESSIONAL WILL MEET SPECIFIC QUALIFICATIONS OR PERFORMANCE STANDARDS.

12.2 Limitation of Damages

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL ISMG, ITS OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, OR AFFILIATES BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, DATA, BUSINESS OPPORTUNITIES, GOODWILL, OR REVENUE, ARISING OUT OF OR RELATED TO YOUR USE OF THE PLATFORM, WHETHER BASED ON WARRANTY, CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY, OR ANY OTHER LEGAL THEORY, EVEN IF ISMG HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

ISMG’S TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS ARISING OUT OF OR RELATED TO THESE TERMS OR THE PLATFORM SHALL NOT EXCEED THE GREATER OF: (A) THE TOTAL FEES PAID BY YOU TO ISMG DURING THE TWELVE (12) MONTHS PRECEDING THE CLAIM; OR (B) ONE THOUSAND UNITED STATES DOLLARS (US $1,000).

12.3 Talent Services

ISMG is not responsible for the quality, accuracy, legality, or completeness of services provided by Talent. Talent operates as independent contractors, and ISMG does not supervise, direct, or control the manner in which Talent performs engagements. Claims regarding Talent performance should be raised through the engagement review process and dispute resolution procedures outlined in these Terms.

12.4 Jurisdictional Limitations

Some jurisdictions do not allow the exclusion or limitation of certain warranties or liabilities. In such jurisdictions, the exclusions and limitations in this Section shall apply to the maximum extent permitted by applicable law.

13. Indemnification

You agree to indemnify, defend, and hold harmless ISMG, its officers, directors, employees, agents, and affiliates from and against any and all claims, losses, damages, liabilities, costs, and expenses (including reasonable attorneys’ fees) arising out of or related to:

• Your use of or access to the Platform
• Your violation of these Terms or any applicable law
• Your violation of any third party’s rights, including intellectual property, privacy, or confidentiality rights
• For Talent: any acts or omissions during engagement delivery, including negligence, breach of rules of engagement, or unauthorized access to Client systems
• For Clients: any failure to provide a safe working environment, accurate engagement requirements, or proper authorization for engagement scope
• Any content, data, or information you submit to the Platform

14. Dispute Resolution

14.1 Informal Resolution

Before initiating formal proceedings, you agree to first attempt to resolve any dispute informally by contacting us at legal@cybered.academy. We will attempt to resolve the dispute within thirty (30) days of receipt of your notice.

14.2 Binding Arbitration

If informal resolution is unsuccessful, any dispute, controversy, or claim arising out of or relating to these Terms, or the breach, termination, or invalidity thereof, shall be settled by binding arbitration administered by the American Arbitration Association (“AAA”) under its Commercial Arbitration Rules then in effect. The arbitration shall be conducted by a single arbitrator in New York, New York, United States. The language of the arbitration shall be English.

The arbitrator’s award shall be final and binding and may be entered as a judgment in any court of competent jurisdiction. Each party shall bear its own costs and attorneys’ fees, unless the arbitrator determines that a party’s claims or defenses were frivolous, in which case the arbitrator may award reasonable attorneys’ fees to the prevailing party.

14.3 Class Action Waiver

YOU AGREE THAT ANY DISPUTE RESOLUTION PROCEEDINGS WILL BE CONDUCTED ONLY ON AN INDIVIDUAL BASIS AND NOT IN A CLASS, CONSOLIDATED, OR REPRESENTATIVE ACTION. YOU WAIVE ANY RIGHT TO PARTICIPATE IN A CLASS ACTION LAWSUIT OR CLASS-WIDE ARBITRATION.

14.4 Exceptions

Notwithstanding the above, either party may seek injunctive or other equitable relief in any court of competent jurisdiction to prevent the actual or threatened infringement, misappropriation, or violation of intellectual property rights or confidentiality obligations.

14.5 Governing Law

These Terms shall be governed by and construed in accordance with the laws of the State of New York, United States, without regard to its conflict of laws provisions.

15. Termination

15.1 Termination by You

You may terminate your account at any time by contacting us at privacy@cybered.academy. Upon receiving your request, we will:

• Disable your account access within five (5) business days
• Process any outstanding payouts owed to you (for Talent)
• Retain data as required by our data retention policy (see our Privacy Policy)
• Delete or anonymize your personal data upon request, subject to legal retention requirements

Termination does not release you from any obligations arising from engagements that are in progress or pending completion at the time of termination.

15.2 Termination by ISMG

We may suspend or terminate your account, in whole or in part, at any time and for any reason, including but not limited to:

• Violation of these Terms or any applicable Platform policy
• Fraudulent, abusive, or illegal activity
• Repeated poor performance, no-shows, or unreliability (for Talent)
• Non-payment or persistent payment disputes (for Clients)
• Failure to maintain accurate credentials or profile information
• Conduct that harms or threatens the safety, reputation, or interests of other users or ISMG

We will provide reasonable notice before termination unless immediate termination is necessary to protect the safety or security of the Platform or its users.

15.3 Effect of Termination

Upon termination, the following provisions survive: Sections 7.4 (Governing Law), 8 (Payment Terms, for outstanding obligations), 9 (Intellectual Property), 10 (Confidentiality), 12 (Limitation of Liability), 13 (Indemnification), 14 (Dispute Resolution), and this Section 15.3.

16. Modifications to Terms

We reserve the right to modify these Terms at any time. If we make material changes, we will:

• Post the updated Terms on this page with a revised “Last Updated” date
• Notify registered users via email at least thirty (30) days before the changes take effect
• Provide a summary of the material changes

Your continued use of the Platform after the effective date of modified Terms constitutes acceptance of the changes. If you do not agree to the modified Terms, you must stop using the Platform and may terminate your account in accordance with Section 15.1.

Non-material changes (e.g., corrections, formatting, clarifications) may be made without notice and take effect immediately upon posting.

17. General Provisions

17.1 Entire Agreement

These Terms, together with the Privacy Policy, any executed MSSA, SOW, NDA, and other agreements referenced herein, constitute the entire agreement between you and ISMG regarding the Platform. These Terms supersede all prior or contemporaneous oral or written communications, proposals, and representations with respect to the Platform.

17.2 Severability

If any provision of these Terms is held to be invalid, illegal, or unenforceable, the remaining provisions shall continue in full force and effect. The invalid provision shall be modified to the minimum extent necessary to make it valid and enforceable while preserving its original intent.

17.3 Waiver

The failure of ISMG to enforce any provision of these Terms shall not constitute a waiver of that provision or the right to enforce it at a later time. Any waiver must be in writing and signed by an authorized representative of ISMG.

17.4 Assignment

You may not assign or transfer your rights or obligations under these Terms without our prior written consent. ISMG may assign these Terms without restriction, including in connection with a merger, acquisition, or sale of assets.

17.5 Force Majeure

Neither party shall be liable for any failure or delay in performing its obligations under these Terms due to circumstances beyond its reasonable control, including acts of God, natural disasters, pandemic, war, terrorism, government actions, power failure, internet or telecommunications failure, or cyberattacks.

17.6 Notices

All notices required or permitted under these Terms shall be in writing and shall be deemed given when delivered by email to the email address associated with your account (for notices to you) or to legal@cybered.academy (for notices to ISMG).

17.7 Third-Party Beneficiaries

These Terms are for the benefit of the parties hereto and do not confer any rights on any third party, except that Talent professionals are intended third-party beneficiaries of the Client’s obligations regarding engagement environment and safety (Section 5.2).

17.8 Headings

The section headings in these Terms are for convenience only and have no legal or contractual effect.

18. Contact Information

For questions about these Terms of Service, please contact us:

© 2026 Information Security Media Group, Inc. All rights reserved.