The rules of the road.

HackFirstAid is not a law firm and does not provide legal advice. Reading this site, downloading a resource, subscribing to a newsletter, using the free triage tool, or engaging us for services does not create an attorney-client relationship. Consult counsel admitted in your jurisdiction on any legal question.

Playbooks, checklists, and other content are provided for educational and operational purposes. They are current as of the date shown and may become out of date. We make no warranty that any content is complete, accurate, or applicable to your firm's facts.

You agree not to:

• Use the site to violate any law or third-party right.
• Submit false information through the inquiry, triage, subscription, or download forms.
• Scrape, mirror, or bulk-download content without permission.
• Attempt to breach, probe, or interfere with the site's security controls (other than good-faith coordinated disclosure — see below).

Site copy, playbooks, checklists, and downloads are © HackFirstAid. You may share and reproduce them inside your firm for operational use with attribution. Any other reuse (republishing, resale, incorporation into a competing product) requires written permission.

Paid engagements are governed by a separate written agreement (statement of work or services agreement) that supersedes these terms as to scope, fees, deliverables, confidentiality, and liability. These site terms remain applicable to your general use of the site.

The site and free resources are provided as-is, without warranty of any kind — express or implied — including merchantability, fitness for a particular purpose, and non-infringement. Cybersecurity reduces risk; it does not eliminate it.

To the maximum extent permitted by law, HackFirstAid's aggregate liability arising out of or related to your use of the site or free resources is limited to USD $100. Liability under a paid engagement is governed by that engagement's written agreement. Nothing here limits liability that cannot be limited under applicable law.

If you discover a security vulnerability in the site, please report it in good faith to security@hackfirstaid.com before public disclosure. We appreciate the notice and will respond promptly.

These terms are governed by the laws of the jurisdiction in which HackFirstAid is established, without regard to conflict-of-laws principles. Where local consumer-protection law applies, nothing here overrides your rights under that law.

We may update these terms; material changes will be noted at the top with an updated date. Continued use after the update constitutes acceptance.