Skip to main content
Get Started

Terms of Use

Last updated: July 14, 2026

These Terms of Use (“Terms”) govern your access to and use of the AppSec Forge website, repositories, digital content, documentation, and related materials (collectively, the “Service”).

By accessing, downloading, purchasing, or using any part of the Service, you agree to be bound by these Terms.

If you do not agree with these Terms, please do not use the Service.

About AppSec Forge

AppSec Forge is a GitHub-hosted, case-based security knowledge base designed for software engineers, DevOps, DevSecOps, AppSec engineers, security researchers, and technical learners. The Public Edition is also mirrored on GitLab, while the Pro Edition is available exclusively as a private GitHub repository.

The project provides production-inspired security cases covering:

  • application security
  • secure coding
  • infrastructure security
  • cloud security
  • DevSecOps
  • CI/CD security
  • supply-chain security
  • AI security
  • security tooling
  • defensive engineering practices

AppSec Forge is intended for educational and professional learning purposes.

Public and Pro Versions

The Service may include multiple editions, including but not limited to:

  • AppSec Forge (public)
  • AppSec Forge Pro (private)

Different editions provide different levels of technical depth, documentation, examples, and implementation guidance.

Purchasing access to one edition does not automatically grant access to other editions unless explicitly stated.

License

Unless otherwise stated, all content is protected by copyright and other applicable intellectual property laws.

Purchasing or accessing AppSec Forge grants you a limited, non-exclusive, non-transferable, revocable license to use the materials for your own personal or internal professional learning.

You may:

  • study the provided materials;
  • use ideas and techniques in your own software projects;
  • modify code examples for your own development or research;
  • use the repository as a learning resource.

You may not:

  • redistribute the repository or its contents;
  • publish the materials as your own work;
  • resell, sublicense, or commercially redistribute any part of the content;
  • upload the private repository to public Git hosting services;
  • share private repository access with other individuals;
  • use the content to create competing educational products that substantially reproduce AppSec Forge.

Ownership of all intellectual property remains with AppSec Forge unless explicitly stated otherwise.

Acceptable Use

You agree not to use the Service:

  • for unlawful purposes;
  • to violate applicable laws or regulations;
  • to infringe intellectual property rights;
  • to bypass licensing or access controls;
  • to interfere with the availability or security of the Service.

Educational Disclaimer

AppSec Forge contains intentionally vulnerable code, insecure configurations, exploit demonstrations, offensive techniques, and production security discussions.

These materials exist solely to explain security concepts and defensive engineering practices.

You are solely responsible for how you use the information.

Do not execute exploit demonstrations or security testing against systems that you do not own or have explicit authorization to test.

Production Use

All code samples, configurations, infrastructure examples, DevSecOps configs, scripts, security controls, detection rules, checklists, and other materials are provided as educational reference implementations.

They are not intended to be copied directly into production environments.

Every organization, application, infrastructure, threat model, compliance requirement, and operational environment is different. Any material from AppSec Forge should be reviewed, validated, tested, and adapted before use.

This applies to all editions of AppSec Forge, including both the Public and Pro editions.

No Professional Security Advice

The Service provides educational information only.

Nothing contained in AppSec Forge constitutes:

  • legal advice;
  • compliance advice;
  • cybersecurity consulting;
  • security certification;
  • guarantees of secure software.

Security decisions remain your responsibility.

Accuracy of Information

The content is based on real-world engineering experience and reflects security practices considered useful at the time of publication.

However:

  • technologies evolve;
  • security recommendations change;
  • new vulnerabilities emerge;
  • frameworks and tools receive updates.

No warranty is made that every example remains complete, current, or applicable to every environment.

Repository Updates

AppSec Forge may receive updates, corrections, improvements, new cases, reorganized content, or structural changes.

Availability of future updates depends on the edition purchased and any applicable licensing terms.

We reserve the right to modify the Service at any time.

Payments

If paid products are offered:

  • all prices are displayed before purchase;
  • payment processing is handled by third-party providers;
  • access is granted after successful payment;
  • taxes may apply depending on your jurisdiction.

We do not store payment card information.

Refunds

Refunds are governed by the separate Refund Policy available on this website.

Intellectual Property

All repository structure, written documentation, diagrams, educational content, original examples, branding, and accompanying materials are protected by intellectual property laws.

Open-source software referenced inside examples remains subject to its respective license.

Trademarks referenced within the educational material remain the property of their respective owners.

Third-Party Technologies

The Service may reference:

  • programming languages;
  • frameworks;
  • cloud providers;
  • open-source projects;
  • security tools;
  • commercial products.

Such references are provided for educational purposes only and do not imply endorsement, partnership, sponsorship, or affiliation.

Limitation of Liability

To the maximum extent permitted by applicable law, AppSec Forge shall not be liable for any indirect, incidental, consequential, special, exemplary, or punitive damages arising from your use of the Service.

This includes, without limitation:

  • software defects;
  • production outages;
  • data loss;
  • security incidents;
  • business interruption;
  • financial losses;
  • compliance failures.

You assume full responsibility for applying any techniques or recommendations presented in the Service.

No Warranty

The Service is provided on an “AS IS” and “AS AVAILABLE” basis.

No warranties, express or implied, are made regarding:

  • availability;
  • accuracy;
  • completeness;
  • fitness for a particular purpose;
  • uninterrupted operation;
  • absence of errors.

Termination

We reserve the right to suspend or terminate access to the Service if these Terms are violated or if access is abused.

Termination does not transfer any ownership rights to the user.

Changes to These Terms

These Terms may be updated from time to time.

The current version published on this website supersedes all previous versions.

Continued use of the Service after changes become effective constitutes acceptance of the updated Terms.

Contact

If you have questions regarding these Terms, please contact:

Email: your-email@gmail.com