Terms of Use

Rooted is a technology platform for people working in information security and for organisations interested in talent, research, responsible disclosure and cybersecurity.

Among other things, Rooted may allow you to:

• create professional or research profiles;
• show experience, knowledge and technical activity;
• import or verify credentials held on external services;
• record certifications, CVEs, repositories, technical activity, labs or other evidence;
• publish or read write-ups and technical content;
• take part in quizzes, labs and other activities;
• build a verifiable history, or ledger, of activity;
• receive points, levels, badges, rankings or categories;
• browse job opportunities;
• contact companies or apply to them;
• browse Vulnerability Disclosure, Coordinated Vulnerability Disclosure and Bug Bounty programmes;
• submit vulnerability reports where that feature is available;
• connect researchers, professionals and organisations.

Rooted is primarily a technology platform for information, reputation, accreditation and connection.

Unless Rooted states otherwise in writing for a specific case, Rooted is not an employer, an employment agency, a representative of the companies listed, an operator of third-party Bug Bounty programmes, the owner of the systems listed, a legal adviser, an official certifying body, or a source of authorisation to carry out security testing against third-party infrastructure.

To create an account and use features relating to vulnerability research, Bug Bounty, report submission, job applications or credential verification, you must:

• be at least eighteen (18) years old;
• have the legal capacity to accept these Terms;
• comply with the laws applicable in your jurisdiction; and
• use the Platform only for lawful purposes.

Rooted may ask for additional information to confirm your identity, age, ownership of external accounts, relationship with a company or other relevant facts.

Rooted may limit or refuse access where there is reasonable doubt about identity, age, the legitimacy of the activity, or compliance with these Terms.

You are responsible for keeping your sign-in credentials confidential.

You may not:

• share accounts;
• sell, rent, transfer or assign an account;
• use false identities to mislead other users;
• impersonate another person;
• impersonate a company;
• use credentials obtained illegitimately;
• create accounts to evade an earlier suspension;
• create accounts in bulk through automation.

You are responsible for all activity carried out from your account, except where you can reasonably show that the activity followed a security breach outside your control.

If you suspect unauthorised access, tell Rooted at cybersentinelorg@gmail.com.

You agree to provide information that is true, reasonably current and not misleading.

Rooted may allow public aliases, usernames or callsigns. Using an alias does not entitle you to misrepresent credentials, experience, certifications, professional identity or attribution of findings.

Rooted may ask for further evidence to verify any claim made on a profile.

Rooted reserves the right to:

• correct plainly incorrect information;
• mark information as unverified;
• withdraw verifications;
• request new evidence;
• hide content;
• reduce visibility;
• suspend profiles;
• invalidate points or achievements obtained irregularly.

Rooted may let you link or demonstrate information held on third-party platforms and services, including but not limited to:

• Hack The Box;
• TryHackMe;
• GitHub;
• certifying bodies;
• educational platforms;
• CVE databases;
• personal sites;
• public repositories;
• other sources.

The availability and behaviour of those integrations depends wholly or partly on third parties.

Rooted does not control those services and does not guarantee:

• their continued availability;
• the accuracy of their APIs;
• the persistence of their data;
• their privacy policies;
• their authentication mechanisms;
• that an integration will remain available in future.

You confirm that you have the right to link the accounts or information you provide.

Rooted may consult public sources or authorised services to verify information.

A label such as “verified” means only that Rooted obtained particular evidence or confirmation, under its internal procedures, at a particular moment.

It does not mean Rooted guarantees all of your professional ability, knowledge, conduct, future identity or performance.

Rooted may operate an evidence-based reputation system, which can include points, ranks, levels, badges, a verifiable history and other measures.

These elements:

• are internal features of Rooted;
• are not money;
• are not virtual currency;
• do not represent any shareholding;
• do not create a right to payment;
• are not transferable;
• do not guarantee employment;
• do not guarantee being hired;
• are not necessarily equivalent to an official professional certification.

Rooted may set and change the scoring rules, requirements, limits, validation mechanisms and ranks.

Changes may apply going forward and, where necessary to preserve the integrity of the system, may also adjust earlier scores.

Rooted may correct, withdraw, freeze or recalculate points, rankings or verifications where there are indications of:

• fraud;
• duplication;
• plagiarism;
• manipulation;
• impersonation;
• falsified evidence;
• technical errors;
• exploitation of the Platform itself;
• abuse of automation;
• incorrect information from an external source;
• reports later found invalid;
• revoked certifications;
• external accounts that do not belong to you;
• any other circumstance affecting the reliability of the system.

These actions are not a financial penalty.

Rooted will aim to act reasonably, but reserves discretion to protect the integrity of its reputation system.

Rooted may distinguish between historical achievements and credentials that are currently valid.

The historical existence of an achievement does not necessarily mean your skills have been verified recently.

Rooted may set validity periods for documents, credentials, featured profiles or positions within rankings.

The applicable criteria may be published on the Platform and changed reasonably.

Some of the jobs and opportunities shown on Rooted may come from:

• public company pages;
• job sites;
• career pages;
• job boards;
• APIs;
• public feeds;
• third-party postings;
• aggregators;
• partner organisations;
• information sent to Rooted;
• publicly accessible sources.

The presence of an opportunity on Rooted does not necessarily mean the company created, reviewed, authorised or sponsored the listing within Rooted.

Unless expressly stated otherwise, Rooted acts as an aggregator, index or technical intermediary for information.

Trade marks, trade names and logos belong to their respective owners and are used for identification only.

Rooted makes reasonable efforts to keep information current, but does not guarantee that a listing will:

• remain open;
• have vacancies available;
• keep the salary shown;
• keep the requirements published;
• accept candidates from your country;
• allow remote work;
• keep the same contractual arrangement;
• keep any other condition originally stated.

The company or the original source may change or withdraw an opportunity without telling Rooted first.

Where there is any discrepancy, the employer's official posting or the original source prevails over the summary shown by Rooted.

Check the information before making decisions that matter.

The appearance of an opportunity, a recommendation, a particular ranking, or the ability to send an application does not guarantee:

• an interview;
• a reply;
• being hired;
• employment;
• pay;
• visa sponsorship;
• that a vacancy will continue;
• success as a candidate.

Hiring decisions belong entirely to the companies concerned.

Rooted is not responsible for decisions taken by employers, nor for communications, interviews, rejections, offers, contracts or employment relationships entered into outside the Platform.

When you choose to apply through Rooted, you authorise Rooted to send the receiving organisation the information reasonably needed for the application.

That may include:

• your name or alias;
• professional information;
• your profile;
• your CV;
• messages;
• your pitch;
• your rank;
• your points;
• your credentials;
• verified evidence;
• public links;
• any other data you select, or whose transmission the feature requires.

Where an application redirects you to an external site, you become subject to that third party's terms and privacy policy.

Rooted does not control what happens on that site afterwards.

Organisations using Rooted must provide true information and use the Platform in good faith.

They may not:

• post jobs that do not exist;
• ask candidates for illegitimate payments;
• carry out phishing;
• collect information without a legitimate purpose;
• use profiles for spam;
• sell databases;
• harass users;
• engage in unlawful discrimination;
• use information obtained through Rooted for unlawful purposes.

Rooted may verify companies and withdraw access from any it considers fraudulent, abusive or risky.

A company verification carried out by Rooted is not an absolute guarantee of that company's solvency, reputation, working conditions or future legitimacy.

Rooted shows information about Bug Bounty programmes, Vulnerability Disclosure Programs (“VDP”), Coordinated Vulnerability Disclosure (“CVD”) and other vulnerability reporting mechanisms.

A substantial part of that information may be taken from external, public sources.

Rooted may organise, classify, translate, summarise or present that information to make it easier to read.

UNLESS EXPRESSLY STATED, ROOTED IS NEITHER THE OPERATOR NOR THE OWNER OF THOSE PROGRAMMES.

This clause is essential.

The mere appearance of a company, domain, application, API, system, IP address, programme or asset within Rooted DOES NOT constitute authorisation to carry out security testing.

Rooted has no authority to grant permission over infrastructure belonging to third parties.

Authorisation can only come from the rightful owner of the asset, or from someone with sufficient legal authority to grant it.

You must confirm that authorisation before starting any activity.

Anything Rooted shows about:

• scope;
• safe harbor;
• assets in scope;
• assets excluded;
• rewards;
• response times;
• severities;
• testing rules;
• prohibited methods;
• disclosure;
• requirements;
• the conditions of a programme;

is an informational summary.

It does not replace the official policy.

Before any testing, open, read and check the original, current policy of the programme.

If Rooted and the original source contradict each other:

THE SYSTEM OWNER'S ORIGINAL POLICY ALWAYS PREVAILS.

That includes contradictions about whether actively searching for vulnerabilities is permitted at all.

Security policies can change at any time.

A programme may:

• close;
• pause reports;
• change scope;
• remove assets;
• add assets;
• change rewards;
• remove safe harbor;
• change the techniques it permits;
• change contacts;
• change requirements.

Rooted does not guarantee real-time accuracy.

Before each research session, check the original conditions again.

Authorisation that may have existed in the past must not be assumed to still hold.

Any classification Rooted applies regarding “Safe Harbor”, “Full”, “Partial”, “Basic”, “Strong”, “Good Faith”, “CVD” or similar wording is for information only.

It is not legal advice and it is not a guarantee of civil or criminal immunity.

Even where a policy contains language favourable to good-faith researchers, you must follow its requirements strictly.

Rooted does not guarantee how an organisation, a supplier, a public authority, an affected third party or a court will interpret a policy.

You acknowledge that the existence of a security contact address, a security.txt file, a CVD channel, a disclosure form or a vulnerability reporting procedure does not necessarily mean you are authorised to actively search for vulnerabilities.

Some channels exist only to receive reports about problems discovered some other way.

It is your responsibility to tell the difference between:

• a channel for receiving reports;
• express authorisation to carry out testing.

Where authorisation to test does exist, you must keep your activity strictly within the published scope.

You must not assume that:

• a subdomain is in scope because the main domain is;
• an API is in scope because the website is;
• a supplier's infrastructure is in scope because it serves the company;
• a mobile app is in scope because the web domain is;
• technically related assets are automatically part of the programme.

If in any doubt, do not run the test, and ask the relevant owner for authorisation.

Unless the asset owner has given express and unambiguous authorisation, you must not use Rooted to facilitate or justify:

• unauthorised access;
• denial of service;
• DDoS;
• resource exhaustion;
• ransomware;
• malware;
• persistence;
• destruction of information;
• modification of real data;
• extortion;
• threats;
• social engineering;
• phishing;
• physical attacks;
• credential stuffing;
• password spraying;
• brute force;
• spam;
• exploitation against third parties;
• mass data extraction;
• access to real users' information;
• selling access;
• trading in stolen data;
• any unlawful activity.

Where impact can be demonstrated without accessing further information, stop there.

Apply the principle of minimum exposure.

If, during authorised testing, you come across potentially sensitive information, avoid reading, downloading, copying or retaining more of it than is strictly necessary to demonstrate the finding safely.

Do not include in a report, unnecessarily:

• real passwords;
• financial data;
• medical information;
• identity documents;
• data about minors;
• trade secrets;
• live tokens;
• credentials;
• third parties' personal information;
• entire databases.

Rooted may delete, hide, encrypt, restrict or redact sensitive information included unnecessarily in a report.

Each user is solely responsible for determining:

• whether they are authorised to run the test;
• which laws apply to them;
• what the limits of the programme are;
• which techniques are permitted;
• which systems are in scope;
• when to stop.

Rooted cannot be used as a defence that:

• “the domain was listed on Rooted”;
• “Rooted said there was safe harbor”;
• “Rooted was showing the programme”;
• “Rooted let me send a report”.

None of those replaces the owner's authorisation.

Rooted may provide mechanisms to structure, receive, store, assess or transmit vulnerability reports.

You authorise Rooted to process the report and, where relevant, share it with:

• the affected organisation;
• the programme operator;
• their security team;
• triage providers;
• technical advisers;
• others needed to manage the disclosure.

Rooted may ask for further information before processing a report.

Sending a report through Rooted does not guarantee that:

• the owner receives it;
• they read it;
• they accept it;
• they consider it valid;
• they reply;
• they fix the problem;
• they credit the researcher;
• points are awarded;
• a reward is paid.

Where a programme requires a specific external channel, Rooted may require you to use that channel directly.

Rooted may review reports to decide whether they meet its internal conditions for awarding reputation or points.

The researcher's own classification is not binding.

Rooted, the affected company or the programme operator may reclassify:

• severity;
• impact;
• duplication;
• scope;
• validity;
• quality;
• eligibility.

Rooted may withhold points until the organisation confirms the finding.

Unless stated otherwise, the following may earn no points:

• duplicate reports;
• vulnerabilities already known;
• informational issues;
• problems with no demonstrable impact;
• false reports;
• testing outside scope;
• findings obtained by breaking the rules;
• copied reports;
• automatically generated results with no validation;
• findings that cannot reasonably be reproduced.

Rooted may change these criteria.

Where Rooted displays amounts such as:

• “up to USD 3,000”;
• “up to EUR 7,000”;
• “pays rewards”;
• similar wording;

those amounts come from the relevant external programme, unless Rooted expressly states otherwise.

ROOTED NEITHER GUARANTEES NOR FUNDS THOSE REWARDS.

Unless expressly stated, Rooted is not:

• the payer;
• an escrow;
• a payment processor;
• a guarantor;
• a collections agent;
• responsible for the programme's financial performance.

The decision to pay, the amount, the payment method, tax requirements, territorial eligibility and timing are the third party's.

Including a name, brand, employer or programme does not imply:

• partnership;
• sponsorship;
• affiliation;
• endorsement;
• representation;
• any mandate;
• agency;
• a joint venture;
• any commercial relationship with Rooted.

Where an official relationship does exist, Rooted may identify it expressly.

Rooted may display information obtained from third parties, including:

• job titles;
• salaries;
• company names;
• locations;
• role descriptions;
• security policies;
• domains;
• scopes;
• rewards;
• CVEs;
• certification data;
• public statistics;
• logos;
• links;
• profile information;
• other data.

That information may contain errors, be out of date, or change without notice.

Rooted may correct or remove it at any time.

Rooted contains links to sites it does not control.

When you follow them you leave the environment Rooted controls and become subject to that third party's conditions, policies and security measures.

Rooted is not responsible for:

• content;
• availability;
• security;
• malware;
• commercial decisions;
• privacy;
• offers;
• contracts;
• products;
• security policies;
• the actions of those sites.

You keep, in principle, whatever rights you hold in the original content you publish.

By uploading content to Rooted you grant Rooted a worldwide, non-exclusive, royalty-free and sublicensable licence, to the extent needed to:

• host it;
• store it;
• reproduce it;
• display it;
• index it;
• convert formats;
• generate previews;
• translate it;
• moderate it;
• distribute it within the Platform;
• verify it;
• use it to provide and improve the services.

This licence ends a reasonable time after the content is deleted, except for backups, legal records, information already shared with third parties, and content that must be kept for integrity and fraud prevention.

You are responsible for making sure you have the right to publish any write-up.

You must not publish:

• confidential information;
• trade secrets;
• stolen data;
• live credentials;
• third parties' private information;
• exploits under a disclosure embargo;
• details that breach disclosure agreements;
• content obtained unlawfully.

Rooted may delay, hide or withdraw a write-up where it considers that publishing it could cause harm or breach responsible disclosure obligations.

Where Rooted uses peer review, reviewers' opinions are their own.

Approval of a write-up within Rooted is not a professional audit and is not an absolute guarantee of accuracy.

Rooted may reverse an approval obtained through collusion, multiple accounts, artificial vote trading or other manipulation.

Rooted may offer educational challenges or assessments.

Unless expressly authorised, you may not:

• automate answers;
• share solutions to active assessments;
• use multiple accounts;
• exploit system errors to obtain points;
• manipulate timing;
• use bots to answer;
• interfere with grading mechanisms.

Rooted may run automated fraud detection.

Rooted may use automated systems and artificial intelligence tools for certain tasks, including:

• classification;
• translation;
• summarising;
• moderation;
• fraud detection;
• job matching;
• preliminary content analysis;
• user assistance;
• organising programmes;
• processing reports.

These systems can make mistakes.

No automated summary of a Bug Bounty or VDP policy replaces the original source.

Equally, unless Rooted expressly authorises it, you may not use bots, mass scraping, abusive automation or agents to manipulate rankings or overload the Platform.

Any recommendation of:

• jobs;
• candidates;
• programmes;
• labs;
• profiles;
• content;
• connections;

is a technical suggestion.

It is not a final professional assessment.

Rooted does not guarantee that a candidate suits a company, or that an opportunity suits a user.

You may not:

• harass other users;
• make threats;
• post unlawfully discriminatory content;
• dox anybody;
• promote criminal activity;
• sell unlawfully obtained access;
• trade in malware;
• solicit attacks;
• publish stolen data;
• send spam;
• carry out phishing;
• manipulate scores;
• falsify credentials;
• plagiarise content;
• sell accounts;
• use Rooted as command-and-control infrastructure;
• interfere with the operation of the Platform.

The existence of features relating to hacking or pentesting is not authorisation to run tests against Rooted.

You may not carry out security testing against Rooted's infrastructure except under a security programme officially published by Rooted, and within its scope.

Using flaws in Rooted to alter points, profiles, accounts, data or services is abuse.

Rooted may investigate activity it reasonably considers:

• fraudulent;
• abusive;
• unlawful;
• manipulative;
• harmful to third parties;
• contrary to a programme's rules;
• incompatible with these Terms.

Rooted may take proportionate measures, including:

• warnings;
• removing content;
• suspending points;
• reducing visibility;
• revoking verifications;
• temporary suspension;
• blocking features;
• closing the account.

Rooted may suspend an account as a precaution where it reasonably considers there is a risk of:

• fraud;
• unlawful access;
• a data leak;
• a threat to third parties;
• serious ranking manipulation;
• a security breach;
• legal non-compliance;
• significant reputational harm;
• harm to other users.

The measure may remain in place while the situation is reviewed.

You may request deletion of your account using the features available and in line with applicable law.

Rooted may keep certain records where needed to:

• meet legal obligations;
• investigate abuse;
• prevent fraud;
• resolve disputes;
• keep evidence of security actions;
• protect third parties' rights;
• keep anonymised or aggregated records.

Deleting an account does not necessarily require deletion of information already lawfully sent to an employer or external organisation.

The Platform, including its software, design, structure, interfaces, ranking systems, graphics, trade marks, code and own content, belongs to Rooted or its licensors.

You receive only a limited, revocable, non-exclusive and non-transferable licence to use the Platform in line with these Terms.

You may not copy, resell, sublicense or commercially exploit Rooted without authorisation.

The names and marks of:

• companies;
• certifying bodies;
• platforms;
• Bug Bounty programmes;
• universities;
• employers;
• products;
• services;

belong to their respective owners.

Their appearance on Rooted is descriptive or identifying and does not imply affiliation.

Owners may request corrections or removal of material at cybersentinelorg@gmail.com.

Rooted may experience:

• maintenance;
• errors;
• outages;
• temporary loss of features;
• infrastructure changes;
• supplier failures;
• attacks;
• incompatibilities;
• technical problems.

Rooted does not guarantee uninterrupted availability or any particular uptime, unless separately agreed in writing.

Rooted may:

• add;
• withdraw;
• change;
• reorganise;
• limit;
• replace;
• discontinue;

features.

That may include changes to:

• rankings;
• scoring criteria;
• bounties;
• jobs;
• profiles;
• integrations;
• verifications;
• plans;
• requirements;
• how access works;
• free features.

Where a change materially affects acquired rights, Rooted will aim to give reasonable notice where applicable law requires it.

Rooted may offer free features and, in time, paid ones.

A feature being free today does not mean it will remain free indefinitely.

Rooted will set out the commercial terms before you take up a paid feature.

Nothing in these Terms limits rights that consumers cannot waive under applicable law.

Each user is responsible for working out and meeting their own tax obligations arising from:

• prizes;
• rewards;
• employment contracts;
• freelance work;
• Bug Bounties;
• international payments;
• any income obtained through opportunities found via Rooted.

Rooted does not give tax advice.

The processing of personal data is also governed by Rooted's Privacy Policy, which should be read together with these Terms.

Rooted may process information needed to:

• create accounts;
• provide the services;
• verify credentials;
• prevent fraud;
• manage applications;
• process reports;
• improve the Platform;
• meet legal obligations;
• protect the security of users and third parties.

You may exercise the rights available under applicable law at cybersentinelorg@gmail.com.

Pay close attention to what you choose to make public.

Parts of a profile may be visible to:

• other users;
• companies;
• search engines;
• visitors without an account;
• anybody given a shared link.

Rooted will provide the privacy controls it considers appropriate for each feature.

Do not publish information you would not want third parties to see or copy.

Rooted will use reasonable measures to protect the Platform and the data under its control.

No system connected to the internet can guarantee absolute security.

You acknowledge the risks inherent in digital services.

This does not limit any legal obligations Rooted cannot waive.

Information Rooted provides about:

• safe harbor;
• legislation;
• scope;
• disclosure;
• authorisation;
• privacy;
• contracts;
• taxes;
• employment;
• information security;

is for information only.

It is not professional legal advice.

Where an activity may have legal consequences, get independent advice.

To the fullest extent permitted by applicable law, the Platform is provided “as is” and “as available”.

Rooted does not guarantee that:

• all information is accurate;
• every opportunity is current;
• every company replies;
• every programme permits testing;
• every bounty pays;
• every report is accepted;
• every ranking perfectly reflects a user's ability;
• the Platform is free of errors.

Rooted is not responsible for activity a user carries out against third-party systems without authorisation, or beyond the applicable scope.

You may not attribute to Rooted responsibility for actions you take outside the authorisations granted by the system owner.

Rooted does not instruct you to break into third-party systems merely by listing a programme in its directory.

To the fullest extent permitted by applicable law, Rooted is not liable for indirect, incidental or special damages, lost opportunities, lost profits, reputational loss, data loss, or decisions taken on the basis of third-party information.

Where limiting contractual liability is legally permitted, and save for wilful misconduct, gross negligence or any other exception that cannot be excluded by law, Rooted's total aggregate liability to a user will not exceed the greater of:

• the amounts actually paid by that user to Rooted in the twelve months before the event; or
• the equivalent of USD 100.

This limitation does not apply where mandatory rules prohibit it.

Nothing in these Terms is intended to exclude rights that cannot lawfully be waived.

If a consumer protection, data protection or other mandatory rule gives you greater protection than these Terms, that rule prevails.

To the fullest extent permitted by law, users acting in a professional, commercial or business capacity agree to hold Rooted harmless against third-party claims arising from:

• the user's unlawful activity;
• breach of scope;
• unauthorised access;
• content published without the right to do so;
• falsified credentials;
• breach of confidentiality;
• infringement of intellectual property;
• serious breach of these Terms.

This clause does not limit consumers' non-waivable rights.

Rooted may respond to legitimate requests from:

• domain owners;
• companies;
• trade mark holders;
• users;
• authorities;
• employers;
• programme operators;
• affected persons.

Rooted may remove content as a precaution where a claim is reasonably grounded.

Removing content does not necessarily mean Rooted accepts liability.

Rooted may preserve and provide information where required by:

• a court order;
• a competent authority;
• a legal obligation;
• where reasonably necessary to protect the rights, safety or integrity of people, in line with applicable law.

Rooted has no general duty to defend a user against investigations arising from that user's own conduct.

Users reach Rooted from many jurisdictions.

Each user must comply with the law that applies where they are acting, and where the system involved in an activity is located.

Activity permitted in one jurisdiction may be prohibited in another.

Rooted does not guarantee that every feature is lawful or appropriate in every country.

Where applicable, Rooted and its users must comply with international trade restrictions, economic sanctions, export controls and other relevant regulations.

Rooted may block services or accounts where it is legally obliged to do so.

You agree to receive communications about:

• security;
• your account;
• verifications;
• reports;
• applications;
• relevant changes;
• how the service works;
• legal matters.

Marketing communications may be subject to separate consent or opt-out options where required.

Rooted may update these Terms to reflect:

• new features;
• regulatory changes;
• security improvements;
• new business models;
• operational changes.

The date of last update will be published on this page.

Where a change is material, Rooted may use in-platform notices, email or other reasonable means.

Continued use after a change takes effect will mean acceptance, to the extent permitted by law.

You may stop using Rooted at any time.

Rooted may end or suspend the service entirely for commercial, technical, regulatory or security reasons.

Where reasonably possible, it will aim to give advance notice of significant changes.

Rooted is not liable for failures arising from events reasonably outside its control, including:

• widespread internet failures;
• supplier outages;
• cyber attacks;
• disasters;
• conflict;
• government decisions;
• power failures;
• infrastructure unavailability;
• similar events.

All without prejudice to legal obligations that cannot be excluded.

If any clause of these Terms is held invalid or unenforceable, that does not affect the remaining provisions.

The affected provision will be read, so far as legally possible, in the way that best preserves its original purpose.

Rooted's failure to exercise a right immediately does not mean it waives that right.

You may not transfer your account or your rights under these Terms without Rooted's authorisation.

Rooted may transfer, reorganise or assign rights and obligations connected with the Platform where necessary for operational, corporate, commercial or continuity reasons, complying with applicable legal obligations.

These Terms are governed by the laws of the Argentine Republic, without prejudice to mandatory rules applicable at the user's domicile.

Where a consumer relationship exists, the mandatory rules on jurisdiction and venue will be respected.

For commercial or professional relationships where choosing a forum is legally valid, any dispute will be submitted to the courts having jurisdiction under applicable law.

Rooted may publish these Terms in Spanish, English or other languages.

The Spanish version is the legally prevailing one, unless applicable law requires otherwise.

Translations are provided to aid understanding.

For general enquiries, support, privacy, security, abuse reports or legal matters: cybersentinelorg@gmail.com

Official website: https://rootedsec.online/

Rooted may change its contact channels where necessary, announcing it on the Platform.

As a final principle and an essential condition of using Rooted:

SEEING AN ASSET ON ROOTED DOES NOT MEAN YOU ARE ALLOWED TO ATTACK OR TEST IT.

Before any test:

check the original source, check the scope, check that authorisation exists, and stay exactly within its limits.

Rooted provides information and evidence.

Authorisation to research third-party systems can only come from someone with the legal right to grant it.