Authorization comes first
Use security techniques only on systems you own or are explicitly authorized to assess. A tool, checklist, template or public portfolio does not provide permission to test a target. Obtain written authorization and a clearly bounded scope before any testing.
What the portfolio tools do
The public tools are browser-based demonstrations and planning aids. They do not scan websites, connect to target systems, exploit vulnerabilities or perform an assessment on your behalf. Do not enter secrets, credentials, private client data, personal records or sensitive production evidence.
Do not
- Use the site to facilitate unauthorized access, disruption, fraud, harassment or unlawful surveillance.
- Submit malware, credentials, authentication tokens or sensitive vulnerability evidence into forms, sample fields or email.
- Misrepresent an educational score or generated template as an audit opinion, certification, legal conclusion or completed test.
- Attempt to interfere with the availability or security of the website or its hosting provider.
Professional and educational contexts
For a training exercise or assessment, define a safe environment, consent, data-handling rules and stop conditions in advance. Remove or anonymize real identifiers before using examples in public materials.
Report a concern
If you identify a possible vulnerability in this website, see the security and vulnerability disclosure guidance. Do not probe further, access other users’ data or publish unredacted evidence.
Questions about this site? Contact Abdullah by email. This is general website information, not legal advice or a negotiated professional-services agreement.