Terms of use
Last updated: January 2026
Important - please read and understand
These terms of use constitute a binding legal agreement between you and PhishingU. Please read them carefully before using the Site. Continued use of the Site constitutes full agreement to these terms.
Introduction
Welcome to the PhishingU website ("the Site"). The Site is operated by PhishingU ("the Company", "we", "our"). Use of the Site and the services offered on it is subject to the terms of use detailed below. By accessing and using the Site, you confirm that you have read, understood and agreed to these terms. If you do not agree to the terms, please refrain from using the Site.
Company Name and Corporate Details
The Site is operated by PhishingU, an Israeli company providing phishing simulation services, information security training and cyber threat awareness-raising. Any reference to "the Company" or "PhishingU" refers to PhishingU.
Intellectual Property and Copyrights
All content, design, graphics, texts, images, trademarks, logos, source code, software code, articles, guides and/or any other material appearing on this Site ("the Content") are the exclusive property of PhishingU or third parties that have permitted their use, and are protected under Israeli and international copyright, trademark and intellectual property laws. You may not copy, duplicate, distribute, sell, publish, modify, create derivative works or make any commercial or non-commercial use of the Content without obtaining express written consent from the Company. Copying content, design, code or any material from the Site constitutes an infringement of copyright and intellectual property rights and may lead to legal action. The name "PhishingU", the Company logo and other trademarks are the exclusive property of PhishingU.
Permitted Use of the Site
You may use the Site for legitimate personal and business purposes only. You may not use the Site for illegal purposes, violate the rights of others, upload offensive or malicious content, impair the operation of the Site or attempt to gain unauthorized access to its systems.
Company Services
PhishingU provides phishing simulation services, information security training, red team exercises and additional security consulting services ("the Services"). Service descriptions on the Site are general only and do not constitute a binding offer. Any engagement for the Services is subject to a separate agreement between the Company and the client. The Company reserves the right to change, add or remove Services at any time without prior notice.
Orders and Use of the Self-Serve Service
Ordering a phishing-simulation campaign or an awareness training through the self-serve service (app.phishingu.com) is subject, in addition to these terms of use, to the service-specific terms and privacy policy at https://app.phishingu.com/SelfServeLegal, which cover ordering, payment, cancellation, refunds and responsibility for employee data. In case of conflict between the documents, the service-specific terms prevail for a self-serve order.
Liability and Limitation of Liability
The Site and Content are presented "AS IS" without any warranty of any kind. The Company does not warrant uninterrupted availability of the Site and is not responsible for any direct or indirect damages resulting from use or inability to use the Site. The Company is not responsible for the accuracy, completeness or timeliness of information on the Site. Any reliance on information appearing on the Site is your sole responsibility. The Company shall not be liable for any damage, loss, lost profits, indirect or consequential damages arising from use of the Site.
Links to External Sites
The Site may contain links to third-party websites. These links are provided for your convenience only. The Company is not responsible for the content, privacy policies or practices of these external sites. Use of external sites is at your sole responsibility.
Privacy and Information Security
Use of the Site is subject to our privacy policy. We are committed to protecting your privacy and to taking appropriate security measures to protect information. For details, see our privacy policy.
Phishing Exposure Scan Policy
The Phishing Exposure Scan service (the "Scan Service") allows you to check the email authentication records of your domain (DMARC, SPF, DKIM) and receive an initial risk assessment. This service is subject to the following terms: a. Scan Authorization: You represent and confirm that you are the owner of the scanned domain, or that you have received explicit written authorization from the domain owner to perform the scan. Scanning without authorization constitutes a breach of these terms of use and may constitute a criminal offense. b. Nature of the Scan: The scan checks publicly available DNS records only (DMARC, SPF, DKIM). The full EASM scan runs only after your request and approval and includes ordinary HTTP requests to public addresses on the domain's servers and checks of information exposed on the network and in public databases. The scan does not include login attempts, password guessing, exploitation of vulnerabilities, aggressive port scanning, or downloading of content not intended for the public. It is designed not to affect site availability. If a scan caused a problem, contact us immediately. c. Service Limitations: Scan results constitute an initial assessment only and do not constitute professional security advice. Scan findings may be partial and are not a substitute for a comprehensive professional security audit. PhishingU is not responsible for decisions made based on scan results. d. Data Use: The email address you provide to receive the report will be stored and used to send the requested report. Subject to your consent, we may send you additional cybersecurity information. e. Usage Restrictions: It is strictly prohibited to use the Scan Service to check domains without authorization, for business competition purposes, or for any other illegitimate purpose.
Changes to Terms of Use
The Company may update and change the terms of use at any time. Changes will take effect from the moment of publication on the Site. Continued use of the Site after publication of changes constitutes agreement to the updated terms. It is recommended to check the terms of use from time to time.
Jurisdiction and Applicable Law
These terms of use are subject to the laws of the State of Israel only. Any dispute arising from these terms will be heard by the competent courts in the Tel Aviv-Jaffa district, Israel.
Indemnification
You undertake to indemnify the Company, its employees, managers and partners for any damage, loss, claim or expense incurred by them as a result of your breach of these terms of use or as a result of your use of the Site.
Severability
If any provision in these terms of use is determined to be invalid or unenforceable, it shall not affect the validity of the remaining provisions. The other provisions will remain in full force and effect.
Use of Company Name and Logo
You may not use the name "PhishingU", the Company logo or any other trademark belonging to the Company without express written permission from the Company. Any unauthorized use will constitute a violation of intellectual property rights.
Contact Regarding Terms of Use
For questions or clarifications regarding the terms of use, please contact: info@phishingu.com or by phone at +972-58-759-0000.