Assessments and simulations require authorization from the asset or organization administrator, with scope, timing and stop conditions agreed in advance. No testing, messaging or data intake without permission.
Simulations do not collect real passwords. Materials and examples do not represent actual customer results.