Shiryon Security Operations

Usage Policy

Last updated: July 2026

This Usage Policy covers acceptable use of the Phishing Field Training platform. By signing in, you agree to the terms below.

Who This Is For

Access to this platform is limited to employees and contractors of client organizations that have approved a working relationship with Shiryon Security. Access is granted automatically based on your work email domain — if your organization hasn't been approved, sign-in will be blocked regardless of which account you use.

Acceptable Use

Complete the training modules yourself, in good faith — the exercises are designed to reflect your actual judgment when encountering suspicious messages, and the value of the training (to you and your employer) depends on that being genuine.
Don't share your login session, attempt to complete training on someone else's behalf, or attempt to manipulate or automate responses to inflate a score.
Don't attempt to probe, scan, or interfere with the platform's infrastructure, authentication flow, or underlying systems.
Content within the training modules (simulated phishing emails, texts, and calls) is fictional and provided strictly for educational purposes — don't reuse, repost, or repurpose it outside the training context.

Administrator Access

Designated administrators at each client organization can view aggregated and individual results for their own company through the admin dashboard. Administrator access is restricted to a named allowlist maintained by Shiryon Security in coordination with the client organization, and administrators are expected to use that visibility responsibly — for supporting and improving their organization's security awareness, not for punitive tracking of individual employees.

No Warranty

This platform is provided for security awareness training purposes on an "as-is" basis. Completing the training, or achieving a high readiness score, is not a guarantee against real-world phishing attempts — it's one part of a broader security awareness effort, not a substitute for your organization's own policies, tools, and judgment.

If you receive a message you're unsure about outside of this training environment, don't treat anything you've learned here as a substitute for your company's actual incident-reporting process — when in doubt, report it through your normal channel.

Availability

We aim to keep this platform available and responsive, but don't guarantee uninterrupted access. Maintenance, updates, or issues with underlying infrastructure providers (Cloudflare, Google, Microsoft) may occasionally affect availability.

Changes to This Policy

We may update this policy as the platform evolves. Continued use after a change constitutes acceptance of the revised terms. The "Last updated" date above reflects the most recent revision.

Contact

Questions about this policy should be directed to your company's IT or security administrator, or to Shiryon Security directly through your existing points of contact.