Code of Conduct

Purpose

The South Asian Cyber Shield Championship is a competition built on the principles of ethical cybersecurity. This Code of Conduct exists to ensure a respectful, professional, and fair environment for all participants, organizers, and sponsors. We are committed to providing a harassment-free experience for everyone, regardless of gender, age, sexual orientation, disability, physical appearance, body size, race, ethnicity, nationality, religion, or experience level.

Expected Behaviour

All participants are expected to:

• Treat all competitors, organizers, and sponsors with respect and professionalism
• Use only the infrastructure and challenges explicitly provided for the competition
• Report vulnerabilities discovered in competition infrastructure responsibly to organizers
• Respect the spirit of the competition — challenges are meant to be solved through skill and ingenuity
• Provide constructive feedback to organizers when requested
• Maintain the confidentiality of any non-public information shared during the event
• Follow all instructions from event moderators and administrators

Prohibited Conduct

The following actions are strictly prohibited:

• Harassment, intimidation, discrimination, or any form of abuse toward any participant or organizer
• Denial-of-service attacks or any action that disrupts competition infrastructure
• Attempting to access, modify, or exfiltrate data outside of designated challenge scopes
• Sharing flags, solutions, or hints with other participants during the competition (post-event discussion is encouraged)
• Impersonating organizers, sponsors, or other participants
• Using automated tools to brute-force flags or bypass challenge mechanics unless explicitly permitted
• Violating any applicable local, national, or international laws
• Registering multiple accounts or attempting to participate under false identities
• Collusion between teams or sharing of credentials

Responsible Disclosure

If you discover a vulnerability in the competition platform, infrastructure, or any challenge outside its intended scope:

• Immediately cease any testing of the vulnerability
• Report it privately to the organizing team via the designated channel or by emailing ctf@netaegis.com
• Do not disclose the vulnerability to other participants or publicly until organizers have had reasonable time to address it
• Do not exploit the vulnerability for competitive advantage

Reporting

If you experience or witness a violation of this Code of Conduct:

• Contact a competition administrator or moderator directly through the event's communication platform
• Email the conduct team at conduct@netaegis.com — all reports will be kept confidential
• Provide as much detail as possible, including timestamps, screenshots, and descriptions of the incident

Enforcement

Violations of this Code of Conduct will be addressed at the discretion of the organizing team. Consequences may include, but are not limited to:

• A verbal or written warning
• Point deductions or nullification of specific challenge solves
• Temporary or permanent disqualification from the competition
• Ban from future NetAegis events and competitions
• Referral to appropriate authorities for legal violations

Appeal

Participants who have been sanctioned may appeal the decision by emailing appeals@netaegis.com within 7 days of notification. Appeals will be reviewed by a panel of organizers not involved in the original decision.

Scope

This Code of Conduct applies to all competition-related spaces, including but not limited to the competition platform, official communication channels (Discord, forums, email), social media channels, and any in-person or virtual events associated with the championship.

Contact

For questions about this Code of Conduct, please reach out to:

• Conduct team: conduct@netaegis.com
• Competition inquiries: ctf@netaegis.com
• Appeals: appeals@netaegis.com