Zero Day Cloud Contest Rules

Official rules and regulations for participants

BY ENTERING INTO THE ZERO DAY CLOUD CONTEST (“CONTEST”), REGISTERING YOUR EXPLOIT AND/OR OTHERWISE PARTICIPATING AS A CONTESTANT IN THE CONTEST, YOU AGREE TO THESE CONTEST RULES (“CONTEST RULES”). WIZ CLOUD LIMITED, A COMPANY INCORPORATED UNDER THE LAWS OF ENGLAND AND WALES (“WIZ”) IS THE ORGANIZER OF THIS CONTEST.

1. ELIGIBILITY

Employees of Wiz or its affiliates and of the partner companies (AWS, Google Cloud, Microsoft) (“Partner Companies”) and their respective affiliates and/or subsidiaries, are not eligible to participate in the Contest.

Contestant(s) may enter the Contest as an individual Contestant or as a team. Individual Contestants or Contestants that are participating as a team may enter into this Contest on behalf of the company they are employed by. To participate as a team, the team must consist of a minimum of two members and a maximum of five members.

In order to participate in the Contest, each Contestant, whether participating as an individual or as part of a team, must be at the age of majority in their country, province or state of residence at the time of entering into the Contest and may not be a resident of Russia, China, Lebanon, Syria, Libya or any embargoed or sanctioned country (including the Crimea, Luhansk, Kherson, Zaporizhzhia or Donetsk regions, Cuba, Iran, North Korea or Sudan) or otherwise be listed on any sanctioned, denied or barred persons list.

If a team enters the Contest, unless otherwise specified hereunder these Contest Rules will apply to each individual member of a team as well as to the entire team as a whole. References to “Contestant(s)” in these terms shall mean an individual contestant or a team of contestants (as applicable).

If Contestant(s), including any teams that are Contestant(s) represent a company, they must identify which company they represent during the registration process. Contestant(s), including any Contestant(s) participating as a team can only register as representing a company if authorized to do so by the company they represent and must ensure that they have the full rights, permissions, consents and/or any other required approvals to participate in this Contest as a representative of the company and to bind the company to these Contest Rules.

Each Contestant(s) may register only once, either as an individual or as a team. If the registration is carried out on behalf of a company, only one registration is allowed per company - meaning either one individual or one team may represent that company in the Contest.

Any software or technology that Contestant(s) bring or cause to be transferred for purposes of the Contest, including to the country in which the Contest is held (“Contest Location”) may be subject to the export controls of Contestant’s country of residence or travel origin or subject to the import and export requirements of the Contest Location. Contestant(s) are responsible for compliance with any applicable import and export controls as a result of their participation in the Contest.

Wiz shall have the right at any time to require proof of identity and/or eligibility to participate in the Contest. Failure to provide such proof of identity and/or eligibility may result in disqualification. All personal and other information requested by and supplied to Wiz for the purpose of the Contest must be truthful, complete, accurate, and in no way misleading. Wiz reserves the right, in its sole discretion, to disqualify any Contestant(s) should such Contestant(s) at any stage supply untruthful, incomplete, inaccurate, or misleading personal details and/or information.

Contestant(s), including those that are public sector employees, must verify any ethics codes, laws, and/or regulations that govern their ability to accept items of value from companies with whom Contestant(s) conduct business. Contestant(s) must ensure that they obtain the necessary approval from their organization before participating in the Contest and/or accepting any item of value in connection with this Contest. In addition, public-sector employees, employees of K-12 public and private education institutions and all libraries, including public, private school, college or university, research, and private libraries can participate in the Contest only if they are doing so outside of their official status and not as part of their employment with those entities.

Wiz may require Contestant(s) to sign up to and provide information to a third party service provider so that such service provider can carry out relevant vetting checks on Contestant(s) and facilitate payment of prizes to winners of the Contest. Such vetting checks shall include, (a) ensuring that Contestant(s) provide relevant tax documentation and payment preferences (b) global sanction checks of Contestant(s); (c) agreement by Contestant(s) to certain terms, rules of engagement and codes of conduct of such third party service provider (d) ID verification of Contestant(s); (e) verification of age, residency or citizenship. Contestant(s) hereby agree and understand that such service provider may require Contestant(s) to provide it with certain information and/or to otherwise agree to certain terms and conditions of such third party service provider. Contestant(s) who do not pass the vetting checks and/or do not otherwise meet the requirements under these Contest Rules will not be accepted to participate in the Contest.

Wiz shall in no event be liable for (i) non-payment of prizes to Contestant(s) and/or (ii) disqualification of Contestant(s) to the extent that Contestant(s) do not provide the required information to such third party service provider and/or if Contestant(s) does not agree to such additional terms and conditions of service provider.

Contestant(s) are solely responsible for all costs, expenses, fees, and/or payments of any kind (collectively, “Expenses”) incurred in connection with their participation in the Contest. Wiz and/or any other party shall in no event be liable or responsible for any such Expenses. Contestant(s) are fully responsible for all Expenses, including those related to travel to and from the Contest, accommodation costs, costs of food and drinks and any other costs associated with participation. Contestant(s) are solely responsible for obtaining and maintaining all necessary travel documentation, including visas, passports, identification cards, and any other requirements needed to enter the Contest Location.

2. CONTEST PERIOD

The Contest will be held between December 10-11, 2025 in London, UK. Further details of the dates, times and location of the Contest will be provided by Wiz to relevant Contestant(s) prior to the Contest.

3. HOW TO ENTER

Participation in the Contest is subject to the terms and conditions set forth herein. Contestant(s) are not required to make any purchases in order to participate in the Contest.

Contestant(s) can register for the contest by contacting Wiz via the ‘Register Your Exploit’ form on zeroday.cloud and by indicating which targets the Contestant(s) wishes to participate in.

Contestant(s) can register multiple entries for a given category, but each entry must be for a different target in that category (See Section 4 below for categories, targets, and prizes). Contestant(s) can only register once per target. Every entry must be a separate and unique exploit chain. For an entry to be eligible, the exploit must be of the latest, fully patched version of the target software available, installed in its default configuration. Default configurations and additional specifications about the targets are available in the Contest’s GitHub repository, which is incorporated by reference and forms an integral part of the Contest Rules. Wiz reserves the right, in its sole discretion, to add non-default configurations for specific targets if Wiz deems such configurations relevant to cloud environments. If non-default configurations are added by Wiz to a target, entries based on non-default configurations will only be accepted for that target if the number of valid entries based on default configurations for the target doesn’t reach the maximum of 3 accepted entries per target. Valid entry is an entry that meets all the relevant technical and non-technical Contest Rules and specifications.

Notwithstanding anything to the contrary, the aforementioned limitations apply to teams as a whole. For example, a team can only register once per target.

The maximum number of Contestant(s) that can participate in the event for each target is 3. For these purposes, a team is counted as one Contestant. If Wiz receives more than 3 valid entries for the same target, only the earliest 3 entries found valid by Wiz will be eligible to participate in the event.

A successful entry must leverage a vulnerability to modify the standard execution path of a program or process in order to allow the execution of arbitrary instructions. The entry is required to defeat the target's techniques designed to ensure the safe execution of code, such as, but not limited to, Data Execution Prevention (DEP), Address Space Layout Randomization (ASLR) and/or application sandboxing. If a sandbox is present, a full sandbox escape is required.

A successful entry must require no user interaction beyond the action required to launch the attempt and must occur within the user's session with no reboots, or logoff/logons. For example, having to interact with a dialog in order to successfully complete the attempt is not allowed.

A given vulnerability may only be used once across all categories. The initial vulnerability utilized in the entry must be in the registered target. The sandbox escape utilized in the entry must be in the registered target (unless the entry leverages a kernel privilege escalation).

The vulnerabilities utilized in the attack must be unknown, unpublished, and not previously reported to or detected by the vendor or Wiz.

If authentication is present, the exploit must occur prior to authentication to the service or include an authentication bypass, unless stated otherwise for a specific target. An entry that requires a man-in-the-middle attack will not be accepted.

Wiz reserves the right to deny registration to entries or otherwise disqualify any Contestant(s): (a) that do not comply with these Contest Rules, and/or (b) that do not meet the requirements hereunder. Registration of exploits for the Contest closes at 5:00 p.m. Greenwich Mean Time on December 1st, 2025.

Additionally, to be eligible to participate in the Contest, all team members must register to HackerOne Platform and complete standard verification steps (ID Verification, Tax Form, and payout preferences) in the platform. These steps must be completed by 5:00 p.m. Greenwich Mean Time on November 20th, 2025. Your access to and use of the HackerOne platform will be in accordance with HackerOne’s applicable terms and conditions. If you don't already have a HackerOne account, one can be created here (https://hackerone.com/users/sign_in), and instructions for completing these standard verification steps are available here: Tax Forms, Payment Preferences, ID Verification.

Wiz will review all submitted entries to determine whether they meet all the relevant technical and non-technical Contest Rules. Wiz may contact the submitting Contestant(s) for additional details as part of this review, in order to determine whether the entry meets all Contest Rules. Only if Wiz determines, in its sole discretion, that (i) the submitted entry is valid and meets all technical and eligibility criteria, (ii) the Contestant(s) and all team members have timely registered on the HackerOne platform and completed all required ID verification, tax, and payment preference steps, and (iii) the Contestant(s) otherwise comply with these Contest Rules, Wiz will notify such Contestant(s) that they are invited to participate in the live Contest event in London on December 10–11, 2025.

4. TARGETS AND PRIZES

Wiz is offering cash prizes for vulnerabilities and exploitation techniques against the listed targets in the categories below. Each target has its own prize amount indicated below.

If several different underlying vulnerabilities in the same target are successfully compromised during the event, each of these vulnerabilities will entitle the Contestant(s) (either individual or team) that compromised it to the full prize amount for the target. If multiple Contestant(s) successfully compromise the same target utilizing the same underlying vulnerability, the amount for that single target will be split evenly among the winning Contestant(s). The cash prizes in the table below are presented in US Dollars.

Notwithstanding anything to the contrary, if Contestant(s) are a team, a prize for a specific target will be awarded to the winning team as a whole and not per team member. The team may share the prize amongst themselves in a manner they deem fit but Wiz will in no event be liable for payment of the prize amount per team member. A prize awarded to a team will be transferred to the bank account indicated by the team member that submitted the entry that was demonstrated during the Contest and won the prize.

Categories and Prizes:

The contest has six categories consisting of:

  • Databases
  • Containers and Virtualization
  • Kubernetes / Cloud
  • AI
  • Web Servers
  • Devops & Automation

Each category has a set of targets that can be selected by the Contestant(s) during the registration process. All entries must compromise the target and demonstrate arbitrary code execution on the target. For an entry for a specific target to be valid, it must fit the pre-requisites stated for each target and the additional specifications available in the Contest’s GitHub repository, and meet all requirements in these Contest Rules.

For a Contestant’s exploit to be considered successful on stage, it must achieve a full system compromise. This must be proven by executing a specific binary, provided by and placed on the host file system by the judging panel. The Contestant(s) must then demonstrate full control by executing that same binary with an arbitrary parameter specified by the judging panel at the time of the attempt. This means that prizes are only granted for critical, full-chain exploits (e.g., Remote Code Execution, container escapes, VM escapes, or a complete privilege escalation). Low or medium-severity vulnerabilities will not qualify. The judging panel shall decide in their sole discretion whether a Contestant’s exploit performed on stage is successful and meets the requirements specified in these Contest Rules. If the Contestant’s attempt is successful, Wiz may invite the Contestant(s) to participate in a closed conference at a future date, for which the Contestant(s) may receive an additional fee.

Databases Category

A successful exploit in this category must achieve Remote Code Execution on the underlying operating system that hosts the database.

  • For Authenticated targets, the attack can be initiated by a low-privileged, authenticated user.
  • For Unauthenticated targets, the exploit must work without any prior authentication.

The final result in both cases must be the ability to execute arbitrary commands on the server, effectively gaining full control of the database host.

TargetPre-requisitesAdditional SpecificationsPrize Amount in US Dollars
RedisAuthenticatedGitHub Link$25,000
RedisUnauthenticatedGitHub Link$100,000
PostgreSQLAuthenticatedGitHub Link$20,000
PostgreSQLUnauthenticatedGitHub Link$100,000
MariaDBAuthenticatedGitHub Link$20,000
MariaDBUnauthenticatedGitHub Link$100,000

Containers and Virtualization Category

A successful exploit in this category must demonstrate a full escape from the guest environment to the underlying host operating system. The attacker must gain the ability to execute code on the host machine.

  • For targets with prerequisites like "User supplies image" the exploit can be contained within the provided image, but it must break out of the specified containment technology (e.g., Docker, Containerd).
TargetPre-requisitesAdditional SpecificationsPrize Amount in US Dollars
DockerUser provided imageGitHub Link$40,000
DockerArbitrary image (no kernel exploit)GitHub Link$60,000
ContainerdUser provided imageGitHub Link$40,000
ContainerdArbitrary image (no kernel exploit)GitHub Link$60,000
Linux KernelContainer escape on Ubuntu hostGitHub Link$30,000

Kubernetes / Cloud Category

A successful exploit must result in Remote Code Execution on the target component's underlying host or within its privileged containerized environment.

  • For the Kubernetes API Server and Kubelet, this means an attacker must be able to compromise the target from the network and execute arbitrary code on the Kubernetes node.
  • For Grafana, the exploit must achieve RCE on the server hosting the Grafana instance, respecting the "Authenticated" or "Unauthenticated" prerequisite.
TargetPre-requisitesAdditional SpecificationsPrize Amount in US Dollars
Kubernetes API ServerPort 443GitHub Link$80,000
Kubelet ServerPorts 10250, 10255, 10254GitHub Link$40,000
GrafanaAuthenticatedGitHub Link$10,000
GrafanaUnauthenticatedGitHub Link$40,000
PrometheusGitHub Link$40,000
Fluent BitGitHub Link$10,000

AI Category

A successful exploit must achieve unauthenticated Remote Code Execution on the system running the AI/ML framework. The attack vector must be a specially crafted API request or input data that triggers a vulnerability leading to arbitrary code execution with the privileges of the target service.

Crucially, the exploit cannot rely on the simple loading of a malicious or backdoored model file. The vulnerability must be in the framework's code that processes the input, not in the model that is loaded.

TargetPre-requisitesAdditional SpecificationsPrize Amount in US Dollars
OllamaGitHub Link$25,000
vLLMGitHub Link$25,000
NVIDIA Container ToolkitGitHub Link$40,000

Web Servers Category

A successful exploit must achieve Remote Code Execution on the underlying operating system hosting the web server. The attack must be initiated remotely via standard web protocols (e.g., HTTP/S) and must not require any user interaction on the server side. The result should be the ability to execute arbitrary commands with the privileges of the web server process.

TargetPre-requisitesAdditional SpecificationsPrize Amount in US Dollars
NGINXGitHub Link$300,000
TomcatGitHub Link$100,000
EnvoyGitHub Link$50,000
CaddyGitHub Link$50,000

Devops & Automation Category

A successful exploit must result in Unauthenticated Remote Code Execution on the target component's underlying host or within its privileged containerized environment.

TargetPre-requisitesAdditional SpecificationsPrize Amount in US Dollars
Apache AirflowUnauthenticatedGitHub Link$40,000
JenkinsUnauthenticatedGitHub Link$40,000
GitLab CEUnauthenticatedGitHub Link$40,000

Prizes must be accepted as awarded and cannot be transferred, assigned or substituted. Any unused portion of a prize will be forfeited and has no cash value. Taxes on prizes, if any, are the sole responsibility of the winner. Wiz reserves the right to withhold and deduct such taxes from the prize as required by applicable law.

Wiz reserves the right, in its sole discretion, to add or modify the categories or targets if a new version of one of the targets is released, updated, hardened, becomes unavailable, or recalled between the date of release of the Contest Rules and the date of the Contest.

5. WINNER SELECTION

During the Contest, invited Contestant(s) will be required to demonstrate their exploit on stage within the allotted timeframe. If more than one Contestant(s) registers for a given target, the order for the Contestant(s) demonstration on stage will be drawn at random. Each Contestant(s) has up to three (3) attempts to succeed. Each of the three (3) attempts will be individually limited to a time period of ten (10) minutes. For an attempt to be deemed successful, all elements of the attempt must be completed within the 10-minute window. All three (3) attempts must be completed within thirty (30) minutes, excluding the time needed to setup the device prior to the attempt. Notwithstanding the foregoing, Wiz may extend a Contestant’s time period, at Wiz’s discretion. For example, if during an attempt, a Contestant(s) experiences any connection issues caused by inaccessible or unavailable networks, servers, Internet Service Providers, or other connections that are outside of Contestant’s or Wiz’s control.

Following a successful on-stage demonstration, the Contestant(s) will provide Wiz with a fully functioning exploit and a whitepaper explaining the vulnerabilities and exploitation techniques used in the entry. In the case that multiple vulnerabilities were exploited to gain code execution, details about all of the vulnerabilities (memory corruption, infoleaks, escalations, etc.) leveraged and the sequence in which they are used must be provided to be eligible to receive the prizes. All of the aforementioned information shall be deemed “Exploit Information”. Wiz judging panel will validate that the demonstrated exploit meets all the requirements and specifications in the Contest Rules, including but not limited to all requirements under Sections 3 and 4, and confirm with the maintainer of the relevant target technology whether the vulnerability was previously unknown. If the demonstrated exploit meets all the requirements and specifications and the vulnerability was previously unknown, the Contestant(s) will be eligible for the applicable prize in accordance with these Contest Rules. If multiple Contestant(s) successfully compromise the same target utilizing the same underlying vulnerability and their exploits are then validated by Wiz, the prize amount for that single target will be split evenly among the winning Contestant(s).

The targets will be running on the latest, fully patched version of the software available on the selected target. All targets will be installed in their default configurations, which are available in the Contest’s Github repository. Wiz reserves the right, in its sole discretion, to add non-default configurations if Wiz deems such configurations relevant to cloud environments.

WIZ RESERVES THE RIGHT TO SOLELY DETERMINE WHAT CONSTITUTES A VALID ENTRY.

6. EXPLOIT INFORMATION, CONFIDENTIALITY AND PUBLICITY

As between Wiz and the Contestant(s), Vulnerabilities and exploit techniques, exploit code revealed by Contest winners and all information, code, technical write ups, whitepapers ,exploitation techniques, exploits, and/or details about the vulnerabilities and/or exploits that are disclosed by the Contest winner in connection with the Contest (“Exploit Information”) shall be owned by Wiz. As between Wiz and the Contestant(s), Contest winner(s) hereby agree and understand that all right, title, and interest (including without limitation all intellectual property rights) in and to all Exploit Information, as well as (regardless of inventorship or authorship) any improvements, derivatives, and/or modifications thereof/to (collectively, the "Exploit IPR"), shall be owned by Wiz. To the extent any Exploit IPR does not vest automatically in Wiz upon development, creation or disclosure, Contest winner(s) hereby irrevocably transfer and assign (and agree to transfer and assign) such Exploit IPR to Wiz. To the extent applicable law prevents future assignments, Contest winner(s) shall transfer and assign (and shall procure the transfer and assignment of) such Exploit IPR to Wiz. Notwithstanding anything contained in the laws of any jurisdiction, the Exploit IPR shall not revert to Contest winner(s) if not exercised at any time whatsoever. Contest winner(s) will assist and cooperate with Wiz in all respects, and will execute documents, and will take such further acts reasonably requested by Wiz to enable Wiz to acquire, transfer, maintain, perfect and enforce its intellectual property rights and other legal protections for the Exploit IPR.

Without derogating from the aforementioned, except for the prize amounts specified in these Contest Rules, Contestant(s) hereby explicitly waives (i) any interest, claim or demand that it may have for, or may be entitled to, with respect to any consideration, compensation or royalty in connection with the Exploit IPR, including but not limited to, any claims for consideration, compensation or royalty pursuant to any applicable laws in any jurisdiction; and (ii) any moral rights, artists’ rights, or any other similar rights worldwide (the “Moral Rights”) that Contest winner(s) had, have or may have in the future in or with respect to Exploit IPR. Contest winner(s) further waive the right to bring any claims, demands or allegations to receive compensation, consideration or royalty with respect to Moral Rights and/or the Exploit IPR.

To that extent, and to the extent that Contest winner (s) incorporates any intellectual property rights, including any intellectual property rights of the Contest winner(s) or a third party which cannot be assigned to Wiz (collectively, the “Non-Assignable Rights”), Contest winner (s) hereby grant to Wiz a nonexclusive, worldwide, perpetual, irrevocable, fully paid-up, transferable, sub-licensable and royalty-free license to use such Non-Assignable Rights in any manner Wiz deems fit.

Exploit Information may be disclosed by Wiz to the maintainers of the target software, Partner Companies, and/or as otherwise required by Wiz. Contest winner(s) must keep Exploit Information strictly confidential by contestant(s) and by contestant(s) shall not publish or otherwise publicize any Exploit Information without Wiz’s prior written consent. Upon disclosure of the Exploit Information, Contest winner(s) may request to be referenced as the researcher of such exploits in connection with any publications of such Exploit Information published by Wiz. Wiz will not be responsible for any failure to reference researchers who did not request to be referenced by the end of the Contest.

7. INDEMNIFICATION BY CONTESTANT(S)

By entering the Contest, Contestant releases and holds Wiz and the Release Parties (as defined below) harmless from any and all liability for any injuries, loss, or damage of any kind to the Contestant or any other person or third party, including personal injury, death, or property damage, resulting in whole or in part, directly or indirectly, from acceptance, possession, use, or misuse of any prize, participation in the Contest, any breach of the Contest Rules, or in any prize-related activity.

8. LIMITATION OF LIABILITY

By entering the Contest, each Contestant agrees that Wiz, its affiliates, subsidiaries, Partner Companies and each of their respective officers, directors, employees, representatives, and agents (collectively, the “Released Parties”) shall not be liable for any losses, damages, or injuries of any kind resulting from participation in the Contest or any Contest-related activity, or from acceptance, possession, use, or misuse of any prize.

Without limiting the foregoing, the Released Parties shall not be responsible for:

  • any computer, online, software, telephone, hardware, or technical malfunctions that may occur;
  • any incorrect or inaccurate information, whether caused by website users or by any of the equipment or programming associated with or utilized in the Contest or by any technical or human error which may occur in the administration of the Contest;
  • any problems, failures, or technical malfunctions of any telephone network or lines, computer online systems, servers, providers, computer equipment, software, e-mail, players, or browsers, on account of technical problems or traffic congestion on the Internet, at any website, or on account of any combination of the foregoing;
  • any injury or damage to the Contestant or to any computer related to or resulting from participating or downloading materials in this Contest;
  • any damages of any kind suffered or incurred by the vendors of the targets as a result of any acts or omissions of Contestant;
  • any lost or misdirected prizes;
  • expenses or costs incurred or suffered by Contestant in connection with the Contest;
  • any non-payment of prize amounts to the extent such payments cannot made due to legal limitations that apply to any of the Related Parties and/or their service providers.
  • for any Contestant’s inability to enter or travel to the Contest Location for any reason; and/or
  • cancellation of the Contest or if the contest cannot be conducted as planned for any reason, including for any reasons beyond the control of Wiz, such as infection by computer virus, bugs, tampering, unauthorized intervention, fraud, technical failures, or corruption of the administration, security, fairness, integrity, natural disaster, or proper conduct of this Contest;

In no event shall Wiz’s total aggregate liability to any Contestant (either individual or team as a whole) exceed the greater of (i) the value of the prize awarded to the Contestant(s), if any, or (ii) one hundred thousand US dollars ($100,000).

9. CONDUCT

As a condition of participating in the Contest, each Contestant(s) agrees to be bound by these Contest Rules and indicates consent as part of the registration process. Contestant(s) further agrees to be bound by the decisions of Wiz, which shall be final and binding in all respects. Wiz reserves the right, at its sole discretion, to disqualify any Contestant(s) found to be: (a) violating the Contest Rules; (b) tampering or attempting to tamper with the Contest or any of the equipment, the Contest website or Contest programming; or (c) acting in an unsportsmanlike or disruptive manner that interferes with any portion of the Contest; or (d) engaging in any form of harassing, offensive, discriminatory, or threatening speech or behavior, including (but not limited to) relating to race, gender, gender identity and expression, national origin, religion, disability, marital status, age, sexual orientation, military or veteran status, or other protected category. CAUTION: ANY ATTEMPT TO DELIBERATELY UNDERMINE THE LEGITIMATE OPERATION OF THE CONTEST MAY BE A VIOLATION OF CRIMINAL AND CIVIL LAWS. SHOULD SUCH AN ATTEMPT BE MADE, WIZ RESERVES THE RIGHT TO SEEK REMEDIES AND DAMAGES TO THE FULLEST EXTENT PERMITTED BY LAW, INCLUDING BUT NOT LIMITED TO CRIMINAL PROSECUTION.

If Contestant(s) are testing against infrastructure or services owned or managed by any of the Partner Companies or any other third party in connection to the Contest, Contestant(s) must adhere to all applicable rules of engagement, terms or conditions of such third party that are relevant to testing of a provider or a vendor’s environment.

10. PRIVACY / USE OF PERSONAL INFORMATION

By participating in the Contest, Contestant(s): (i) grants Wiz the right to use his/her name, likeness, mailing address, telephone number, e-mail address, and any other personal information reasonably requested by Wiz ("Personal Information") for the purpose of administering the Contest, including but not limited to verifying eligibility, enabling Contestant's participation, contacting and announcing the winners and, where applicable, issuing payment; and (ii) acknowledges that Wiz may disclose his/her Personal Information to third-party agents, partners and service providers of Wiz in connection with any of the activities listed in (i) above. Wiz will use the Contestant's Personal Information only for purposes related to the Contest, and process the Contestant's Personal Information in accordance with Wiz's Privacy Policy at: https://legal.wiz.io/#privacy-policy. A Team member registering to the Contest on behalf of its team shall obtain the necessary rights, permissions, authorizations and/or consents to share the information of its team members with Wiz and shall communicate to its team members the manner in which Wiz may use its team members information.

11. INTELLECTUAL PROPERTY

All intellectual property, including but not limited to trademarks, trade names, logos, copyrights, designs, promotional materials, web pages, source code, drawings, illustrations, slogans, and representations used, displayed, presented and otherwise published by Wiz in connection with the Contest are owned by Wiz, its affiliates or its licensees. All rights are reserved. Unauthorized copying or use of any copyrighted material or intellectual property without the express written consent of its owner is strictly prohibited.

12. TERMINATION

Wiz reserves the right, in its sole discretion, to cancel, terminate, modify, or suspend the Contest, in whole or in part, if circumstances arise beyond its reasonable control that materially affect the administration, security, fairness, integrity, or proper conduct of the Contest. Such circumstances include, but are not limited to, acts of God, natural disasters, strikes, shortages, riots, insurrection, fires, floods, storms, explosions, war, acts of terrorism, governmental or quasi-governmental actions, power outages, or any technical, security, or other issues arising from or relating to changes to the Black Hat conference or the Partner Companies or any other third party. In such event, Wiz shall not be liable for any damages, losses, or expenses caused by such cancellation or modification.

13. HEALTH AND SAFETY

Contestant(s) must comply with all health and safety guidelines, guidelines and instructions that Wiz or the venue provides concerning Contestant’s attendance of the Contest and adhere to any applicable legal and regulatory requirements as necessary. Failure to comply with any direction given may result in Contestant(s) being removed from the venue or barred from the Contest. Contestant(s) must take all reasonable steps to ensure his own health and safety when attending the Contest or participating in any of the activities forming part of the Contest. Any behavior or act or conduct by you which Wiz or the venue considers to pose any medical, security or safety risk (including without limitation any abusive behavior, physical or psychological) will lead to Contestant(s) immediate removal from the venue and prohibition from further participation in the Contest. Contestant(s) hereby acknowledges and agrees that his attendance at and participation in the Contest is at his own risk.

14. FILMING AND IMAGE RIGHTS

By attending the Contest, Contestant(s) grant Wiz, its affiliates, and its independent contractors the right to record, film, photograph, and capture Contestant’s voice and image in any media at the Event (the “Recordings”). Contestant(s) irrevocably grant to Wiz and its affiliates, agents, employees, and assigns an irrevocable, nonexclusive, perpetual, worldwide, royalty-free right and license to make the fullest use, including without limitation, to reproduce, modify, distribute, publicly display, and translate, for any purpose relating to our business, all or any part of the Recordings. Such use includes, for example, the production and release of promotional ads of, or other marketing materials related to Wiz's or its partners' products, services, and brand. Wiz may edit the Recordings, use them alone or together with other information, and allow others to use and disseminate them. To the maximum extent permitted by law, Contestant(s) waives any moral rights Contestant(s) may have in the Recordings.

15. LAW

These are the official Contest Rules. The Contest is subject to applicable laws and regulations. The Contest Rules are subject to change without notice in order to comply with any applicable laws or the policy of any other entity having jurisdiction over Wiz and/or the Contest. All issues and questions concerning the construction, validity, interpretation, and enforceability of the Contest Rules or the rights and obligations as between the Contestant(s) and Wiz in connection with the Contest shall be governed by and construed in accordance with the laws of England and Wales including procedural provisions without giving effect to any choice of law or conflict of law rules or provisions that would cause the application of any other jurisdiction's laws. The competent courts of London, England shall have exclusive jurisdiction over any matter in connection with these Contest Rules.

16. PRECEDENCE

In the event of any discrepancy or inconsistency between the Contest Rules and disclosures or other statements contained in any Contest-related materials, the Contest Rules shall prevail, govern, and control.