Responsible Business

Last updated: October 26, 2026

Our approach

Pwned Labs is a small company operated by PWNED LABS CYBERSECURITY TRAINING SERVICES FZCO from Dubai, with team members in several countries. We sell cybersecurity training and penetration testing to individuals and businesses, and our customers include enterprises, government bodies and security consultancies that ask their suppliers to show how they conduct business. This page sets out the standards we hold ourselves to, written to be accurate for a company of our size.

Anti-bribery and anti-corruption

We do not offer, pay, request or accept bribes, kickbacks or facilitation payments, directly or through anyone acting for us. Gifts and hospitality given or received stay modest, are never offered to influence a decision, and are never given to public officials. We make no political donations. We set commercial terms with partners and resellers, including margins and referral fees, in written agreements, and we keep accurate books and records so that payments in and out can be traced to their purpose. These rules apply to our founders, employees and consultants, and we expect the same from the companies we work with.

Human rights and working conditions

Everyone who works for Pwned Labs does so under a written agreement that sets out the role, the pay and the terms, and pay is made on the agreed schedule. We do not use forced, bonded or child labor, and we would not knowingly work with a supplier that does. We do not discriminate on the grounds of race, religion, sex, nationality, age, disability or any other protected characteristic in hiring, pay or how we treat people. Team members work from our Dubai office or remotely, and anyone can raise a concern about their treatment through the contact below, which reaches a founder, without fear of retaliation.

Because our training builds practical offensive security capability, we also consider who we sell to. Every customer is screened against international sanctions and denied-party lists, and enterprise and reseller relationships receive enhanced checks, as described on our Trust & Security page.

Environment

Our footprint is small and we keep it that way. We have no physical products, no manufacturing and no warehousing. We have one office in Dubai. Our training is delivered online, and the cloud lab environments students attack are created when needed and torn down when a session ends, so lab infrastructure is not left running when it is not in use. Where a customer asks for in-person delivery we travel for it; otherwise workshops and bootcamps run remotely.

Suppliers

We use a small number of cloud and SaaS providers to run the business. The ones that process personal data on our behalf are listed on our Sub-processors page, with the safeguards that cover each one. We expect our suppliers to meet the standards on this page, and we would stop working with one that did not.

Raising a concern

If you believe anyone acting for Pwned Labs has fallen short of these standards, we want to hear about it. Email hi@pwnedlabs.io. The mailbox is read by a founder. We look into every report, keep the reporter's identity confidential where asked, and take no action against anyone for raising a concern in good faith.

Trust & Security | Privacy Policy | Sub-processors | Vulnerability Disclosure