Ethical Hacking Isn't Illegal — Here's Where the Line Actually Is

The legal difference between ethical hacking and a crime isn't the technique — the same tools, the same scans, the same exploits are used on both sides. The difference is whether you had written authorisation to do it, on that specific system, within a defined scope, before you started.

A proper engagement starts with a scope document: which systems are in bounds, which are explicitly off-limits, what testing windows are allowed, and who to contact if something breaks. Testing anything outside that document — even accidentally, even on the same network — is where students get nervous, and rightly so.

Documentation matters just as much as the testing itself. A penetration test that finds real vulnerabilities but produces no clear, actionable report has failed at the actual job, which is helping the client fix things, not just proving you could break in.

Every exercise in our Cyber Security and Ethical Hacking courses runs on an isolated lab network with this exact discipline, so the habits — not just the tools — are what you walk away with.