Stage 1 · Lesson 6 of 7
Permission, scope and the law
In security, testing a system you do not own without written permission is unauthorised access in most countries, including Pakistan, India, the UK and the US, however harmless your intent. That includes public chatbots. Probing a company's AI assistant with tricks "to see what happens" is not research unless the company invites it, for example through a programme whose rules name that product.
Real testing work starts with : a written scope saying which systems, which methods, which times, which data you may touch and whom to call if something breaks. On this roadmap you practise only on apps you build and on platforms built for practice.
Common trapposting screenshots of a company's chatbot misbehaving as a , which shows poor judgement to every security hiring manager who sees it.
A question to check yourself, an AI practice session and 1 cheat sheet entry come with the full roadmap. Unlock
Resources for this stage
Start with· follow one of these
- RoadmapFreeSefism Cybersecurity Roadmap
Sefism · Beginner
Sefism's general security roadmap, for any foundation in this stage you want to study in more depth
- CourseFreeProfessor Messer's Security+ (SY0-701) Course
Professor Messer · Beginner
Free videos covering the core security concepts, from access control to cryptography
Practise
Keep handy
Also worth your time
The four questions, diagrams and STRIDE in one practical page
- roadmap.sh: Cyber SecurityGo deeper
A map of the wider security field, so you know where AI testing sits