Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning podcasts, leading pentest gear, and inclusive community – where all hackers belong.
The success of our business is dependent on the trust and confidence we earn from our employees, customers and shareholders. We gain credibility by adhering to our commitments, displaying honesty and integrity and reaching company goals solely through honorable conduct. It is easy to say what we must do, but the proof is in our actions. Ultimately, we will be judged on what we do.
When considering any action, it is wise to ask: Will this build trust and credibility for Hak5? Will it help create a working environment in which Hak5 can succeed over the long term? Is the commitment I am making one I can follow through with? The only way we will maximize trust and credibility is by answering “yes” to those questions and by working every day to build our trust and credibility.
We all deserve to work in an environment where we are treated with dignity and respect. Hak5 is committed to creating such an environment because it brings out the full potential in each of us, which, in turn, contributes directly to our business success. We cannot afford to let anyone’s talents go to waste.
Hak5 is an equal employment/affirmative action employer and is committed to providing a workplace that is free of discrimination of all types and from abusive, offensive or harassing behavior. Any employee who feels harassed or discriminated against should report the incident to his or her manager or to human resources.
All Hak5 employees are also expected to support an inclusive workplace by adhering to the following conduct standards:
Hak5 will not tolerate discrimination, harassment or any behavior or language that is abusive, offensive or unwelcome.
At Hak5 everyone should feel comfortable to speak his or her mind, particularly with respect to ethics concerns. Managers have a responsibility to create an open and supportive environment where employees feel comfortable raising such questions. We all benefit tremendously when employees exercise their power to prevent mistakes or wrongdoing by asking the right questions at the right times.
Hak5 will investigate all reported instances of questionable or unethical behavior. In every instance where improper behavior is found to have occurred, the company will take appropriate action. We will not tolerate retaliation against employees who raise genuine ethics concerns in good faith.
Employees are encouraged, in the first instance, to address such issues with their managers or the HR manager, as most problems can be resolved swiftly. If for any reason that is not possible or if an employee is not comfortable raising the issue with his or her manager or HR, Hak5’s manager does operate with an open-door policy.
Management has the added responsibility for demonstrating, through their actions, the importance of this Code. In any business, ethical behavior does not simply happen; it is the product of clear and direct communication of behavioral expectations, modeled from the top and demonstrated by example. Again, ultimately, our actions are what matters.
To make our Code work, managers must be responsible for promptly addressing ethical questions or concerns raised by employees and for taking the appropriate steps to deal with such issues. Managers should not consider employees’ ethics concerns as threats or challenges to their authority, but rather as another encouraged form of business communication. At Hak5, we want the ethics dialogue to become a natural part of daily work.
Hak5’s commitment to integrity begins with complying with laws, rules and regulations where we do business. Further, each of us must have an understanding of the company policies, laws, rules and regulations that apply to our specific roles. If we are unsure of whether a contemplated action is permitted by law or Hak5 policy, we should seek the advice from the resource expert. We are responsible for preventing violations of law and for speaking up if we see possible violations.
Because of the nature of our business, some legal requirements warrant specific mention here.
Hak5 products and technology are only available to BIS recognized license exception ENC favorable treatment countries pursuant to US 15 CFR Supplement No 3 to Part 740.
Hak5 products and technology are classified unrestricted, MMKT with ECCN 5D992.c and NLR CCATS # self-class.
Hak5 software products (available from https://downloads.hak5.org) are designed and tested in the United States, with development occurring in both the United States and United Kingdom. This includes all firmware for information processing devices, utilities, encoders, and server application software (Cloud C2).
Hak5 hardware products (also known as "Hak5 Gear", as listed at https://shop.hak5.org/collections/hak5-gear) are designed and tested in the United States, with manufacturing and assembly occuring in the People's Republic of China.
Hak5 product(s), per NDAA 889(A)(1)(B), are not manufactured by, contain components manufactured by, or receive substantial influence from entities prohibited by Section 889 of the 2019 NDAA. These entities include the following companies and any of their subsidiaries or affiliates: Hytera Communications Corporation, Huawei Technologies Company, ZTE Corporation, Dahua Technology Company, Hangzhou Hikvision Digital Technology Company.
Hak5, per FAR 52.204-25, represents that it will not provide "Covered telecommunications equipment or services" as that term is defined in FAR 52.204-25 to the Government in the performance of any contract, subcontract or other contractual instrument resulting from a solicitation.
Hak5, per FAR 52.204-24, represents that it will not provide covered telecommunications equipment or services to the Government in the performance of any contract, subcontract or other contractual instrument resulting from this solicitation.
Hak5, per FAR 52.204-24, represents that it does not use covered telecommunications equipment or services, or use any equipment, system, or service that uses covered telecommunications equipment or services.
We are dedicated to ethical, fair and vigorous competition. We will sell Hak5 products and services based on their merit, superior quality, functionality and competitive pricing. We will make independent pricing and marketing decisions and will not improperly cooperate or coordinate our activities with our competitors. We will not offer or solicit improper payments or gratuities in connection with the purchase of goods or services for Hak5 or the sales of its products or services, nor will we engage or assist in unlawful boycotts of particular customers.
It is important that we respect the property rights of others. We will not acquire or seek to acquire improper means of a competitor’s trade secrets or other proprietary or confidential information. We will not engage in unauthorized use, copying, distribution or alteration of software or other intellectual property.
We will not selectively disclose (whether in one-on-one or small discussions, meetings, presentations, proposals or otherwise) any material nonpublic information with respect to Hak5, its securities, business operations, plans, financial condition, results of operations or any development plan. We should be particularly vigilant when making presentations or proposals to customers to ensure that our presentations do not contain material nonpublic information.
Hak5 is dedicated to maintaining a healthy environment. A safety manual has been designed to educate you on safety in the workplace. If you do not have a copy of this manual, please see the HR department.
We must avoid any relationship or activity that might impair, or even appear to impair, our ability to make objective and fair decisions when performing our jobs. At times, we may be faced with situations where the business actions we take on behalf of Hak5 may conflict with our own personal or family interests. We owe a duty to Hak5 to advance its legitimate interests when the opportunity to do so arises. We must never use Hak5 property or information for personal gain or personally take for ourselves any opportunity that is discovered through our position with Hak5.
Determining whether a conflict of interest exists is not always easy to do. Employees with a conflict of interest question should seek advice from management. Before engaging in any activity, transaction or relationship that might give rise to a conflict of interest, employees must seek review from their managers or the HR department.
Hak5 is committed to competing solely on the merit of our products and services. We should avoid any actions that create a perception that favorable treatment of outside entities by Hak5 was sought, received or given in exchange for personal business courtesies. Business courtesies include gifts, gratuities, meals, refreshments, entertainment or other benefits from persons or companies with whom Hak5 does or may do business. We will neither give nor accept business courtesies that constitute, or could reasonably be perceived as constituting, unfair business inducements that would violate law, regulation or policies of Hak5 or customers, or would cause embarrassment or reflect negatively on Hak5’s reputation.
Most business courtesies offered to us in the course of our employment are offered because of our positions at Hak5. We should not feel any entitlement to accept and keep a business courtesy. Although we may not use our position at Hak5 to obtain business courtesies, and we must never ask for them, we may accept unsolicited business courtesies that promote successful working relationships and good will with the firms that Hak5 maintains or may establish a business relationship with.
Employees who award contracts or who can influence the allocation of business, who create specifications that result in the placement of business or who participate in negotiation of contracts must be particularly careful to avoid actions that create the appearance of favoritism or that may adversely affect the company’s reputation for impartiality and fair dealing. The prudent course is to refuse a courtesy from a supplier when Hak5 is involved in choosing or reconfirming a supplier or under circumstances that would create an impression that offering courtesies is the way to obtain Hak5 business.
We may accept occasional meals, refreshments, entertainment and similar business courtesies that are shared with the person who has offered to pay for the meal or entertainment, provided that:
Employees may accept unsolicited gifts, other than money, that conform to the reasonable ethical practices of the marketplace, including:
Generally, employees may not accept compensation, honoraria or money of any amount from entities with whom Hak5 does or may do business. Tangible gifts (including tickets to a sporting or entertainment event) that have a market value greater than $100 may not be accepted unless approval is obtained from management.
Employees with questions about accepting business courtesies should talk to their managers or the HR department.
Any employee who offers a business courtesy must assure that it cannot reasonably be interpreted as an attempt to gain an unfair business advantage or otherwise reflect negatively upon Hak5. An employee may never use personal funds or resources to do something that cannot be done with Hak5 resources. Accounting for business courtesies must be done in accordance with approved company procedures.
Other than to our government customers, for whom special rules apply, we may provide nonmonetary gifts (i.e., company logo apparel or similar promotional items) to our customers. Further, management may approve other courtesies, including meals, refreshments or entertainment of reasonable value, provided that:
We will make certain that all disclosures made in financial reports and public documents are full, fair, accurate, timely and understandable. This obligation applies to all employees, including all financial executives, with any responsibility for the preparation for such reports, including drafting, reviewing and signing or certifying the information contained therein. No business goal of any kind is ever an excuse for misrepresenting facts or falsifying records.
Employees should inform Executive Management and the HR department if they learn that information in any filing or public communication was untrue or misleading at the time it was made or if subsequent information would affect a similar future filing or public communication.
We create, retain and dispose of our company records as part of our normal course of business in compliance with all Hak5 policies and guidelines, as well as all regulatory and legal requirements.
All corporate records must be true, accurate and complete, and company data must be promptly and accurately entered in our books in accordance with Hak5’s and other applicable accounting principles.
We must not improperly influence, manipulate or mislead any unauthorized audit, nor interfere with any auditor engaged to perform an internal independent audit of Hak5 books, records, processes or internal controls.
At times, we are all faced with decisions we would rather not have to make and issues we would prefer to avoid. Sometimes, we hope that if we avoid confronting a problem, it will simply go away.
At Hak5, we must have the courage to tackle the tough decisions and make difficult choices, secure in the knowledge that Hak5 is committed to doing the right thing. At times this will mean doing more than simply what the law requires. Merely because we can pursue a course of action does not mean we should do so.
Although Hak5’s guiding principles cannot address every issue or provide answers to every dilemma, they can define the spirit in which we intend to do business and should guide us in our daily conduct.
Each of us is responsible for knowing and adhering to the values and standards set forth in this Code and for raising questions if we are uncertain about company policy. If we are concerned whether the standards are being met or are aware of violations of the Code, we must contact the HR department.
Hak5 takes seriously the standards set forth in the Code, and violations are cause for disciplinary action up to and including termination of employment.
Integral to Hak5’s business success is our protection of confidential company information, as well as nonpublic information entrusted to us by employees, customers and other business partners. Confidential and proprietary information includes such things as pricing and financial data, customer names/addresses or nonpublic information about other companies, including current or potential supplier and vendors. We will not disclose confidential and nonpublic information without a valid business purpose and proper authorization.
Company resources, including time, material, equipment and information, are provided for company business use. Nonetheless, occasional personal use is permissible as long as it does not affect job performance or cause a disruption to the workplace.
Employees and those who represent Hak5 are trusted to behave responsibly and use good judgment to conserve company resources. Managers are responsible for the resources assigned to their departments and are empowered to resolve issues concerning their proper use.
Generally, we will not use company equipment such as computers, copiers and fax machines in the conduct of an outside business or in support of any religious, political or other outside daily activity, except for company-requested support to nonprofit organizations. We will not solicit contributions nor distribute non-work related materials during work hours.
In order to protect the interests of the Hak5 network and our fellow employees, Hak5 reserves the right to monitor or review all data and information contained on an employee’s company-issued computer or electronic device, the use of the Internet or Hak5’s intranet. We will not tolerate the use of company resources to create, access, store, print, solicit or send any materials that are harassing, threatening, abusive, sexually explicit or otherwise offensive or inappropriate.
Questions about the proper use of company resources should be directed to your manager.
Hak5 is a high-profile company in our community, and from time to time, employees may be approached by reporters and other members of the media. In order to ensure that we speak with one voice and provide accurate information about the company, we should direct all media inquiries to the manager. No one may issue a press release without first consulting with the manager.
Several key questions can help identify situations that may be unethical, inappropriate or illegal. Ask yourself:
Darren Kitchen
darren@hak5.org