Benevolent hackers, who uncover vulnerabilities in the IT systems of state-owned or multinational companies for the public good, without harmful intention or financial interest, calling attention to deficiencies potentially affecting the rights and interest of thousands, often still end up being prosecuted rather than thanked. In this guide, we would like to provide advice to ethical hackers on how to avoid being reported and prosecuted. We have provided legal representation in several criminal procedures against ethical hackers, and in our experience, you, as an ethical hacker, can do a great deal to convince the court as well as the public that you acted with good intentions. If you follow our advice, it will be easier for you at court.