Defend yours. Attack theirs.
Live, team-versus-team competition. Every team runs the same vulnerable services - patch and defend your own while exploiting the same flaws on everyone else's, scored round after round.

- Team vs. team
- Every team gets its own copy of the same vulnerable services.
- Offense and defense at once
- Capture rival flags while you patch and protect your own.
- Round-based scoring
- Attack, defense and availability points on a live scoreboard, every round.
- Fully managed
- Players don't need to deploy any tools or servers - we provide everything.
- Custom tooling
- We provide Branch, the exploitation platform used by the Bulgarian National Cybersecurity Team.
Available on request - environments are provisioned per engagement.
How does it work?
Each round, teams attack one another's copies of the same vulnerable service while patching their own. All while monitoring traffic and identifying exploits in real-time.
Pricing
Pricing.
Choose what fits your team. Every engagement can be tailored to your goals.
Tailored
Scoped to your goals, audience and timeline.
Let's talk
- Team vs. team
- Offense and defense at once
- Round-based scoring
Other services
All servicesFAQ
Questions? Answers.
Is there a free version?
Yes. The CTF Community Edition is free at demo.ctfbazaar.com, and the Cyber Range Community Edition is free at range.ctfbazaar.com - with 24 hands-on labs and free learning courses.
How far in advance should we book?
We've launched programs in as little as three weeks, but for custom challenges and larger events we recommend reaching out one to three months ahead.
Can you build challenges around our own infrastructure?
Yes. Professional and Enterprise engagements can include custom challenges and cyber ranges modeled on your industry, stack and threat landscape.
Do you offer discounts for universities and non-profits?
Yes. Academic institutions, student teams and community conferences qualify for special pricing - get in touch and tell us about your program.
Is our phishing campaign data safe?
Campaign data is handled confidentially and only for the purpose of the engagement. Our report generator even runs fully in your browser, so exports never leave your machine.
What happens if something breaks during a live event?
Our events run on redundant, multi-zone infrastructure with real-time monitoring and a failover plan. Our team is on call for the full duration of the event.
Ready to put your team to the test?
Tell us about your event or organization. We'll design the challenges, run the platform and deliver the results.
