Skip to content
Attack & Defense

Defend yours. Attack theirs.

Live, team-versus-team competition. Every team runs the same vulnerable services - patch and defend your own while exploiting the same flaws on everyone else's, scored round after round.

See pricing
The Attack & Defense dashboard: exploit and flag counters, submissions and issues charted per game tick, accepted flags per challenge, and a per-team heatmap of every tick.
Team vs. team
Every team gets its own copy of the same vulnerable services.
Offense and defense at once
Capture rival flags while you patch and protect your own.
Round-based scoring
Attack, defense and availability points on a live scoreboard, every round.
Fully managed
Players don't need to deploy any tools or servers - we provide everything.
Custom tooling
We provide Branch, the exploitation platform used by the Bulgarian National Cybersecurity Team.

Available on request - environments are provisioned per engagement.

How does it work?

Each round, teams attack one another's copies of the same vulnerable service while patching their own. All while monitoring traffic and identifying exploits in real-time.

Pricing

Pricing.

Choose what fits your team. Every engagement can be tailored to your goals.

Tailored

Scoped to your goals, audience and timeline.

Let's talk

  • Team vs. team
  • Offense and defense at once
  • Round-based scoring

Other services

All services

FAQ

Questions? Answers.

Is there a free version?

Yes. The CTF Community Edition is free at demo.ctfbazaar.com, and the Cyber Range Community Edition is free at range.ctfbazaar.com - with 24 hands-on labs and free learning courses.

How far in advance should we book?

We've launched programs in as little as three weeks, but for custom challenges and larger events we recommend reaching out one to three months ahead.

Can you build challenges around our own infrastructure?

Yes. Professional and Enterprise engagements can include custom challenges and cyber ranges modeled on your industry, stack and threat landscape.

Do you offer discounts for universities and non-profits?

Yes. Academic institutions, student teams and community conferences qualify for special pricing - get in touch and tell us about your program.

Is our phishing campaign data safe?

Campaign data is handled confidentially and only for the purpose of the engagement. Our report generator even runs fully in your browser, so exports never leave your machine.

What happens if something breaks during a live event?

Our events run on redundant, multi-zone infrastructure with real-time monitoring and a failover plan. Our team is on call for the full duration of the event.

Ready to put your team to the test?

Tell us about your event or organization. We'll design the challenges, run the platform and deliver the results.

Explore services

Get in touch

Choose how you'd like to reach us.