Platform
Web
Audience
All developers, architects and testers
Preparedness
General development
Standards and references
OWASP, SEI CERT, CWE and Fortify Taxonomy
Group size
12 participants
Description
Cydrill’s Code CTF is a one-day corporate competition event specifically designed for corporate engineering teams – architects, developers, testers and DevOps. It combines realistic attack scenarios with secure coding exercises, helping developers understand not just how to attack web applications, but more importantly, how to protect against these attacks effectively.
Like traditional CTFs, this event keeps the core attacker mindset and brings hands-on challenges and gamified challenge-based learning. What differentiates it is the strong defensive focus in the application development arena rather than just the infrastructure, with an IDE-embedded plugin that brings both exploitation and remediation directly into the developer workflow.
Security is a team sport. So, participants work in small groups to exploit and fix vulnerabilities in a real-world web application, having fun and competing on a live leaderboard. The result is a highly engaging learning experience with immediate, practical outcomes for your organization.
In Code CTF everything maps directly to development work: multiple vulnerability classes are included aligned to the actual trends in security today, such as authentication, authorization, injection, logic flaws, etc. Challenges are tailored to the specific technology stack and tools used by the participants, for instance Python, C# / .NET, Java, C/C++ or JS/TS/Node – whatever fits your technology stack.
Experiment!
Compete!
Have fun!
Note: The Code CTF usually comes after a secure coding training, but it can also be organized as a stand-alone event. Therefore, the challenges are designed for mixed-skill groups and security expertise is not required upfront.